Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: TyjAbzzakofaYIqDWwvceo/6P5GFvWOOAioBKcgCGMY=
Subject key identifier: 20:93:A2:81:B7:5B:78:EB:0C:82:82:1C:94:F3:28:B2:44:5D:FA:8F
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 019D9B50C0C8E58FEDA71874733FF9930D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 087B
Signing time: Fri 17 Apr 2026 12:00:53 +0000
Manifest this update: Fri 17 Apr 2026 12:00:53 +0000
Manifest next update: Sat 18 Apr 2026 12:00:53 +0000
Files and hashes: 1: K1WYHWxT9hUhyCzFRd3qp6J1SRo.roa (hash: ofCgYNoPNZP6vNBlI2XsxCW6wFsFBZey/s584doB1q4=)
2: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (hash: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: GRBnUyWz21m1n71ocpd9PxXXvVYW7MqTBIh9BOknbPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c0:c8:e5:8f:ed:a7:18:74:73:3f:f9:93:0d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Apr 17 12:00:53 2026 GMT
Not After : Apr 18 12:00:53 2026 GMT
Subject: CN=2093a281b75b78eb0c82821c94f328b2445dfa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:26:8b:5d:46:17:99:8b:7a:3d:90:d2:fa:
a2:0a:97:64:93:55:17:ef:0c:ad:f6:b1:d7:23:a7:
1e:ff:dc:38:79:e8:d9:a2:d7:c5:b7:49:8d:c9:80:
28:d0:8c:b3:83:f5:72:5a:52:20:0d:a9:b4:de:ac:
ed:9f:fd:4f:db:d0:35:03:90:be:a4:ba:fc:b7:6b:
91:eb:5d:b3:3b:6d:23:31:a6:50:8f:d4:dd:1d:96:
36:1c:73:b0:9f:38:27:a1:fb:97:8f:51:75:84:e6:
f9:2c:e4:8d:da:97:7f:a4:4e:32:46:15:6e:4e:64:
6c:63:ef:b6:31:d5:dc:60:9d:e2:39:8d:82:8e:2a:
c1:20:89:2a:4d:29:4a:3e:03:2a:7e:96:71:df:87:
f8:9c:79:7f:9f:c5:56:d0:31:58:ee:d3:6c:f8:98:
17:db:97:1f:47:61:6b:91:bd:86:f7:72:e2:f6:84:
df:6d:f9:30:82:34:1b:55:d2:fd:f1:54:3b:b2:5b:
8e:89:5c:f6:22:7e:d5:e9:01:91:b8:91:c2:e4:45:
2c:25:6a:dc:8f:34:33:c6:7b:38:54:72:a8:db:cb:
7e:f6:8a:0f:63:ca:5f:4d:e5:1c:1b:1e:36:f5:71:
84:68:d9:1e:77:ff:19:c2:a7:a9:92:5b:c8:8e:c5:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:93:A2:81:B7:5B:78:EB:0C:82:82:1C:94:F3:28:B2:44:5D:FA:8F
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:98:93:05:6a:2d:31:35:38:32:fb:31:23:83:2b:93:82:72:
40:c3:32:70:b3:d6:03:7a:3e:2e:1c:66:ba:d2:57:90:9c:99:
1a:03:c6:89:cd:1d:d0:d0:6b:24:c9:f1:b2:03:38:d3:ba:a9:
93:e0:86:2e:b4:d2:1e:7d:67:93:84:cf:8a:bd:af:a4:ac:c8:
39:a3:15:1e:00:f2:bc:36:6f:d0:e3:8e:1b:ac:39:5c:72:1d:
48:7a:0b:7f:ef:83:cb:f1:56:1e:45:36:c9:30:01:54:29:3e:
b7:48:cd:da:a5:a5:10:ae:74:e0:e6:6c:54:0a:82:a6:57:1a:
74:5c:a7:a9:a1:2a:0f:74:e5:9c:6b:c3:cb:77:09:ad:f7:43:
17:76:28:0c:15:01:f3:25:28:aa:5c:3a:49:27:4b:1d:dc:8c:
f8:65:36:21:d6:dd:73:d1:6d:2d:ad:d2:dc:e8:27:52:37:a4:
a7:dd:bc:10:95:e7:5d:0e:e5:f8:71:52:a7:77:e1:2d:07:a4:
e4:17:af:1a:d7:f5:ef:68:66:11:1d:9b:52:d0:6e:0f:a7:71:
e5:7f:e0:99:ac:1f:3b:76:88:9f:02:16:ea:b6:b4:37:27:d1:
28:14:18:68:03:2b:73:70:af:8b:97:8a:bf:b7:0d:4d:a7:3c:
27:0b:60:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:07 2026 by rpki-client