Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
File: g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json)
Hash identifier: DLg2a7k4F3i8mGust9S1NznMRaTab6kjy/GvMTTLj9c=
Subject key identifier: D4:B4:AC:4A:94:12:35:02:99:62:02:17:70:52:BA:C5:A5:8D:C5:B0
Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Certificate serial: 019DA4C18756F853E895BFCD88047A34E23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
Manifest number: 13BB
Signing time: Sun 19 Apr 2026 08:00:39 +0000
Manifest this update: Sun 19 Apr 2026 08:00:39 +0000
Manifest next update: Mon 20 Apr 2026 08:00:39 +0000
Files and hashes: 1: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: 3yuW1SsDQXPgu8CQ4zwRvaoOXrTAByzNHHCnRYD3H6I=)
2: kb5QsyYCWAXreqKDSNly_eUOWbs.roa (hash: R6T+O7UNp0e/weGB+lvgWkopq769WLtdhPDiexDGO0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:87:56:f8:53:e8:95:bf:cd:88:04:7a:34:e2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780
Validity
Not Before: Apr 19 08:00:39 2026 GMT
Not After : Apr 20 08:00:39 2026 GMT
Subject: CN=d4b4ac4a94123502996202177052bac5a58dc5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:bf:e7:d0:4e:44:02:25:59:b7:ff:63:95:
1e:17:7b:1f:ba:d3:66:5c:c6:66:0a:98:6c:8b:a3:
62:37:d8:2b:09:5e:0f:5f:ad:1b:42:4c:10:60:49:
54:29:0b:95:0e:79:56:0e:20:bf:ba:94:7b:14:27:
94:d1:88:95:05:5f:7f:b0:c6:6c:4a:18:4e:f9:87:
1a:7f:53:f9:60:32:bf:81:22:f4:d6:5c:cc:f7:d5:
c0:8e:22:e7:a8:f7:22:04:30:da:7d:c7:77:33:ce:
cf:eb:7d:c1:2d:c8:99:a7:85:26:20:99:bc:90:72:
2b:69:b9:7a:fc:19:81:c6:31:ea:2c:eb:ba:6c:3a:
d1:bf:11:4d:6c:f6:f1:56:9d:0a:41:c8:92:cf:a2:
5d:5a:d1:e3:e6:e3:9b:c0:e9:02:18:37:ed:0b:c9:
f7:6e:95:b4:3c:1c:96:7e:fd:09:59:48:0d:43:01:
78:17:c9:0a:74:5f:09:ca:99:47:18:5d:67:75:05:
2d:1a:da:03:1f:0e:9d:0b:e4:cd:ba:98:eb:9f:d5:
7f:b1:b2:4d:2a:57:0a:6e:c7:75:e1:06:a8:06:12:
9c:a6:5e:2d:97:34:76:31:da:16:9c:d5:10:93:ab:
5c:05:f8:ed:0f:2c:32:d1:c9:7a:a0:2f:7a:0a:b7:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B4:AC:4A:94:12:35:02:99:62:02:17:70:52:BA:C5:A5:8D:C5:B0
X509v3 Authority Key Identifier:
keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a8:8c:a3:d1:e9:5c:2b:32:4b:bd:5d:62:0f:e0:3c:48:9b:
b4:df:87:09:af:df:38:57:d5:f9:be:e9:d7:ff:3d:ec:a0:fe:
a5:46:b3:e4:fd:68:68:67:22:75:f3:eb:74:cd:76:00:15:d7:
22:91:8a:79:a6:c6:6b:dc:04:fa:2b:66:f3:3e:88:e8:be:f2:
33:67:96:65:52:1e:32:80:40:09:f4:7d:1a:b2:a4:f7:d8:d2:
01:89:1f:84:ff:a9:ea:01:bd:3a:4b:c3:3a:ad:80:4f:63:60:
7c:56:0c:07:6c:bd:25:df:23:c1:3f:bb:94:65:ef:e7:d4:43:
2d:b8:06:2e:cf:fa:ed:83:5e:7f:a3:5e:39:95:ac:26:92:16:
d9:c8:d2:44:26:77:e1:8c:08:e4:e2:af:7c:0e:75:ee:3f:d6:
c6:37:59:28:77:a5:bd:31:71:0b:3c:fb:b5:a7:2b:ce:47:fc:
7a:08:f6:04:86:60:e5:96:70:7b:0b:5d:d5:fb:fa:84:d4:29:
ef:3c:c5:b4:d5:7c:3e:29:11:d6:47:be:c3:10:19:5d:1d:b9:
01:2c:60:bd:bf:61:a4:bc:a3:05:74:14:47:13:86:6d:f3:a2:
b5:af:0a:4d:85:ad:29:39:a0:26:be:34:05:4a:1c:56:03:69:
35:9c:3f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:18 2026 by rpki-client