Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json)
Hash identifier: W4PwURbzqKHnPvOkGI7idEpmfuidRDtFx2k2YApGui4=
Subject key identifier: EF:DF:72:4E:64:D4:BD:24:9E:DC:D1:F2:FE:E6:23:1B:F5:64:8C:46
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial: 019D9BF511DD85743BC34F110983940CA477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
Manifest number: 14A6
Signing time: Fri 17 Apr 2026 15:00:22 +0000
Manifest this update: Fri 17 Apr 2026 15:00:22 +0000
Manifest next update: Sat 18 Apr 2026 15:00:22 +0000
Files and hashes: 1: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: gca5hV737CUEqkRgH5LtK6M3HUMkymBhLBvnesOmRUI=)
2: uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa (hash: fAkGAUFUUGm9PtxJMnL3fGCs6QplpIcm9Vtk+9FgVDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:11:dd:85:74:3b:c3:4f:11:09:83:94:0c:a4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Validity
Not Before: Apr 17 15:00:22 2026 GMT
Not After : Apr 18 15:00:22 2026 GMT
Subject: CN=efdf724e64d4bd249edcd1f2fee6231bf5648c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:18:f0:80:bb:31:b8:ad:c7:22:f8:3e:88:e1:
b7:81:a6:91:2a:4e:c2:10:d2:27:55:cb:f0:6a:9a:
ec:58:67:64:24:ee:1c:dd:22:94:e2:68:e6:5d:ca:
d2:7d:2e:01:97:3b:0c:0b:b2:87:09:0c:8a:23:48:
d1:d0:b6:68:7e:4c:17:8f:4a:c4:97:d3:69:46:65:
5a:ac:b3:3e:40:2a:57:2a:e4:26:6d:55:63:4d:de:
fe:29:b8:85:72:b3:60:52:e3:7a:75:6a:01:60:5e:
80:98:60:53:6a:60:d4:0c:c4:e6:54:2c:74:b4:ab:
f4:0a:31:44:46:db:75:fb:bc:cb:bc:65:09:37:73:
1c:bd:94:7e:45:43:87:cb:58:39:4b:42:23:df:1e:
a2:f0:91:ea:25:b9:e4:40:0b:f1:27:48:3e:ba:71:
bf:42:40:e2:6d:f4:17:7c:d3:e7:69:ba:5f:df:36:
c2:c3:ca:86:db:45:e9:4d:df:9d:27:c0:68:73:81:
06:70:e4:29:66:56:09:f1:b8:a3:b5:c8:9f:04:71:
22:5b:d1:ed:48:de:7c:62:10:6b:08:0f:b4:90:4f:
d4:d5:f6:bc:41:38:01:a0:ab:f4:52:05:91:39:d4:
79:ec:73:b5:34:62:2d:75:da:01:69:16:a4:62:ef:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DF:72:4E:64:D4:BD:24:9E:DC:D1:F2:FE:E6:23:1B:F5:64:8C:46
X509v3 Authority Key Identifier:
keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f4:a0:5d:c3:bc:33:fc:5d:84:b1:ce:a5:8f:cb:c8:e1:32:
14:97:39:23:a5:1e:57:49:92:c2:a4:e9:0c:93:9f:93:e3:81:
32:77:28:3a:8d:1f:6c:f7:f9:52:46:71:2d:6f:e6:cf:17:49:
25:89:7b:37:c9:db:15:16:3d:a1:0a:7e:94:8c:91:6d:1f:7c:
3a:6a:c5:de:06:f1:7b:4e:ee:ad:7d:29:9d:a0:ad:f2:49:56:
f4:c6:d9:f3:02:e5:70:82:71:3a:c3:37:71:67:fe:6d:49:c8:
94:ab:7d:29:37:4e:f8:af:f4:37:2a:d6:b4:c4:76:f8:f1:11:
80:92:9b:f2:26:11:4e:87:35:50:7e:e2:5d:31:0a:75:5f:e4:
d2:a3:4d:2a:b7:b1:32:5a:64:b1:27:48:2d:25:b4:cd:41:3f:
95:14:11:79:93:36:e3:dd:6a:a5:a6:ce:e2:05:5c:91:c0:a6:
8c:d4:b1:f2:fd:96:02:c4:a0:28:1f:c3:0a:6c:32:d5:c9:89:
cc:81:c3:f0:0b:50:d7:62:d3:dd:34:fc:b2:de:63:e8:1a:09:
2f:b7:0f:87:2f:d9:ce:49:ca:ce:dc:b1:d9:02:d6:d7:22:97:
04:cb:bb:2c:2e:f6:f1:d3:8e:f4:54:3f:91:93:d4:99:14:e1:
36:2e:46:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:24 2026 by rpki-client