Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
File: _Zrjdhfz--SIgLIw_nx84PDcQcc.mft (raw, json)
Hash identifier: JTP3wa8xyxcbVv/d9dwqDBB2Uv5H2CGfvjNzo5LlNLo=
Subject key identifier: 6B:9C:9E:68:8F:6D:26:E1:BD:E2:E8:C0:8B:5E:92:D6:84:9D:8B:98
Authority key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
Certificate issuer: /CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Certificate serial: 019DA3E668794E3F61C4BC1CF038AAAE7AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
Manifest number: 0537
Signing time: Sun 19 Apr 2026 04:01:19 +0000
Manifest this update: Sun 19 Apr 2026 04:01:19 +0000
Manifest next update: Mon 20 Apr 2026 04:01:19 +0000
Files and hashes: 1: _Zrjdhfz--SIgLIw_nx84PDcQcc.crl (hash: U1its7oT8ykiODovqIJizNjNRGj8v9X/tXApkTPDUAc=)
2: aVJL4rPiqkGBr1J1foNz3KXbYGo.roa (hash: NtS+N9noXkfYYLseXhWKgdb4LROtuPhEhSZAg2Ps9hE=)
3: ib_UrUcMg3D4Bnol3MhIEkyHz5U.roa (hash: 0bEjFUTe+hD0N1bM0KLMmKI4VY0N6L6sI0oMSfBcqCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:68:79:4e:3f:61:c4:bc:1c:f0:38:aa:ae:7a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Validity
Not Before: Apr 19 04:01:19 2026 GMT
Not After : Apr 20 04:01:19 2026 GMT
Subject: CN=6b9c9e688f6d26e1bde2e8c08b5e92d6849d8b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:da:c4:82:2d:15:af:51:0b:dd:9c:66:a2:
8b:b5:c3:20:bc:a8:5e:10:a8:35:00:45:1c:f8:7c:
a6:7e:29:c3:77:8e:6e:9e:ed:39:30:45:48:d9:63:
40:63:17:f1:49:d1:e3:7c:50:06:f5:e5:0c:06:66:
1e:ec:d9:84:db:c7:09:50:66:79:86:04:76:1b:bf:
89:d0:b8:11:68:38:1d:74:1c:60:69:f0:cc:c5:c6:
b1:c3:21:a8:d7:ce:c1:39:f0:de:ea:47:2f:40:08:
76:d4:26:cb:d9:e7:98:59:46:f4:94:48:12:ec:ce:
d3:cc:30:39:8f:bc:4c:94:2b:db:ee:8d:f8:43:29:
0e:14:4b:5b:13:89:32:22:18:de:48:50:22:e6:0c:
53:6b:eb:92:c7:5f:20:65:8b:62:e0:95:fb:32:a2:
97:37:58:f0:8e:86:9c:90:6d:ef:33:d7:25:fe:2f:
83:de:96:2a:51:a8:78:b7:42:ce:dd:37:ba:8d:e6:
5e:99:0f:97:1f:ed:e8:27:50:51:32:50:d3:e8:ea:
75:0c:b5:6f:0f:22:a9:71:a1:aa:ae:4a:49:3b:4f:
85:0e:05:b6:9d:98:d8:67:0f:e9:51:62:7d:96:da:
92:9d:dc:a8:95:15:aa:30:42:ea:00:0b:ec:8d:94:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9C:9E:68:8F:6D:26:E1:BD:E2:E8:C0:8B:5E:92:D6:84:9D:8B:98
X509v3 Authority Key Identifier:
keyid:FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:37:f9:d8:1b:0a:3a:30:93:86:a6:0b:97:5d:4a:01:b7:04:
6e:59:57:84:0e:1f:b4:f3:76:e4:27:f1:3a:eb:51:ff:cb:18:
64:bd:bb:cc:d9:23:36:7b:13:f6:c8:38:27:da:50:5b:10:ba:
c4:59:7b:d5:6f:bc:01:5f:be:d5:7b:0b:33:f6:81:2f:14:93:
88:36:f2:dd:20:3e:33:b9:74:e2:98:e2:b0:5b:6a:13:d5:c5:
fc:e6:3c:be:21:35:3d:a3:ff:4d:5d:c7:f2:0f:b8:71:0b:3d:
6a:12:94:0b:f2:b1:f1:48:cf:f5:ab:22:e6:79:2c:22:33:ae:
59:3c:df:5b:0e:38:03:e0:b3:03:97:15:9e:35:fa:1b:35:33:
8f:be:9e:48:c0:27:77:d0:6f:b5:68:e6:6e:55:36:f2:20:e4:
fa:37:d6:1c:18:e1:20:9e:ee:d9:3e:58:5f:63:65:3c:44:bb:
2f:84:68:df:07:18:7c:d6:ed:38:e9:12:e7:e8:8b:34:d5:77:
97:fd:7b:e9:38:9f:6b:13:38:88:fd:33:af:9e:bf:24:66:4f:
d8:0d:59:99:0d:02:62:5f:44:f0:7d:e0:e4:ae:25:aa:14:c3:
95:7a:94:0f:bb:a0:05:3d:a2:e6:62:fe:a2:d8:2b:fb:9e:78:
28:44:b1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:19 2026 by rpki-client