Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier: ebUhNI+ATNcRHGb81DpOPHvcjiyw3KOu/IgCJkge29s=
Subject key identifier: 22:7E:B9:26:95:8F:B4:09:7C:F3:B3:B7:FC:87:6C:30:85:06:1B:72
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 019D9A3DECF239430FF454FD61AC02B11993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number: 064E
Signing time: Fri 17 Apr 2026 07:00:42 +0000
Manifest this update: Fri 17 Apr 2026 07:00:42 +0000
Manifest next update: Sat 18 Apr 2026 07:00:42 +0000
Files and hashes: 1: JeHtS9ixybUtWgHJC3lED1Xlc4E.roa (hash: ddx2wHgY9/unmcGfDoucGgaOd7BG1ivN8l1QA0QmEIc=)
2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: vyTX2yi9a1T4jOtHwcB88rVB+P0uaDfI2RR/KS2+cEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:ec:f2:39:43:0f:f4:54:fd:61:ac:02:b1:19:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Apr 17 07:00:42 2026 GMT
Not After : Apr 18 07:00:42 2026 GMT
Subject: CN=227eb926958fb4097cf3b3b7fc876c3085061b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:7d:48:46:08:24:1f:85:12:0d:4d:30:8d:
c0:95:56:01:26:55:30:b6:c7:e9:35:1e:dd:34:37:
19:78:c5:3c:8f:4b:22:33:71:77:d0:f2:7d:d1:52:
f6:8f:6f:be:3e:e1:8a:d4:a2:00:f6:5c:00:d3:d1:
e6:d6:3f:7a:f2:f3:9b:5d:14:e3:15:3d:86:de:50:
4f:e3:54:18:0e:4d:e2:bb:68:09:65:5e:24:71:14:
80:0c:bd:c2:a2:13:bb:b4:23:91:84:0c:f2:df:94:
3a:a1:bf:77:f6:bc:33:17:69:07:29:8e:bc:64:97:
d1:59:f2:48:29:a4:1c:47:0e:22:3d:32:89:95:14:
ba:8a:e1:2d:46:3a:23:aa:a5:74:43:03:83:da:c8:
46:3c:eb:da:ba:15:73:31:03:94:d5:6f:f1:93:bc:
b4:94:18:ab:d2:ef:c5:af:40:f2:bd:27:b1:e7:35:
32:6a:0c:a4:2e:db:c0:1e:1a:a7:97:aa:2e:28:9e:
4d:24:f3:27:20:ee:c3:51:99:c7:ab:97:86:7c:49:
de:e4:b6:e3:b0:a2:2d:ac:97:e6:d0:fa:48:13:0e:
5f:dd:49:47:1d:17:bd:a8:84:08:aa:49:9e:90:69:
e8:cb:a5:1f:54:6d:45:3e:ee:05:0b:49:09:7a:1b:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:B9:26:95:8F:B4:09:7C:F3:B3:B7:FC:87:6C:30:85:06:1B:72
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:59:1a:89:48:6f:a7:e5:a6:29:a4:d0:6a:e4:1c:d9:7f:86:
7e:80:c8:15:e4:f1:f8:8e:17:c8:42:2e:e7:9d:18:c5:fa:5b:
45:be:89:08:5c:12:46:56:80:aa:1a:1a:0f:7c:fb:64:fd:bb:
c5:47:45:2e:58:24:02:c6:1f:95:d2:07:a0:2c:5c:62:ed:7e:
06:e3:c7:e3:a9:3c:f6:bd:e4:39:cd:81:ef:3e:c3:fb:7a:75:
47:a3:e2:19:2a:1d:9c:46:d3:0a:c1:28:fb:df:37:9b:d8:c1:
03:f2:c4:9e:c3:9f:8c:d7:8e:58:29:ae:ad:d1:7a:26:cb:ae:
6c:01:f1:7a:44:82:ec:cc:44:3e:7d:64:4b:18:8d:97:83:eb:
c8:26:99:da:cc:c5:69:08:9f:7d:9d:bb:f7:7f:f0:4e:a4:9a:
cc:54:2e:08:6c:77:14:9a:16:2b:01:ce:21:cf:cd:9e:c9:45:
cc:5f:ce:e9:70:49:05:7f:ed:72:47:f4:b8:65:6b:f5:9d:16:
16:fd:af:2d:89:b1:d6:68:d6:6c:0a:51:32:a7:13:f1:b2:21:
d6:3e:1e:7d:f5:15:75:d6:6c:9b:9c:dd:3e:08:75:60:7e:f1:
28:f8:6a:34:92:e0:86:75:9e:7d:b2:c7:41:e2:3c:f0:45:bf:
bb:bd:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:21 2026 by rpki-client