Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
File: zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json)
Hash identifier: /qdDJOGVr3Qj5h3AMocF5oWFtdGsP+5HwcZ+RxEvlqM=
Subject key identifier: 96:DA:BD:7C:09:BC:40:BE:06:63:F9:D8:86:94:C3:3F:17:65:7B:DE
Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627
Certificate serial: 019D9AE267880B868C6033B4193BDB937A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
Manifest number: 0834
Signing time: Fri 17 Apr 2026 10:00:22 +0000
Manifest this update: Fri 17 Apr 2026 10:00:22 +0000
Manifest next update: Sat 18 Apr 2026 10:00:22 +0000
Files and hashes: 1: ynB9BnMOzLQWkJYT8Yx3TzBkQGU.roa (hash: yOnugz5IMt/r/ItObFdGYTlUVT1M5hQ/rMrPgRDzlRk=)
2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: PD2HAzTiPkuh1V5QrF9WduM9uubbBf2K+q8V0ZwAMZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:67:88:0b:86:8c:60:33:b4:19:3b:db:93:7a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627
Validity
Not Before: Apr 17 10:00:22 2026 GMT
Not After : Apr 18 10:00:22 2026 GMT
Subject: CN=96dabd7c09bc40be0663f9d88694c33f17657bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:65:7e:08:f3:59:d5:e8:34:19:9a:80:f7:
12:0b:4a:93:f8:9e:b7:75:71:bd:ba:2d:b1:c4:85:
59:9b:f3:40:99:bb:0e:e8:02:9b:05:9c:20:7d:65:
dc:7f:c5:54:0e:7c:cb:ef:35:7c:1e:f0:c6:9f:77:
58:f8:5a:b2:03:35:90:ce:c8:17:d7:3f:01:06:1f:
4d:2f:c4:40:4d:50:f3:fc:2b:6c:f9:44:24:dd:95:
cf:67:2d:58:5f:6d:6e:3b:08:5d:2e:c7:4c:c8:9d:
a3:a8:f2:7f:9b:46:55:4e:58:db:b4:8b:da:9e:cf:
0d:68:d7:7f:b5:31:82:33:a7:5a:b3:c3:d2:27:3a:
73:db:0e:cb:e5:8f:64:e4:12:91:0c:c9:78:69:92:
87:3c:01:f1:be:cc:04:17:7d:84:a4:dc:36:a3:d0:
16:7e:6c:01:05:d6:e1:4c:d9:0f:15:03:8c:ad:27:
61:d9:ec:84:c4:d5:86:82:1f:10:9d:7f:12:31:77:
2c:99:70:3e:2c:eb:08:63:52:fc:76:49:f0:02:c4:
1e:07:ff:5d:ac:38:fa:dd:c4:bf:31:6c:f3:13:df:
ed:3b:00:43:7a:ca:65:60:0e:34:dd:d0:54:39:14:
ad:b0:0a:4f:a4:51:cd:cb:82:32:a6:b9:e6:15:dd:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DA:BD:7C:09:BC:40:BE:06:63:F9:D8:86:94:C3:3F:17:65:7B:DE
X509v3 Authority Key Identifier:
keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:76:b8:fd:a0:ff:b9:da:a7:34:63:04:07:db:0c:18:15:46:
16:e7:f2:99:12:5d:ed:4f:b7:13:de:f0:00:83:2f:c3:e3:a3:
23:73:98:42:25:bd:fd:58:9a:cd:0c:19:8a:62:01:da:ee:e6:
b3:0b:26:03:e0:65:fb:fa:01:de:fe:02:65:0b:1d:b0:fa:18:
f3:11:ef:6b:cb:77:59:c2:0d:63:9b:87:40:51:b1:fe:be:b1:
49:a0:96:eb:73:73:9d:cf:d5:27:4e:93:25:6e:28:2f:01:e9:
ad:85:2b:d7:61:8e:50:8d:fc:81:8d:7b:d7:9e:fb:6c:6b:4f:
1f:43:cf:64:a6:dc:dc:87:4f:3f:f1:2f:82:d5:1b:86:c2:ba:
d2:72:59:99:58:95:dd:6a:e1:97:6d:f0:45:3f:db:66:df:10:
27:49:76:21:09:7c:cb:7d:fa:3d:7d:52:8e:d1:f8:02:55:0c:
46:2a:4a:a2:c7:16:c4:4e:1f:44:34:a8:9f:c7:c1:d0:51:f6:
9f:36:73:30:2e:25:c6:6f:a7:6f:75:fd:61:e6:1a:00:74:bb:
8d:e8:21:a4:9f:57:0e:4b:84:bf:a0:aa:c4:1f:e9:94:28:7c:
45:cc:9e:a1:6b:bd:33:09:bd:c4:16:0b:fb:83:62:7a:f5:52:
a3:ef:b4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:47:09 2026 by rpki-client