Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: Zrxgd1V9dr9cPUtA+aFt2UaO8nmyw5jlHSL+ZD1zSoY=
Subject key identifier: 24:79:D0:10:5D:3B:75:37:A3:1F:2F:ED:02:D5:E2:A1:8A:AA:40:C3
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019D9BBEA88F63F996F3C6FD7DE01C3DBC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 0722
Signing time: Fri 17 Apr 2026 14:00:56 +0000
Manifest this update: Fri 17 Apr 2026 14:00:56 +0000
Manifest next update: Sat 18 Apr 2026 14:00:56 +0000
Files and hashes: 1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: 75t44Ls88geNfpVAHFVfCn5jrIlyohYYl0YgPMsq45Q=)
4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:a8:8f:63:f9:96:f3:c6:fd:7d:e0:1c:3d:bc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Apr 17 14:00:56 2026 GMT
Not After : Apr 18 14:00:56 2026 GMT
Subject: CN=2479d0105d3b7537a31f2fed02d5e2a18aaa40c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f2:8f:60:12:f5:47:9b:20:e3:4e:b4:00:e0:
de:53:15:80:7d:8e:8f:23:47:a5:27:d2:40:61:5c:
7f:5d:cd:b5:d9:07:a3:8a:a8:d2:79:93:b0:4f:8a:
94:56:62:05:e0:99:a4:18:12:bf:dd:8d:f2:af:e5:
d7:a7:f4:98:e6:be:ce:3f:94:08:aa:03:3c:67:fe:
9a:57:43:4c:0c:84:c5:d6:d3:98:e9:31:d8:a3:4d:
34:0a:82:8a:f9:11:fe:32:eb:d3:7f:46:43:99:d1:
b9:22:c1:70:8f:e1:c8:62:74:a3:38:92:a5:ad:b4:
7a:d8:98:70:f7:c1:38:72:77:6c:d2:0a:54:d9:74:
16:70:99:de:ce:2f:81:94:6b:60:26:e6:f2:09:aa:
6a:2e:8d:76:d4:ea:1c:d9:43:92:dd:e9:b3:5f:4a:
e2:24:84:c7:b2:65:e6:2a:91:67:ed:8b:e8:9c:01:
1d:e3:b4:6f:a9:41:f9:bd:50:96:a4:f9:bf:c6:e3:
74:20:c1:1e:c1:83:75:6f:2e:91:e2:60:73:61:2a:
45:c9:4e:4e:f6:3d:a1:f5:ca:fe:a5:98:91:6b:b1:
02:7a:73:e9:40:17:46:6b:27:2e:09:f7:36:0c:cc:
b5:97:93:29:cc:35:f6:a9:35:d7:1d:5d:08:c8:b1:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:79:D0:10:5D:3B:75:37:A3:1F:2F:ED:02:D5:E2:A1:8A:AA:40:C3
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:31:6c:19:64:34:4a:f4:7c:d0:2c:bc:db:22:ff:97:21:79:
ab:ee:fe:a1:dc:e0:fa:26:e8:3c:45:d9:80:3d:7c:64:8d:d8:
f0:e3:81:ee:ae:51:d8:9a:0f:91:1a:21:7b:90:0a:95:b6:da:
34:8a:51:bb:39:d1:b6:2b:88:2b:9b:61:ef:4c:1c:f5:2d:e8:
44:aa:c8:e2:b9:87:91:b3:09:26:e3:b5:54:6f:a2:a9:5f:ce:
0c:dc:b9:71:c8:21:f2:7a:ae:d2:a9:b1:d9:ec:6b:44:ee:0b:
33:58:2a:87:94:f4:10:d5:27:48:49:44:20:84:f3:b9:66:ef:
88:c4:dc:0d:25:25:82:59:35:9f:36:3a:b0:7d:e3:96:c7:d2:
2c:68:d0:5b:10:7b:40:e8:18:b9:ed:65:95:34:0f:36:b9:50:
7c:7c:0f:a0:04:11:ee:c1:fc:55:7c:bd:d4:72:23:da:1f:1e:
87:7b:0e:53:44:be:61:c8:50:b9:39:05:79:bc:e3:2e:5d:dc:
a2:9a:b6:ff:82:d6:fa:8b:20:a4:99:d6:64:71:6a:ed:ca:f8:
3e:e5:f2:3a:c0:4a:11:a4:0c:59:a2:9e:d8:98:6b:db:ba:6b:
48:f2:30:a8:43:e9:d8:d5:86:30:a5:32:d3:4d:c6:1a:24:8c:
59:70:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:53:13 2026 by rpki-client