Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier: 3ZJf4ZBisx95UALqSzNp0eUBqBZbaGIcEQKHVj9bHUc=
Subject key identifier: 9C:B4:60:60:F2:5E:0B:86:E4:CA:12:58:94:FA:51:CC:2F:E4:0C:88
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 019D981856C7D068DFB357F44E36B9F3FF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number: 0A38
Signing time: Thu 16 Apr 2026 21:00:25 +0000
Manifest this update: Thu 16 Apr 2026 21:00:25 +0000
Manifest next update: Fri 17 Apr 2026 21:00:25 +0000
Files and hashes: 1: 4kNIwYTUrVA18oIc_9jtqMOd7CI.roa (hash: L+g00yM7LCta/KmSbttT3iWTPXIIbIasMm1ZRHqbtYg=)
2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: 6QPc40cNChkl6ZyuzxhmzrDv5ZrPZ9KDK3jh83/uKTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:56:c7:d0:68:df:b3:57:f4:4e:36:b9:f3:ff:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Apr 16 21:00:25 2026 GMT
Not After : Apr 17 21:00:25 2026 GMT
Subject: CN=9cb46060f25e0b86e4ca125894fa51cc2fe40c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:9b:dd:d7:b0:25:3a:5e:8d:37:cb:7b:6f:
fd:aa:44:c5:5c:2c:bb:64:d5:ab:61:ca:10:67:54:
b3:e5:ed:63:7f:12:89:54:f0:87:72:6f:cd:87:b4:
ea:66:de:8a:88:29:d2:44:b5:e7:20:3a:e7:de:20:
c1:09:e7:81:14:b6:2d:cb:af:b4:27:b8:6a:88:44:
84:ac:6c:84:d2:af:46:fd:3e:b6:d4:86:0d:32:d9:
fb:1f:1b:b1:05:02:a2:82:a0:19:e7:7f:72:b4:42:
1a:4b:0b:28:aa:52:a9:71:de:2a:eb:35:33:9a:11:
62:34:84:65:0f:5d:66:3a:34:ee:85:dd:95:1d:d9:
7e:3a:75:09:be:7e:55:53:93:bc:a4:eb:71:31:6f:
29:09:e4:61:f1:8c:dd:d9:81:0f:51:eb:6c:6b:6f:
89:72:8c:a2:a6:a7:ea:be:3a:77:5d:2b:80:06:07:
5d:5a:0c:d3:d2:54:ad:21:a7:d4:72:5b:87:44:17:
62:68:47:b8:b0:68:97:b5:e4:f2:76:40:d1:df:54:
b9:53:3c:f5:cd:4b:59:65:cc:88:df:ee:6c:04:34:
b7:2d:0e:58:78:2c:1a:0b:78:93:67:bf:d5:0b:50:
57:a0:3a:44:ca:fe:34:23:14:2d:eb:10:3e:d2:51:
4d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B4:60:60:F2:5E:0B:86:E4:CA:12:58:94:FA:51:CC:2F:E4:0C:88
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:86:6b:8e:4d:df:33:d6:b9:de:c9:63:3a:a9:f2:bc:aa:54:
bc:54:ef:66:0a:6a:47:03:2d:22:a4:aa:7e:47:0b:f7:1c:04:
45:2c:01:72:fe:a7:a4:1f:ad:c2:91:39:f7:16:66:ba:3f:0a:
15:07:c8:7c:02:39:bd:66:04:de:88:f6:57:61:d5:6f:ee:67:
9d:93:2c:2d:af:8a:7f:2a:94:c2:76:37:6c:9b:9b:d3:36:3c:
5d:a7:8e:7d:11:b5:ed:7f:57:64:a5:6c:a8:da:5a:8d:5c:ce:
8c:b7:b6:8a:11:b9:1a:91:84:86:30:28:42:a1:af:ed:dd:a6:
fb:13:2f:4b:cb:9a:1a:ad:1a:a9:ef:f9:9a:3b:26:62:b6:73:
b7:29:cc:4c:bd:a5:eb:7c:e1:e8:83:15:16:73:3f:86:b9:78:
e9:09:ff:70:2f:f1:43:a2:78:91:dd:7e:c5:c5:e8:9e:12:3d:
d1:96:95:98:4d:78:82:f3:ea:82:43:bd:dc:f6:27:34:f2:c6:
28:02:70:8e:ca:ad:ea:10:83:00:7c:87:17:85:cd:f7:9f:4d:
20:25:89:f5:33:0b:62:09:37:ec:05:3e:04:d9:80:a3:d9:ca:
bc:13:4f:67:cc:16:52:f9:01:36:5b:5c:ff:c2:57:3c:22:b7:
33:b4:ff:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:37 2026 by rpki-client