Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier: 9o07BP4whYwAulG9uxYWlFltlkXs/D86b7h9Q1saZfg=
Subject key identifier: 1C:BA:45:A4:21:87:97:17:86:DB:51:91:96:6E:7B:4C:04:9A:7F:6E
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 019D9B19A801029ED3104EAFA0B19C04FE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number: 1783
Signing time: Fri 17 Apr 2026 11:00:43 +0000
Manifest this update: Fri 17 Apr 2026 11:00:43 +0000
Manifest next update: Sat 18 Apr 2026 11:00:43 +0000
Files and hashes: 1: 09kUsc8xVsHQfG22SiNr4dqPF4E.roa (hash: ysqhE++XuPh/xw2jA2E/+Gvhp8/HFy9qw2ro2jCSjO0=)
2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: X0sXntERBkS8J75PQ2eWyhhttUPYMDmUI/G2u1i9lX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:a8:01:02:9e:d3:10:4e:af:a0:b1:9c:04:fe:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: Apr 17 11:00:43 2026 GMT
Not After : Apr 18 11:00:43 2026 GMT
Subject: CN=1cba45a42187971786db5191966e7b4c049a7f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:d1:78:85:b5:27:8c:a1:ed:81:86:33:8a:
03:4a:fb:81:2b:19:20:27:62:be:c7:a8:9c:ac:3b:
e8:ad:85:2d:cb:9f:ed:f9:40:35:29:a9:a5:db:9f:
63:d1:39:84:1f:6e:6c:bb:0c:9e:02:90:b4:b3:f1:
06:4e:4d:c5:fd:27:57:4c:d4:e3:05:ce:b4:c6:a2:
0d:54:5f:f8:1e:3d:bb:f5:17:21:2c:29:14:d2:75:
c4:ec:ca:d5:7b:8d:59:7a:a8:bd:13:8d:27:30:db:
ea:d3:64:bd:1b:50:d3:ae:88:e3:8a:30:6a:ca:83:
30:4a:0e:1a:82:f3:5c:e5:d2:73:b8:dc:1c:76:b4:
ad:8b:9f:6b:39:08:13:d9:1e:71:b4:cd:56:26:e8:
c9:8c:75:28:fd:09:a9:2a:40:cc:63:52:dd:94:ed:
64:53:2a:a2:30:09:b7:b9:61:02:04:59:a3:7c:29:
ec:96:e5:cd:63:92:3c:1b:33:72:2b:7f:8b:01:d8:
69:d7:df:43:04:61:a6:35:42:66:09:ce:25:1b:3c:
52:10:bd:3d:43:12:8b:f1:12:99:f6:2f:54:49:bb:
c3:af:b3:ad:be:1f:71:b1:cc:e0:a2:cd:75:e3:b8:
d2:36:f5:79:e4:a6:90:e0:22:5c:c9:f9:af:ec:f0:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BA:45:A4:21:87:97:17:86:DB:51:91:96:6E:7B:4C:04:9A:7F:6E
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9a:1e:ab:53:9f:52:59:c9:7d:70:4f:40:75:ef:5d:1b:c6:
70:70:0f:f8:b9:0c:05:cf:2c:a7:fe:30:cb:f2:df:77:1a:e3:
f3:1b:8c:1a:bc:e3:29:65:99:01:d1:59:ed:a9:2e:9e:2f:fa:
8c:b3:81:13:24:bf:8d:a7:db:c6:d3:f8:7c:a5:94:5b:a0:0d:
07:13:0c:d4:c6:eb:e9:6f:af:46:0a:cc:4c:fb:5d:03:5d:64:
b2:8c:80:bc:43:7f:16:33:48:4f:e7:cf:1f:77:7c:e2:93:3d:
36:5f:53:c2:e0:81:ab:ea:7d:48:fb:d6:3f:11:d7:65:59:cf:
56:b2:15:59:6d:88:d3:8f:2b:49:0a:36:42:6d:62:fb:15:36:
d2:88:9c:35:b5:d9:75:ff:41:f8:15:d7:6b:68:ad:d2:a7:f6:
41:c7:63:f3:66:50:5b:e6:61:d4:95:d8:b1:11:84:15:3f:2d:
1a:dd:34:6b:de:b4:42:1f:8f:66:8e:0a:72:83:6e:6b:e7:66:
fe:2c:9b:d6:29:84:d3:ca:4e:c8:43:eb:5e:a4:6c:63:86:be:
2b:b2:7c:bb:97:9a:9a:88:53:0b:25:9c:dc:82:b8:5d:23:bb:
f7:54:40:0e:0e:b9:80:63:c7:42:9b:32:1f:48:c4:fc:a9:de:
8b:a3:a8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:54:14 2026 by rpki-client