Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
File: zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft (raw, json)
Hash identifier: OT4ssGKzbFfBY0jXgPnocC8porAQ4J2BIGSIFtudTHo=
Subject key identifier: 54:EC:32:95:AC:E0:04:B7:3E:BE:4A:76:18:FF:38:1D:64:0B:90:AF
Authority key identifier: CC:38:7A:84:04:12:33:1A:E1:91:3D:ED:D0:BE:A4:C6:19:B8:A7:30
Certificate issuer: /CN=cc387a840412331ae1913dedd0bea4c619b8a730
Certificate serial: 019DA48A81FF636DBAFCDC5CC9205C3DE099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
Manifest number: 7C
Signing time: Sun 19 Apr 2026 07:00:33 +0000
Manifest this update: Sun 19 Apr 2026 07:00:33 +0000
Manifest next update: Mon 20 Apr 2026 07:00:33 +0000
Files and hashes: 1: qIYB0A4RSZN6LE7W59v3zP7y3P0.roa (hash: 5gqhlF6BkyZHYPK5fz4mRNQz3WRvXUePbuSTbTO9q8g=)
2: zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl (hash: yhQxwqEl2QbXDGqk5pRpV8sX5bxAP3Fk9hdOvcGK6QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:81:ff:63:6d:ba:fc:dc:5c:c9:20:5c:3d:e0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc387a840412331ae1913dedd0bea4c619b8a730
Validity
Not Before: Apr 19 07:00:33 2026 GMT
Not After : Apr 20 07:00:33 2026 GMT
Subject: CN=54ec3295ace004b73ebe4a7618ff381d640b90af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:da:57:8a:7d:a1:9b:27:95:a8:95:85:25:2c:
2c:60:32:cd:b3:7e:92:26:d5:be:49:2d:fc:93:d9:
e1:d5:c7:10:c1:ed:9e:85:e1:45:66:67:13:02:a7:
33:c4:d5:97:e3:e3:0b:33:09:75:e6:c8:3c:85:a0:
64:e5:04:3f:bf:1b:ea:d9:32:75:6e:0d:71:5d:84:
1a:37:05:bb:ba:5d:cc:68:21:47:3b:5a:82:2f:39:
48:18:86:64:2b:59:f1:7b:29:16:d1:01:3d:57:ed:
20:d1:1c:25:2e:bf:5a:1d:fc:9e:3e:f0:ee:c8:bf:
98:f0:a5:a5:0e:eb:a9:e6:c5:ee:46:b3:8a:3c:49:
60:d5:24:5e:11:45:30:86:35:4b:ab:ab:b5:46:20:
d3:7c:af:d9:b6:0c:15:8e:02:90:d6:a9:70:00:58:
3a:25:84:41:b2:21:00:a0:73:8f:52:83:da:79:c3:
17:fb:39:e5:79:8e:06:e8:3c:b1:db:34:d1:26:2b:
5d:32:c2:6b:4d:d1:b6:dd:8c:a6:39:ad:cd:00:15:
75:2f:9d:95:8a:00:bd:03:be:d2:34:14:a1:38:67:
6f:8a:a3:9e:b1:c1:4b:7c:92:bb:16:73:5c:a1:79:
57:9e:e7:ea:dd:15:f6:2f:de:af:82:ca:8c:58:e1:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EC:32:95:AC:E0:04:B7:3E:BE:4A:76:18:FF:38:1D:64:0B:90:AF
X509v3 Authority Key Identifier:
keyid:CC:38:7A:84:04:12:33:1A:E1:91:3D:ED:D0:BE:A4:C6:19:B8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:59:c0:13:84:bc:f7:92:d8:a3:1d:83:06:c1:32:0a:73:a8:
7a:71:ae:06:87:36:f2:d9:2b:4d:d8:a1:bd:6c:0f:02:b8:17:
84:06:0b:90:9d:83:8e:50:b8:05:79:68:76:3a:51:30:9e:95:
e6:f0:cf:8f:fd:8c:72:a3:ff:22:8d:e7:42:cc:65:34:94:2c:
75:6d:40:a6:3f:a7:7e:94:10:22:31:1b:fe:c1:6f:b0:b9:48:
65:c5:48:d3:5d:b6:92:91:7d:c5:90:13:6a:74:f4:f3:5e:de:
5b:f8:10:ab:06:d7:f1:10:e6:84:50:c2:79:1b:71:64:e9:24:
97:d0:5e:7e:7e:90:39:d3:94:26:db:c4:75:68:55:34:2f:46:
c8:20:e1:e9:6d:da:26:f1:f5:66:7c:dd:94:e0:8d:2d:34:43:
32:4f:51:ee:2f:58:df:00:03:cd:d2:41:14:38:d2:fd:a7:24:
b1:e4:12:15:cf:c0:1d:22:da:81:47:58:d5:f6:27:07:5c:c8:
2a:9b:88:7a:87:ff:30:7d:0e:33:fc:a9:36:fa:9e:e8:27:9d:
3a:1c:9d:31:f9:ce:31:d8:63:e4:11:c2:17:2b:cb:b7:6e:ba:
ae:4a:72:97:8b:f2:01:43:5d:a7:c9:41:2d:12:a7:a4:b3:3b:
24:f0:6e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:34 2026 by rpki-client