Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier: q+yDhrpzTb0iXIYFiPbf0r5nmpQkZQ6KFN4vkFZC/JE=
Subject key identifier: 9B:43:B2:52:C0:22:C5:29:03:32:B0:E7:95:EF:85:54:4F:3A:BB:AF
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 019D99D0D77C89154056A6C81AB915F53D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 05:01:33 +0000
Manifest this update: Fri 17 Apr 2026 05:01:33 +0000
Manifest next update: Sat 18 Apr 2026 05:01:33 +0000
Files and hashes: 1: TskBRorPbivXUk_iUbLUxu34o40.roa (hash: SSq2isSE8Y0yEi7EArCYQ3vmU4quGSz5WkWK232VWsU=)
2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: uZM25VHnMPn07iVBmGaRqZpQhm64O13ryOZeEF1bYJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d7:7c:89:15:40:56:a6:c8:1a:b9:15:f5:3d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: Apr 17 05:01:33 2026 GMT
Not After : Apr 18 05:01:33 2026 GMT
Subject: CN=9b43b252c022c5290332b0e795ef85544f3abbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:fe:ad:5a:34:20:8b:80:fa:6a:13:14:7c:
c5:7a:f2:62:7c:24:f8:3b:24:ac:55:9b:0c:fe:da:
32:56:33:d6:07:66:60:23:b4:a1:43:49:a9:84:f0:
e4:f7:cc:e8:af:dc:7b:1c:c4:62:5f:32:44:15:3f:
d6:15:4b:8c:f5:9c:89:ac:9a:f1:b0:01:d4:a4:b2:
c6:b3:31:a9:bd:b7:33:c3:a1:3b:2c:aa:46:09:cb:
f8:83:13:45:9c:89:bc:8f:24:00:e7:83:82:1e:27:
27:54:61:3f:0e:6f:d9:f6:f1:2b:3c:68:ba:2e:07:
33:3d:cd:da:82:98:03:cb:95:62:7e:2e:01:c1:c5:
49:57:a5:db:f8:be:27:fc:69:73:7f:dd:6a:21:d5:
ff:af:f2:7e:7a:fc:fc:9d:c7:ae:1a:16:43:97:84:
18:ff:47:b0:21:61:93:c5:7d:58:41:f6:c5:7a:07:
d2:18:37:e7:eb:ce:e5:93:18:21:d7:f8:21:f9:a5:
da:98:d4:9f:fe:2a:15:77:b3:9c:4a:f4:05:ff:65:
fa:bd:a5:29:e2:68:76:c9:5f:3b:b3:50:fe:24:71:
7b:f2:74:7c:75:cd:62:c7:45:33:7b:7e:8b:73:e6:
58:cf:cb:60:90:4d:84:81:e9:9f:78:24:19:4b:3f:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:43:B2:52:C0:22:C5:29:03:32:B0:E7:95:EF:85:54:4F:3A:BB:AF
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:21:cb:f7:9d:0f:23:12:68:73:a1:26:48:7b:95:e5:f6:76:
05:e0:7a:b8:f6:98:96:7f:09:23:01:49:a5:c0:6d:1a:78:e3:
2e:15:40:87:bc:fe:48:51:3a:ea:86:85:35:19:14:dd:e0:fb:
3d:25:49:3e:11:0d:e5:cc:48:ae:1f:07:64:2a:03:28:0a:a2:
7e:df:1c:18:f9:58:87:a0:b4:39:9a:b9:84:c8:09:01:f0:ef:
94:5f:a5:96:e9:1d:4f:f6:12:61:1d:42:cc:aa:81:6b:d5:fd:
1e:e7:0e:80:70:56:cd:68:64:8f:2e:74:8f:64:ef:b8:1c:cf:
80:15:a5:1a:ba:95:fd:00:81:09:96:b5:bb:b5:b9:2a:d6:22:
e4:a7:2c:8b:0f:36:a4:0f:45:ab:06:9a:c9:45:5f:d8:32:f3:
0f:36:b5:a1:07:13:e9:3b:94:ff:c7:d1:b9:c1:3c:1c:0b:fa:
0a:58:23:18:0f:35:c5:38:9a:b1:38:43:66:b2:da:c1:62:4a:
33:79:7b:ae:2c:59:38:85:f3:85:d5:23:d4:1c:0f:6a:18:1e:
96:ce:0e:3b:c5:f3:f4:10:d1:d7:e3:78:b8:3b:e0:ee:32:a0:
f6:d4:2d:86:48:cf:c6:95:33:76:b1:a7:3e:1e:7b:af:40:e7:
e1:44:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:46:15 2026 by rpki-client