Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: NscJKT0swg8mRKyYc4xsz/oUcz6YxiX66VAkJo17bZ0=
Subject key identifier: 62:03:25:01:52:D5:D1:00:90:CA:BB:25:55:0B:2E:B5:14:62:74:7A
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 019DA41C96D8D208DBA2E28D124337056A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 05:00:30 +0000
Manifest this update: Sun 19 Apr 2026 05:00:30 +0000
Manifest next update: Mon 20 Apr 2026 05:00:30 +0000
Files and hashes: 1: B9HNNW3Bz7oID9G3-lfUfNqxyrY.roa (hash: tzCu3LyuSxup7J333i9m+mIRLj60qx1pJbahNRpyJGA=)
2: MUOyRWPN46PNKkdduP0g7nQfNok.roa (hash: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: iasQDqavoByrJnIQqr7c++hl31gBHjZpEOOUm/qnGjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:96:d8:d2:08:db:a2:e2:8d:12:43:37:05:6a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Apr 19 05:00:30 2026 GMT
Not After : Apr 20 05:00:30 2026 GMT
Subject: CN=6203250152d5d10090cabb25550b2eb51462747a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:8c:4e:cb:04:77:b5:25:82:38:89:b9:6c:
1f:6a:e5:f7:41:ac:2a:42:47:5f:15:9f:00:8e:61:
9d:de:5f:7b:45:95:ef:13:b9:b2:4b:c2:c4:e7:df:
e5:7a:7c:7a:a2:9d:d6:03:d2:25:7a:00:4c:15:c7:
e4:7f:51:ef:a3:49:83:d5:ec:91:b3:bd:5b:99:cc:
17:25:fe:da:5c:c5:39:6c:d6:e8:f4:1b:19:97:8e:
c4:a2:5a:ee:17:63:71:f9:3d:6d:3d:66:65:d7:82:
6e:c5:98:25:98:ae:3c:3a:70:7c:34:45:80:76:d7:
11:18:97:78:29:b3:89:fa:84:62:41:b9:df:c8:b3:
81:be:8c:08:39:b4:ea:29:0b:22:cf:8d:ed:e3:37:
0f:2e:42:72:4b:fa:79:00:3a:73:63:b6:21:99:0a:
9c:48:07:63:3a:41:52:81:1d:e5:f9:c8:7c:6d:2a:
1a:74:f1:90:d9:11:7b:6a:5e:59:4f:63:0a:35:f3:
23:55:e1:4a:1c:6c:1b:49:f6:5c:c6:cf:31:0c:18:
6d:11:d0:6e:fa:bf:5f:55:1c:c1:0a:af:d3:30:a3:
2c:4e:e8:21:80:0a:f4:61:7f:51:89:3f:fd:df:96:
8b:1f:5c:e8:d5:e4:87:e5:0f:c1:9b:ef:63:35:ba:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:03:25:01:52:D5:D1:00:90:CA:BB:25:55:0B:2E:B5:14:62:74:7A
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:97:5b:91:0f:00:68:85:62:00:31:b3:a5:93:85:20:b0:87:
21:34:94:ee:8a:a0:18:6d:ba:b7:26:5e:8d:97:f6:02:c2:f1:
83:99:db:ca:a2:7d:21:f6:63:fa:15:ef:7a:2d:be:6d:4f:31:
a2:66:ce:01:f4:90:13:5b:ed:d2:b8:56:3d:c1:a4:97:29:d4:
24:f6:f7:f3:68:49:fb:60:60:dd:be:dd:ed:bd:c6:d6:85:b5:
ad:38:76:c6:96:0a:f1:a1:19:fe:84:a8:12:89:2d:03:5a:59:
dd:7e:c2:d7:d5:ce:bc:b7:02:fd:88:29:88:e1:30:21:d3:f4:
07:fb:89:d6:2e:6c:0a:77:f5:3c:33:a9:af:6c:57:85:8c:7b:
54:c2:b0:bf:3b:58:bb:72:37:f2:22:79:ae:94:76:56:31:7a:
6c:10:73:a2:e6:aa:04:f3:66:8e:a8:0e:e7:21:9b:9a:c6:f3:
a9:cc:c6:0a:49:94:5f:2d:b6:00:80:68:24:5d:f4:57:fa:4c:
f6:71:b9:c6:7d:99:7c:23:1d:84:1a:a3:8e:e1:6c:f4:d7:9f:
cc:bf:d9:74:d2:e8:f4:c7:a2:ff:1f:92:dc:d9:62:ed:46:63:
18:28:cf:0b:ce:20:8b:ad:8a:4b:56:f2:eb:0b:4b:65:2c:a5:
0b:7d:9b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:35 2026 by rpki-client