Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
File: Ze3JFheq3wwsx_H115bb237YWQ0.mft (raw, json)
Hash identifier: oteFBflbuQeDR1JQCoOgZHAkSx5+a3C40AimNcrvfpo=
Subject key identifier: DA:A6:0F:D6:00:E6:51:4C:7F:1D:EC:E9:A8:FB:30:D7:31:55:BB:07
Authority key identifier: 65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
Certificate issuer: /CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Certificate serial: 019D9999B47036E28E2C37D39727669F5B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
Manifest number: 088C
Signing time: Fri 17 Apr 2026 04:01:20 +0000
Manifest this update: Fri 17 Apr 2026 04:01:20 +0000
Manifest next update: Sat 18 Apr 2026 04:01:20 +0000
Files and hashes: 1: Ze3JFheq3wwsx_H115bb237YWQ0.crl (hash: HpTVeZgMcDhDxaGwH7BnwC91rh6/UThw3zIANUTWMUQ=)
2: sFVqpHtt4QH5hTgc8rcQ47NJPQg.roa (hash: fR+JTFzmOCy3kHLWAX1K1ruMHrlyFg5jdcK5x7rhFac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:b4:70:36:e2:8e:2c:37:d3:97:27:66:9f:5b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Validity
Not Before: Apr 17 04:01:20 2026 GMT
Not After : Apr 18 04:01:20 2026 GMT
Subject: CN=daa60fd600e6514c7f1dece9a8fb30d73155bb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:20:4e:d2:f6:99:26:cd:0a:7e:11:9a:f5:
52:1f:7e:65:a5:4a:d6:f7:cb:36:9d:ff:a2:8d:2c:
e3:e2:8f:13:bc:0c:da:66:bf:97:96:85:5f:6e:d1:
81:4e:21:73:42:5b:fb:d4:2e:ec:6a:fd:24:49:5d:
d7:52:a7:a0:68:ad:4b:49:86:05:22:e8:ae:72:09:
4e:6d:d3:13:f0:e4:88:8f:0f:8b:46:ae:c5:ea:74:
bd:d9:6d:fd:99:38:c7:46:05:27:e1:37:66:5d:4a:
32:62:83:a5:9c:1b:2c:75:a7:e5:68:c3:7a:d4:ba:
80:11:0c:cd:6d:f2:7f:c4:5e:ef:47:bc:eb:e4:5a:
04:d8:8b:92:72:68:be:9a:f9:bc:45:1f:36:df:5d:
24:ce:34:fc:a7:b7:93:09:b9:5e:94:15:bb:07:f9:
41:aa:e0:9f:3b:3b:19:ae:d2:db:fe:24:aa:d5:80:
fa:93:7d:b8:40:bd:ff:af:37:48:2f:41:f8:7d:1c:
eb:1f:ea:51:f0:e3:10:1a:17:10:26:be:b8:b8:38:
59:1d:75:54:65:90:fc:89:ea:12:49:44:c9:73:93:
c4:b2:d5:6c:59:6e:9a:bb:a2:d6:a7:31:a2:9b:46:
49:79:89:b6:0f:43:90:9f:f9:94:50:b6:6e:a8:27:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A6:0F:D6:00:E6:51:4C:7F:1D:EC:E9:A8:FB:30:D7:31:55:BB:07
X509v3 Authority Key Identifier:
keyid:65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:79:a1:2d:8f:8a:22:90:e5:a8:33:bd:6d:f4:3c:25:24:de:
d2:bf:e9:dc:18:0d:e6:da:a0:78:87:35:f0:c1:e7:b0:64:98:
72:9b:37:86:0f:2a:f5:bb:8b:32:31:c0:05:e5:f2:9f:07:a9:
0a:63:3e:4d:8e:6a:76:bb:5f:74:12:ce:d3:4e:8a:07:4b:32:
f5:de:41:a5:3a:59:c0:80:a9:26:86:eb:05:86:9b:0f:57:b4:
f4:43:9a:b4:9e:b9:3f:a1:09:83:97:d7:63:d3:9e:1a:16:fc:
83:c5:93:b8:c2:e5:0a:ec:ba:f7:f4:23:9a:7e:c8:26:67:55:
1c:1e:00:25:76:f3:7c:ff:a3:89:e7:b5:b5:97:ce:91:54:45:
4a:e5:66:24:d0:d8:db:0a:a5:5a:a8:af:85:f5:99:98:6c:fe:
84:d8:c3:5f:5f:32:0e:75:be:f4:1e:05:f4:23:27:0b:73:3b:
46:7a:7a:8f:6e:cc:c5:c8:80:84:e9:df:8a:17:91:ff:2a:73:
8f:70:9d:e2:91:16:20:09:14:8c:17:f9:67:62:32:67:db:f6:
3a:70:47:d3:71:09:c8:6c:dd:2c:44:e5:90:1e:c8:77:a5:51:
36:6f:49:a9:6c:b7:4b:2f:74:5f:d6:9c:46:7d:99:99:21:f4:
7b:b7:08:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:59 2026 by rpki-client