Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: lfuN6kRtqDWkvj/V7wQZ/xrd9BMN9fY3QOWiaG7IgsI=
Subject key identifier: FE:7F:12:9C:89:38:4F:2C:58:02:19:15:33:63:2C:A7:24:B9:C7:17
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 019D9A74D19F64E0CBEDD62403B099BDB35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 0A34
Signing time: Fri 17 Apr 2026 08:00:40 +0000
Manifest this update: Fri 17 Apr 2026 08:00:40 +0000
Manifest next update: Sat 18 Apr 2026 08:00:40 +0000
Files and hashes: 1: 58TwcIkinmFNbU2SNro-sGMSyyQ.asa (hash: 9aRKVKrhPWSFlJ2YqYLpqwfcbGSlOiK0FNRXmTbZbYQ=)
2: wEZZX0o5N8nlP47tu1RwoQ2y0AY.roa (hash: ddJPky6VMI6qp8TK3QriFAzhCSzbyfK/JMSPvgj4FCE=)
3: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: nf4bGO7RVsyrOeVEZ+i9cuwklxeDvBLvyi5/K4Ipl10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d1:9f:64:e0:cb:ed:d6:24:03:b0:99:bd:b3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Apr 17 08:00:40 2026 GMT
Not After : Apr 18 08:00:40 2026 GMT
Subject: CN=fe7f129c89384f2c5802191533632ca724b9c717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:3a:cb:af:95:2f:d8:ed:0f:78:06:ba:d1:
95:7a:37:07:3a:cd:22:d3:00:3f:68:a0:a6:1f:49:
0d:3d:cd:84:91:b8:80:57:8a:4f:ea:84:b8:e3:e1:
6b:5b:e3:88:87:d7:0d:e0:22:fe:e5:f8:c2:a0:cd:
e8:88:49:9d:e8:f7:64:ca:0c:d3:3c:d4:c6:5e:db:
25:c8:a2:ec:c8:53:45:02:25:16:54:50:2f:39:cd:
7f:1f:36:48:c8:63:3a:4d:32:85:2e:75:c3:d8:a2:
1d:30:5e:b4:60:80:19:f7:bc:86:05:1d:a7:d3:61:
50:b3:3a:53:56:c4:96:75:3c:af:f2:d9:84:a9:69:
7d:55:f5:5e:d6:12:48:eb:b1:e4:8b:55:80:65:ca:
c7:6d:13:83:50:ee:67:05:9c:bf:ee:06:50:75:ad:
2f:27:08:52:90:ad:65:e5:fa:d7:fa:0f:fd:ef:b1:
5e:62:02:09:8c:44:46:db:47:af:3d:52:e7:5b:4f:
8f:74:a4:f8:87:9f:f0:e5:7c:ee:33:0d:e2:80:54:
8c:a0:37:e6:6c:06:b8:33:49:de:7d:39:db:15:34:
d1:75:8a:37:b2:ac:66:04:a8:52:a9:13:53:65:3f:
6c:39:f7:7a:5c:62:f6:ef:62:b2:51:92:51:50:a0:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7F:12:9C:89:38:4F:2C:58:02:19:15:33:63:2C:A7:24:B9:C7:17
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:be:63:8f:3b:d5:7c:7d:82:da:94:21:2c:f2:b1:6c:ab:fe:
82:77:15:75:82:ce:2e:fb:7b:4a:dc:07:6b:b4:98:34:13:52:
6f:9c:64:1d:6e:14:b6:a0:f8:84:dc:04:81:5f:f8:24:6f:de:
9d:04:01:3e:03:ad:df:3a:b9:2c:77:2a:23:35:f3:2e:a5:01:
70:0a:6c:82:0d:1d:97:2a:d1:3c:2d:46:e9:cd:50:0b:58:81:
8d:e8:44:c1:89:a0:1a:40:b4:f3:0d:04:ed:c3:64:d8:b2:6b:
1d:28:e2:5a:c5:f5:c3:4a:0e:9c:90:ab:a2:f7:87:2f:78:ae:
a3:d0:e3:93:e5:df:0e:96:3f:f9:fd:ac:ca:92:b9:9d:c8:c8:
d8:c9:b2:c1:5b:c3:52:a0:35:e0:f6:7a:04:51:cc:2c:20:86:
e2:7f:6b:be:2b:8b:85:60:90:88:2c:44:92:df:b6:44:ad:8a:
79:cf:ef:d7:2b:53:11:9f:47:70:bc:22:f6:9f:33:ce:c0:a2:
03:d8:73:d5:98:40:2e:5a:3b:06:c3:2d:68:9a:b7:4b:5a:d0:
56:4f:49:57:4a:d5:08:ef:8e:5d:e1:59:a2:07:3e:0d:6e:25:
2c:08:1e:59:9f:8f:33:3b:54:b0:23:4b:aa:8c:7c:5c:2f:96:
d2:b7:4c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:09 2026 by rpki-client