Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
File: ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json)
Hash identifier: AgFycwOPgx8J46ERwAqPR5OPQPYhyoYrdXDAChcaHC4=
Subject key identifier: 9C:6E:94:1F:49:EE:8D:92:13:0F:E6:66:CC:53:E5:C7:34:3B:85:E4
Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Certificate issuer: /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Certificate serial: 019D984FB5D2128C9491A48F2A4AA3212438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
Manifest number: 0E7F
Signing time: Thu 16 Apr 2026 22:00:53 +0000
Manifest this update: Thu 16 Apr 2026 22:00:53 +0000
Manifest next update: Fri 17 Apr 2026 22:00:53 +0000
Files and hashes: 1: 1zk3At_CW_6MtNUlvcs7PWL_MSY.roa (hash: Wx50m0MeMkdSzmVTbDYeihjHelr2/WxDpsYDzzYan64=)
2: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: U8aUNOogaFhrUdpm7er1a1kcqdck9F2pmpNMoxZN2QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b5:d2:12:8c:94:91:a4:8f:2a:4a:a3:21:24:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Validity
Not Before: Apr 16 22:00:53 2026 GMT
Not After : Apr 17 22:00:53 2026 GMT
Subject: CN=9c6e941f49ee8d92130fe666cc53e5c7343b85e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:2c:32:fa:29:fc:e7:2d:58:bb:42:3b:92:
65:d8:dc:53:75:10:1e:13:29:91:e9:30:47:07:18:
81:3f:d4:3a:ba:05:08:d4:0c:61:00:ee:9b:22:95:
36:6a:90:bf:88:71:ea:71:6e:a5:d4:0f:72:65:d2:
0d:f4:35:dd:e0:ed:03:ec:72:75:a5:3e:70:93:ff:
3d:21:de:87:8a:ad:3a:8e:8c:e4:71:17:87:a9:7c:
82:37:33:8e:64:bd:bb:d6:43:fd:4b:8a:f8:5c:9d:
57:f0:a8:2c:6a:55:c1:43:d4:ba:c3:47:0a:ca:d3:
9c:9e:62:59:8b:ab:12:ba:9b:1a:a6:76:42:58:63:
84:d9:ff:ef:83:32:d1:97:fe:35:cd:99:80:d9:bb:
00:ba:e0:84:1c:17:7d:3f:05:79:0d:8e:74:da:7a:
bb:19:03:6a:a2:48:aa:5b:5f:94:57:de:f2:4a:cb:
cd:a1:2f:5e:37:02:9c:a4:a0:9f:48:bb:e3:ac:64:
aa:69:fd:d1:6f:e8:02:ba:f8:0b:0c:ca:0e:5b:19:
84:72:7d:c8:fc:ce:42:a9:e4:d0:35:e7:40:18:c0:
be:8f:71:2f:ef:44:3c:8f:8b:bb:27:de:12:39:18:
4e:2d:35:5c:4d:6a:0e:a7:03:75:ca:77:35:5e:2f:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6E:94:1F:49:EE:8D:92:13:0F:E6:66:CC:53:E5:C7:34:3B:85:E4
X509v3 Authority Key Identifier:
keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:90:46:32:65:93:3d:23:1e:f3:68:f2:b2:26:04:39:d3:94:
01:09:d4:3e:5b:72:01:b5:44:fb:cc:7f:33:80:87:55:55:a3:
91:8b:a7:b6:b9:91:b9:42:f0:95:ba:f0:ed:50:66:8d:03:3e:
9d:eb:4d:9b:e4:89:68:cd:8d:77:45:e2:01:69:9e:e4:f7:3b:
87:e7:fa:d2:0e:44:61:97:cc:d4:a2:64:59:e0:b8:19:8a:ce:
1b:fd:10:c7:be:35:c7:04:39:04:ab:e8:e9:7b:1d:45:3f:99:
36:99:9e:3e:ab:e0:8d:bd:e3:68:73:b7:42:7e:c0:e0:c1:c5:
a8:c4:60:95:b2:bd:d6:30:f6:91:9e:d2:ab:4c:69:bb:86:9c:
ab:0e:9b:74:52:81:f3:f3:cc:39:33:ff:85:00:2e:25:1a:f6:
05:74:04:ce:00:dc:ed:83:17:e8:c4:a6:42:b8:90:ac:9a:45:
8e:13:c1:3c:34:83:c0:3d:e1:70:4c:44:ca:f9:fe:d2:4e:d8:
c7:af:39:6f:b8:96:24:e6:81:62:34:fa:8a:83:9b:f3:fc:b4:
c9:09:f7:80:90:5f:93:48:c2:a3:f7:f2:2e:a6:24:58:a2:d0:
03:e9:15:35:3d:8a:66:bb:f7:de:e8:48:7a:11:e4:a1:fe:9a:
6f:ee:27:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:33 2026 by rpki-client