Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
File: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft (raw, json)
Hash identifier: nhXn0qzM6ZfgSWC/9dE6PRLTJXwfJ6OYIDpJtBUwCdM=
Subject key identifier: 3E:06:A7:EB:F7:D5:8C:29:71:5B:96:1E:22:B1:3F:1D:04:D7:71:6D
Authority key identifier: 66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Certificate issuer: /CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Certificate serial: 019D992B396C853B463625EA90D444C99FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
Manifest number: 15FB
Signing time: Fri 17 Apr 2026 02:00:39 +0000
Manifest this update: Fri 17 Apr 2026 02:00:39 +0000
Manifest next update: Sat 18 Apr 2026 02:00:39 +0000
Files and hashes: 1: MK5B2h9Q0ERwN9XCDOgzBibuA-8.roa (hash: N47GLmPQEQK3T6K6K5QwCYgIvSWVtPfThL2ceHkYyic=)
2: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl (hash: r65vOEHYkkFSuC1uUgCRMHgAQhWQWwJ5gjQZ4+Sr+E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:39:6c:85:3b:46:36:25:ea:90:d4:44:c9:9f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Validity
Not Before: Apr 17 02:00:39 2026 GMT
Not After : Apr 18 02:00:39 2026 GMT
Subject: CN=3e06a7ebf7d58c29715b961e22b13f1d04d7716d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a6:28:93:ab:8b:45:ef:da:9c:a9:a0:56:63:
e1:02:0f:c1:be:35:50:c1:95:9b:e4:2a:8e:ad:9f:
8f:31:21:ec:70:3e:9d:ff:8c:fc:11:a9:66:95:b3:
54:68:7e:4e:96:b8:13:13:c6:fc:14:94:6d:0a:ac:
b8:fc:70:47:b4:f2:ee:5b:ea:48:4f:82:aa:b9:5a:
1d:c5:bb:74:10:44:2a:98:77:bf:19:20:75:85:68:
6d:1e:ee:a8:42:a3:e2:56:23:9e:39:eb:b4:e5:f1:
46:a5:3c:e7:35:58:ea:28:9f:20:e4:e7:aa:cb:5f:
75:b2:d8:ae:02:38:d7:83:9e:5b:33:bc:db:4d:96:
86:ea:26:2f:e7:5d:a1:7c:bc:da:e8:da:2e:c2:e5:
7d:9a:95:aa:21:39:d2:74:e9:8d:e0:2f:b4:b4:95:
5a:51:5d:4b:c4:d3:7a:a1:18:04:9d:8e:87:b1:fb:
d2:fd:03:64:8b:7c:2c:a7:ea:f3:f1:de:99:87:72:
58:f6:f1:2b:22:65:e6:93:be:25:f1:ef:f9:fa:0c:
3a:2f:f1:a8:81:d5:fd:3f:95:2f:55:36:2c:12:17:
22:0c:f6:9b:12:b2:41:8e:86:88:31:2a:17:35:a3:
ba:d6:25:76:c7:7f:72:ac:09:35:aa:74:8d:8f:35:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:06:A7:EB:F7:D5:8C:29:71:5B:96:1E:22:B1:3F:1D:04:D7:71:6D
X509v3 Authority Key Identifier:
keyid:66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9a:94:d5:5b:97:c8:ae:6b:19:08:f0:63:a9:bb:75:05:bf:
0d:0a:55:aa:27:33:91:b7:80:17:19:4a:2a:e4:b4:4e:b3:44:
31:7f:27:a6:c8:62:86:d5:c1:17:bf:80:95:25:fd:1e:04:95:
a3:38:d1:ce:6d:fc:c3:6e:86:44:1a:c1:ab:19:cb:55:7a:6f:
bd:63:03:63:79:80:9c:5e:7c:d2:f2:11:5f:da:43:04:20:b3:
b5:af:14:ae:17:d8:07:e6:88:79:d4:d9:bb:ac:17:14:85:ec:
c5:66:7d:81:25:48:01:01:70:10:a9:12:2b:c6:3e:3b:72:79:
2d:c7:ec:14:21:4f:65:bf:0f:d8:60:fe:95:5f:9a:d9:63:27:
6f:13:39:cb:0b:c2:5f:6e:12:24:15:90:88:43:e2:9a:7d:6d:
0b:b3:a1:f2:1f:30:8f:bf:05:d2:8e:e8:d8:64:3b:d2:76:67:
b9:0a:02:30:16:de:25:c4:b5:45:e1:f9:53:c1:ae:e9:02:c5:
5c:51:ff:61:aa:e6:39:ed:61:b0:c7:ac:8f:7f:4c:0e:98:06:
76:7b:5e:2f:2b:5c:08:90:b9:14:2f:7d:a7:09:fe:3f:2e:9b:
6e:4a:44:d2:9f:e6:af:b1:9e:6f:54:04:19:18:4f:10:7b:df:
c5:f1:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:48 2026 by rpki-client