Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
File: zRQ2kCMKRApot6iqmCefL2Xf7ig.mft (raw, json)
Hash identifier: A8It/9DaEiJo6NRQemeFUXGgTiO+WKp3nXRDsAAEGM8=
Subject key identifier: A8:26:8F:0A:E5:33:E1:35:55:E0:31:9F:06:06:6D:6F:B2:33:2E:D8
Authority key identifier: CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
Certificate issuer: /CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Certificate serial: 019D99D06E6503F8BA98C14F16B6C117DBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
Manifest number: 15C4
Signing time: Fri 17 Apr 2026 05:01:06 +0000
Manifest this update: Fri 17 Apr 2026 05:01:06 +0000
Manifest next update: Sat 18 Apr 2026 05:01:06 +0000
Files and hashes: 1: beStaP3U9BouVtR6HKL7Bht809g.roa (hash: 9C0Yz+gtWBKD86eXJ/yNK0jQEWAJqpkTW4DLxbpVN08=)
2: zRQ2kCMKRApot6iqmCefL2Xf7ig.crl (hash: NacDqHYIJXDntGIoN01aKVwXnWinuLvOyJrqMa9lRMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:6e:65:03:f8:ba:98:c1:4f:16:b6:c1:17:db:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd143690230a440a68b7a8aa98279f2f65dfee28
Validity
Not Before: Apr 17 05:01:06 2026 GMT
Not After : Apr 18 05:01:06 2026 GMT
Subject: CN=a8268f0ae533e13555e0319f06066d6fb2332ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f1:3c:d6:6f:12:62:42:a0:5c:f4:0d:28:e8:
fd:30:e0:3c:e7:9b:a9:eb:70:49:a1:6c:1e:e5:a6:
55:ed:9c:c0:0a:43:b6:35:2b:06:d5:b8:cd:a1:d3:
df:cc:c4:96:1c:b2:a7:18:9d:35:e8:d3:85:70:bb:
66:f0:7d:96:6f:cc:e7:8d:31:07:ac:a8:d4:7a:59:
e5:a2:1b:7b:8c:88:3d:3e:f2:a1:80:6b:7a:12:27:
c2:e7:0f:ae:4a:79:8d:e9:08:a0:9e:24:85:2d:e9:
b0:0c:84:ee:c5:7b:a3:f3:df:1f:93:6f:e9:96:d4:
5f:13:28:73:d5:3f:c8:2b:de:45:b8:06:15:ee:0d:
cc:03:08:eb:49:eb:04:a8:af:9a:e9:c6:09:39:56:
97:10:e8:e1:70:24:14:87:8c:8c:c4:a8:ec:f0:33:
62:2f:66:18:f4:ba:d9:5a:08:e4:a2:c1:49:bf:e8:
40:5c:50:3e:d8:57:89:c2:27:33:f5:2f:5a:9d:00:
88:8c:fc:aa:c7:27:06:6e:5b:27:97:24:00:8c:37:
ae:77:8c:73:16:28:fc:c4:4c:2c:2e:1f:ab:a8:bb:
0e:c0:4f:93:23:7f:bc:99:53:67:0d:f2:2b:71:91:
a2:9b:97:bb:5c:53:a9:df:6e:1f:e6:d4:35:1e:e1:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:26:8F:0A:E5:33:E1:35:55:E0:31:9F:06:06:6D:6F:B2:33:2E:D8
X509v3 Authority Key Identifier:
keyid:CD:14:36:90:23:0A:44:0A:68:B7:A8:AA:98:27:9F:2F:65:DF:EE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRQ2kCMKRApot6iqmCefL2Xf7ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/09456e-a71c-43b3-bd40-8ee3d98cad5b/1/zRQ2kCMKRApot6iqmCefL2Xf7ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:17:07:61:79:ac:d5:ab:b3:bf:8a:1d:a0:27:c8:00:fc:57:
59:33:e4:79:f8:e4:65:22:2a:28:6a:f8:a4:00:a3:bd:92:84:
11:9d:fd:f0:fd:8c:7d:7d:b4:31:5a:aa:f2:4b:ce:80:63:50:
15:9b:40:57:69:62:80:b1:06:f2:90:22:8b:a0:ed:5b:39:56:
13:6e:07:2f:18:30:c5:c4:27:2c:33:f1:96:2f:1b:ac:a8:0d:
db:86:ef:7e:7d:c9:ff:5a:ab:63:cf:12:66:82:64:ec:f3:cc:
e4:0d:9c:0f:58:0b:8e:11:13:11:0f:53:a4:e9:fe:a2:2d:27:
7e:1c:24:4d:5c:87:c7:93:5c:1f:6d:f0:2b:f8:90:e0:6c:82:
06:6e:4a:18:08:67:63:fd:9c:78:d1:bf:44:b4:af:d9:a5:c0:
9b:f4:3c:a6:14:88:67:7c:b6:6c:cb:35:0e:d5:2f:d8:65:94:
03:74:f5:b2:5b:55:a2:1e:1e:d4:9d:8f:8a:1b:20:17:fa:cd:
aa:6d:cf:d6:bf:84:e9:a8:09:2f:b0:c0:96:13:ab:ec:bd:ec:
cd:1e:b6:bd:68:92:53:25:ce:29:f1:a3:70:8b:c4:b9:8a:86:
10:ec:1e:ba:e3:27:1c:6f:8d:99:5f:80:91:cb:72:85:6c:89:
73:4d:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:33 2026 by rpki-client