Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
File: ZjokSA8E0TGL8acNq_-ksn7zLaI.mft (raw, json)
Hash identifier: GC79Mrcy4eLG5bEiIO+Ycdvz5v7F8B0jLyq1MfbRfng=
Subject key identifier: 66:CA:CA:FB:96:6D:C9:A5:8A:7E:2E:29:C9:AA:C5:0F:4E:C6:07:F3
Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Certificate serial: 019D9AAB98A34E56C69F87C12586DCA13CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
Manifest number: 04DF
Signing time: Fri 17 Apr 2026 09:00:30 +0000
Manifest this update: Fri 17 Apr 2026 09:00:30 +0000
Manifest next update: Sat 18 Apr 2026 09:00:30 +0000
Files and hashes: 1: 96HXx8zQ_EVFzIMYvhg1zJYI3qc.roa (hash: nDqvJNasRGULrzj7GnOr0ISCf0+9RDFSbOhihRxibJc=)
2: FhaBlVdFb-u9B3Q3s8w-zUsnA3Y.roa (hash: Nhhs8U4S6VG9Y9DrRCnYgND9wClvtFHBCzE3i4DaeSU=)
3: Gg_alP2mFO3oRShalv4zYhkZtEI.roa (hash: c1t1ZXq7lnILVOJ0YZafOnYK9luC0QXvmJ3DhCUXZKo=)
4: SoTDVF-vjEYHi67nDfcRlGbTXr0.roa (hash: TQ9Y9JIBeUPae6BjJeYoVgEw4M6tL3rY17ZPfSth9eU=)
5: ZjokSA8E0TGL8acNq_-ksn7zLaI.crl (hash: /t+J509qs5OIn77cF6VqlPXTuWSMiYye1RPArEqJ0Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:98:a3:4e:56:c6:9f:87:c1:25:86:dc:a1:3c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Validity
Not Before: Apr 17 09:00:30 2026 GMT
Not After : Apr 18 09:00:30 2026 GMT
Subject: CN=66cacafb966dc9a58a7e2e29c9aac50f4ec607f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0a:6f:44:b0:ec:21:e1:61:db:05:15:fb:81:
f4:40:e1:f6:3f:0d:20:c3:04:72:f6:0a:c6:fd:77:
89:84:44:a3:67:de:4f:49:b7:9f:4d:37:29:5e:46:
5e:89:3a:ad:cd:47:00:06:14:71:8e:1e:93:0b:41:
44:5e:a1:b9:df:22:52:ea:4f:5a:a3:87:3b:ba:58:
ce:02:38:ab:c6:3c:ca:47:c2:7e:c8:40:94:1f:ae:
fd:87:cd:83:68:fa:a5:9d:e7:67:4c:a1:96:b7:f3:
2d:62:0b:1f:37:32:d0:a4:7a:74:9f:82:fa:b9:53:
8a:1f:27:7a:0f:f0:f0:e0:dc:a3:0c:43:32:53:82:
56:ff:84:05:43:ee:da:c3:6b:df:20:d2:a5:0c:4f:
ca:ba:20:58:f5:a1:61:7a:92:35:7e:57:96:8b:1e:
67:2f:83:5b:24:e6:50:50:e6:67:b1:f8:90:eb:62:
38:44:e4:f7:b3:4f:ed:f0:9c:84:3f:03:7d:ee:fc:
87:10:2d:62:20:b1:86:8c:b6:2a:b7:71:7e:11:09:
e1:85:4b:04:e7:6b:ee:11:6a:e1:7e:c4:16:c8:a5:
3b:a9:6f:78:44:d4:68:12:ab:ef:dc:e9:a8:33:9b:
bd:61:40:77:2c:b0:9b:f8:0c:e1:0e:c3:34:cc:76:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CA:CA:FB:96:6D:C9:A5:8A:7E:2E:29:C9:AA:C5:0F:4E:C6:07:F3
X509v3 Authority Key Identifier:
keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:6d:bc:5c:6e:d9:2c:8e:52:85:e1:a4:37:ae:38:d7:99:fa:
a4:76:95:b3:33:3d:49:31:16:e6:b1:29:28:06:cf:a9:8c:25:
a7:c6:cb:fb:58:b3:b2:92:aa:ed:c3:eb:bd:c1:09:ac:d9:5b:
7c:27:84:77:30:e7:3e:6e:e9:c2:f2:66:81:d6:c5:5b:49:ab:
75:41:9d:4d:ad:e5:de:a7:36:4f:f2:d9:28:98:70:ef:a0:d3:
12:ca:02:31:80:88:e4:74:33:96:64:d5:70:df:c2:23:77:8e:
02:49:c9:1f:1a:7a:04:13:10:e4:35:8e:f4:18:f1:27:27:35:
5b:d2:36:f0:d2:57:67:21:9e:88:83:37:f2:d3:15:c1:2a:56:
44:d5:1d:30:8a:b7:45:f2:50:db:9a:80:bf:9e:19:6a:8c:37:
3b:f5:5d:f6:34:2a:b6:c5:e8:30:38:2c:68:37:c1:9e:6f:18:
b1:35:96:4d:30:d8:ae:dd:ea:ab:5a:11:d5:9e:d2:97:6b:c3:
08:29:c9:03:56:b6:33:05:fa:4a:57:39:0e:52:54:7f:8a:2b:
2c:43:85:b4:ff:c2:f6:60:82:95:97:d1:f3:b5:73:c5:ef:93:
db:d5:f0:c5:9f:3a:0b:41:8a:17:fe:fa:a9:11:c7:19:04:9f:
62:a4:19:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:10 2026 by rpki-client