Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
File: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft (raw, json)
Hash identifier: 6F/cKKppOQqtS7lVI3eW+tvt9JNp13S6ejs5AHRtOwE=
Subject key identifier: 31:82:BA:DC:CD:FD:EF:1F:25:8F:C3:5C:34:45:E2:72:79:84:A8:D7
Authority key identifier: CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D
Certificate issuer: /CN=ce1f59ae34548132892fcc89b1595f9b0360198d
Certificate serial: 019D9962C111FFF728599B96AD696CF6F7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 03:01:19 +0000
Manifest this update: Fri 17 Apr 2026 03:01:19 +0000
Manifest next update: Sat 18 Apr 2026 03:01:19 +0000
Files and hashes: 1: 0fMGliU2DY90o-COL7gfsd6xbVw.roa (hash: pyD2slLDpEMFdPN9pfMsq689iSsZ/8LJ4vMycIuRMpg=)
2: zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl (hash: EwSmyp/srHH8mfSR6NQzCrP3Y/X0hKxTnMdpqLQ5bxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:c1:11:ff:f7:28:59:9b:96:ad:69:6c:f6:f7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1f59ae34548132892fcc89b1595f9b0360198d
Validity
Not Before: Apr 17 03:01:19 2026 GMT
Not After : Apr 18 03:01:19 2026 GMT
Subject: CN=3182badccdfdef1f258fc35c3445e2727984a8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:86:58:10:d7:39:2f:c3:63:14:62:4f:40:
48:65:e2:20:e1:5b:cd:ae:3a:90:3c:77:1b:14:0a:
4d:11:a8:68:93:0c:d1:b2:fd:b1:eb:c9:a3:15:7a:
15:2a:5d:79:a1:5c:fa:86:15:81:21:88:e0:10:90:
18:0d:89:1a:0a:10:3f:73:b7:46:39:cd:04:f4:64:
88:50:33:ef:6f:92:b6:47:f5:f2:e5:d2:2a:36:b0:
cd:e5:53:91:fd:08:75:49:ab:82:d5:6b:29:89:64:
0d:ad:11:b7:72:c8:21:7e:dd:2b:d7:1d:cd:f0:b7:
bb:6a:e5:14:df:f3:bd:96:95:6c:95:f2:11:52:b7:
58:a5:48:2f:49:10:ce:9b:4d:6f:47:a9:9f:13:9b:
5d:ed:5f:cb:4c:33:a9:64:5f:eb:ec:5b:56:01:ca:
18:69:1c:78:d7:28:b9:fd:55:ed:3e:e2:61:a8:a4:
1a:a6:1e:72:37:0c:ee:a7:0f:99:a8:b1:db:fa:96:
40:bb:1c:37:94:b4:fa:93:4e:84:5f:91:5a:6c:ae:
f9:e3:36:62:4b:19:cf:80:df:a6:36:22:b6:a0:04:
f8:65:e1:97:8c:e0:bd:78:40:09:22:44:81:4f:3c:
4e:12:bd:10:fa:ec:05:40:11:aa:6c:3d:37:05:3b:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:82:BA:DC:CD:FD:EF:1F:25:8F:C3:5C:34:45:E2:72:79:84:A8:D7
X509v3 Authority Key Identifier:
keyid:CE:1F:59:AE:34:54:81:32:89:2F:CC:89:B1:59:5F:9B:03:60:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4fa2d8-d71d-49b1-8eb0-a3589da16c85/1/zh9ZrjRUgTKJL8yJsVlfmwNgGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d9:df:9d:86:a6:82:88:12:19:cf:cd:86:1b:c5:f1:9a:30:
12:a2:e9:65:c7:69:be:78:9d:02:86:ad:ba:e3:88:1e:83:b0:
3a:21:3d:08:8c:78:5d:2f:99:cc:7b:a5:c6:d3:3b:02:7f:02:
72:46:c0:cb:61:a8:0c:ee:47:d9:94:b2:a2:1a:d1:de:3e:84:
15:38:43:d3:05:33:1c:d2:02:ac:a6:ca:0b:db:99:14:57:2d:
e9:6d:36:b0:01:4c:d5:21:84:82:91:59:0b:81:19:32:69:b7:
aa:61:35:fc:24:69:37:0b:88:67:2b:bb:f4:94:3b:49:92:58:
ec:0b:51:4f:27:94:8d:14:0d:1f:50:16:84:99:6f:87:b8:d1:
57:36:c5:bc:83:8d:9f:9c:23:36:d7:73:bd:3e:9f:1f:e0:f9:
74:80:e2:b9:c1:f3:f1:9f:6f:fd:c3:b9:6e:37:fd:f0:63:43:
3d:c0:d2:90:56:68:51:4a:db:7f:40:05:c8:70:c9:3f:fb:f6:
dd:74:38:ec:03:06:67:27:a9:62:38:25:81:8c:dd:09:d8:c7:
a0:c1:9e:f4:fd:81:2d:9d:c5:06:79:62:fe:d3:eb:a5:6d:f6:
1a:be:8d:d5:ec:e7:83:46:d4:db:cd:38:58:d0:3a:03:09:e6:
1b:7e:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:38 2026 by rpki-client