Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: ulxsoOKQnlX7IJotiJDqVk/ym3xfVLzJfnTPtOnAsjo=
Subject key identifier: 99:48:7A:54:8F:FE:4D:F6:56:B8:E1:B3:55:7E:81:96:29:CD:21:87
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 019D992B79AE09CC8556D074A7919D0CB722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 0BB6
Signing time: Fri 17 Apr 2026 02:00:56 +0000
Manifest this update: Fri 17 Apr 2026 02:00:56 +0000
Manifest next update: Sat 18 Apr 2026 02:00:56 +0000
Files and hashes: 1: 4MSE4UyGO5LwOd_U2HJUAYFw8yI.roa (hash: 1DrymcOv7aoritq27aJXxxGAaxiSifi94Z89A2CC9Ow=)
2: KaN7RLL5KVyq30qD32Rnb_nls78.roa (hash: bzsFsGck1pscarjTWs0d9Ebn5ZXqcM8xKvGnRO+nPFk=)
3: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: nRde0iLPSbV+igiwLCOjmPd0MB8NVE0eYUNyX80aIc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:79:ae:09:cc:85:56:d0:74:a7:91:9d:0c:b7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Apr 17 02:00:56 2026 GMT
Not After : Apr 18 02:00:56 2026 GMT
Subject: CN=99487a548ffe4df656b8e1b3557e819629cd2187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:80:b2:23:63:68:6f:ea:1b:c2:df:d0:fe:
7a:44:cd:52:b3:a6:53:13:58:e6:18:6d:db:87:3c:
3e:de:37:84:13:a1:80:c2:d0:39:c1:cf:8a:f8:d5:
2d:19:39:47:c6:a5:45:a8:19:d1:d0:38:d3:82:d2:
89:cb:bd:3b:31:77:28:53:73:bf:6d:19:25:e3:31:
2b:17:be:b9:7d:2d:d7:31:42:6a:ad:b5:ba:f1:c8:
0c:cc:52:f8:3a:ed:76:85:35:0f:4b:ad:f0:67:a3:
dc:62:47:63:09:13:ad:68:af:92:e8:dd:60:34:f0:
94:a4:06:d2:c4:b8:a0:9d:be:62:da:ad:da:84:f5:
92:9e:62:26:87:0f:4e:fb:e1:03:00:1e:a7:60:4b:
79:fb:37:d9:db:12:f4:d4:86:3d:64:43:5e:06:85:
d2:44:50:8e:2a:d9:75:97:c2:ab:01:92:55:da:61:
23:5c:29:b1:6c:58:2d:82:b5:57:e9:e2:04:f0:a5:
d8:e8:b9:cb:b3:8d:30:e8:4a:b2:5b:fe:fc:13:f7:
6d:95:70:74:65:fb:7f:ad:f7:3b:d4:69:02:a9:ef:
dc:12:eb:7d:d4:82:ee:ee:6e:3f:35:31:ac:8e:2a:
6c:e1:2f:3b:14:8e:20:c1:77:80:ff:54:e7:68:0f:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:48:7A:54:8F:FE:4D:F6:56:B8:E1:B3:55:7E:81:96:29:CD:21:87
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9b:fe:21:51:74:87:3f:03:6d:48:ee:f1:27:bd:de:4e:46:
85:4a:cf:fc:97:49:26:56:23:ba:66:6a:bc:db:b7:10:07:33:
f3:da:d3:33:6c:37:65:51:20:42:21:f7:db:3a:44:38:bb:e1:
f7:2b:4e:33:b2:e9:7d:3c:ea:60:24:33:1b:21:db:f5:7b:36:
85:5e:b7:e8:4c:7c:e1:d9:93:71:0d:3e:b2:de:53:3c:04:72:
d8:4b:61:db:c4:aa:17:65:6f:bd:cc:6b:72:a0:83:17:ed:ec:
3e:ba:53:47:10:29:b8:af:1f:57:0b:da:c6:4b:47:fd:67:e3:
bb:bb:72:81:a2:49:d5:c8:a0:e6:d9:b0:68:60:c1:43:83:39:
04:06:08:ef:fd:aa:ca:93:af:3b:ac:7d:d1:4c:f1:69:4c:89:
94:d4:63:bb:f4:dd:34:a2:19:f6:35:94:40:5d:54:57:71:c3:
4b:8c:3a:cd:a6:1f:d4:2e:5e:2a:ba:89:f7:5d:fe:04:08:64:
1f:51:1c:40:3d:3f:fe:db:e4:fe:29:e3:09:9f:a9:62:26:28:
b5:36:c0:2b:59:98:d6:75:bf:1d:58:e5:26:0a:ff:ff:cc:62:
8e:cd:fa:66:63:6e:8e:84:e3:7e:f1:2b:3d:99:20:bf:f3:37:
a9:28:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:59 2026 by rpki-client