Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier: PhwnSMH9w4xu3aQX36k1o7oqlMfK5yEX0/hOGA6zijk=
Subject key identifier: 65:C6:3C:8F:0D:6E:5E:4B:B2:F3:F9:5F:27:7D:59:96:49:A9:E3:2A
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 019D9B8767D277E52EF96E579C86E08BCDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number: 15E8
Signing time: Fri 17 Apr 2026 13:00:35 +0000
Manifest this update: Fri 17 Apr 2026 13:00:35 +0000
Manifest next update: Sat 18 Apr 2026 13:00:35 +0000
Files and hashes: 1: 1YDQiRpIkl8dKkn91J4BZcjxLG8.roa (hash: swQzBQz8qYH+Ns05cWnj9m77XbPZt1CRiB4AvNOU1+4=)
2: 6mugNtdudbDdBm5CKSX1k0XhW7Q.roa (hash: QwJGGsLBaGqVdpKRP/uEJPtx3uyW+xZeB/D0UVYiuCA=)
3: JUpyI7xxzukRVQvxBJ5AnLMnp2Q.roa (hash: VfIPApxtxEUphMHmhUBJLte8wFfUS25OGKXWPVng31I=)
4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: 0anNna71+veFR/EduobY/kZF+I1Zpy9XW3cf3OmPjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:67:d2:77:e5:2e:f9:6e:57:9c:86:e0:8b:cd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Apr 17 13:00:35 2026 GMT
Not After : Apr 18 13:00:35 2026 GMT
Subject: CN=65c63c8f0d6e5e4bb2f3f95f277d599649a9e32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:24:13:e8:39:d8:0e:33:8e:39:d2:44:9f:35:
c9:46:d2:1e:a9:2a:06:9e:8a:70:42:ea:f4:72:a0:
23:1d:1d:ba:e5:52:98:13:d7:c2:09:91:64:80:59:
ee:a7:a1:e9:1b:43:48:e7:2b:92:e6:21:8f:c7:df:
a5:9c:81:66:e7:fe:15:a2:a8:45:f3:81:73:a3:d4:
1f:46:32:7d:e6:a8:2b:b4:55:51:94:8e:64:7d:73:
1b:d9:ed:99:e8:be:9e:ae:ad:a3:93:ab:7d:50:78:
fa:33:67:3a:7e:94:69:e3:dd:ec:93:a7:dd:f3:72:
45:b2:22:e6:f6:74:40:41:c0:48:04:0c:11:60:a2:
e3:51:67:28:8e:8d:92:34:e3:56:07:c6:08:e3:75:
a1:e1:a7:29:82:92:ca:ee:02:f4:49:d3:e8:ab:07:
3a:f5:cb:d3:59:d5:6f:28:4b:51:d2:c1:96:66:c8:
17:90:28:4a:59:3a:93:fc:cf:7d:1d:a2:ef:c5:98:
30:39:47:d0:be:d9:c6:cc:fc:07:63:94:2d:a5:a5:
7c:35:63:10:c9:ca:01:57:7f:65:90:b7:d6:8a:04:
8f:76:42:50:2c:71:a0:50:cd:85:6b:32:6b:0b:f7:
d2:d3:39:f2:b6:8c:1f:1b:9a:95:a1:fb:7b:fd:41:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:3C:8F:0D:6E:5E:4B:B2:F3:F9:5F:27:7D:59:96:49:A9:E3:2A
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:eb:0a:be:92:18:a5:e4:bb:73:aa:f8:c7:49:a2:1b:8f:f1:
a1:6e:c1:32:51:01:a3:b3:da:d0:cf:5e:59:ab:0d:b7:27:49:
63:de:59:64:5d:74:6a:93:24:2f:63:9c:84:83:20:47:77:e8:
f9:d8:36:17:34:7a:c6:99:3b:3a:9c:8e:98:d9:a7:1d:5c:e4:
25:04:c1:73:b2:68:76:b9:1b:3d:2b:ff:d2:78:0e:3f:7d:3f:
47:28:57:b2:26:58:91:0e:6e:20:f0:80:15:97:c9:22:cb:27:
f4:a0:4f:e4:e6:ab:b5:23:9d:34:ca:40:1a:69:3b:69:26:cb:
ee:4a:2f:1d:1b:d2:7c:c0:01:e0:21:93:11:2e:23:65:68:cd:
a0:65:58:1a:64:34:eb:b1:8c:04:cb:fe:2c:4f:32:24:ff:63:
fc:1f:86:b0:da:ac:0b:fd:0c:3b:3e:0f:92:c3:bf:49:06:fd:
d5:4f:7c:fb:81:43:32:b3:05:8e:a6:27:64:7a:5f:84:d8:1c:
d3:01:5d:cc:64:48:0c:90:15:a3:c6:7e:3e:b1:fe:e6:ff:8f:
49:a9:fe:3a:bf:4c:24:39:8a:b7:2a:1b:f1:6c:34:29:9e:54:
1b:94:f4:78:12:3b:3c:f3:e7:26:54:a8:cb:cc:2f:dd:e5:ec:
ed:99:9e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:45 2026 by rpki-client