Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier: Ut5H7QSI/CYBSKldx5NCKmCESyxZ2L1e7XQ+Uhx7T+g=
Subject key identifier: EA:50:1B:E3:AA:23:AB:83:70:CA:EF:3C:CA:45:47:76:F0:FE:80:AD
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 019D99D01B913007187C153CFF7C53C8FBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number: 119C
Signing time: Fri 17 Apr 2026 05:00:45 +0000
Manifest this update: Fri 17 Apr 2026 05:00:45 +0000
Manifest next update: Sat 18 Apr 2026 05:00:45 +0000
Files and hashes: 1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: j6lwb5P8D4co93CFIUU/w2DmzuuZ2kNm/fr1Rokc7es=)
3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:1b:91:30:07:18:7c:15:3c:ff:7c:53:c8:fb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Apr 17 05:00:45 2026 GMT
Not After : Apr 18 05:00:45 2026 GMT
Subject: CN=ea501be3aa23ab8370caef3cca454776f0fe80ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:cf:42:28:ba:9a:9f:49:01:8a:d9:b1:f6:
98:6f:af:6d:50:fc:d9:ff:94:fb:5b:8f:9c:b7:5e:
03:d6:54:f9:5a:6b:4e:db:95:a3:a7:7b:7d:61:38:
e1:cb:4c:fe:f0:5c:28:a8:88:cb:97:1a:05:fd:18:
a7:a4:68:3c:b3:c5:a0:8e:ae:6f:1c:10:aa:2d:0b:
38:f3:a7:b3:c3:0c:83:5b:ed:01:27:02:97:6a:c0:
d6:8f:a7:97:6b:e9:87:27:52:af:f1:0b:19:b2:56:
9f:2d:e3:70:be:30:19:81:8d:e9:73:79:c2:fd:90:
dc:36:68:19:ae:e5:ed:10:e3:17:b5:30:74:41:37:
1c:01:57:cd:45:dc:01:88:c7:17:b5:a2:19:0a:16:
e0:00:84:a3:70:11:31:80:07:a2:3a:4d:5d:1f:14:
36:b5:b9:53:eb:28:11:98:a8:54:2c:1c:01:3a:36:
65:87:7f:be:d3:88:33:ff:75:c9:2e:da:be:bb:68:
80:35:bc:4a:27:33:d9:4b:0d:98:4c:f3:66:68:74:
76:0d:8b:4f:ad:72:70:a5:d7:38:1e:65:c0:19:12:
22:d9:a1:9f:4c:60:24:3d:b6:36:0e:f7:90:42:ec:
0c:e4:12:85:40:5b:4f:25:5a:c8:52:d5:38:cd:62:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:50:1B:E3:AA:23:AB:83:70:CA:EF:3C:CA:45:47:76:F0:FE:80:AD
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ce:63:4d:01:96:63:98:af:71:9e:d7:b8:54:dc:ce:db:85:
89:6f:d1:13:10:c5:65:0d:6d:4b:af:9c:f0:9b:2d:a3:0f:21:
8d:19:45:b3:49:7c:cc:72:32:8b:b1:3d:2b:28:77:f6:52:bd:
86:08:45:07:7d:10:4d:54:f4:39:12:9e:3a:bf:e3:17:0a:69:
a9:67:0d:e2:71:6b:36:ea:73:b4:67:33:a5:86:38:1f:f4:3e:
f4:43:8e:27:b1:2c:12:da:b6:87:ce:13:ef:1a:98:f4:ed:56:
12:8b:45:51:5f:ac:c8:85:99:d6:71:f7:64:79:6c:a1:23:43:
52:34:04:49:0e:cb:b2:d9:da:eb:7f:79:a4:ed:a6:07:ce:6e:
f2:a1:2f:6b:93:f2:22:a7:c5:3a:f2:17:7d:26:63:22:70:a2:
ef:e0:c5:45:2e:9f:65:bc:5e:25:8d:d2:82:86:0c:f5:eb:7e:
c3:e6:85:e2:79:d5:53:4e:36:59:da:b7:70:18:5b:62:d8:43:
56:6c:cc:b0:df:81:a3:8f:07:44:5d:5f:2b:91:ca:c1:74:01:
3b:c4:65:d9:48:e4:40:32:ea:00:9d:8c:52:4e:6a:b2:da:e8:
aa:b2:3d:32:cf:6c:25:dd:ef:eb:b0:45:b4:5e:0c:d3:31:b3:
2e:f4:5f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:16 2026 by rpki-client