Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier: KYzueFtykqWrzIQRQdQ1Qk6YZBalUseOMe56N7BoAwE=
Subject key identifier: B0:BC:06:46:E6:A2:0D:0B:93:8E:22:69:42:BD:77:FD:00:5E:68:88
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 019D99D0ECC5F3CD65305CCABF0FE33A159E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number: 0810
Signing time: Fri 17 Apr 2026 05:01:39 +0000
Manifest this update: Fri 17 Apr 2026 05:01:39 +0000
Manifest next update: Sat 18 Apr 2026 05:01:39 +0000
Files and hashes: 1: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=)
2: Cr-_Jks4-Nf_6cTAfqEm2bEkrqY.roa (hash: Lfoyt36d2xlYMQKhlmP8HR47UA8DZd6j01qEp/DuwGg=)
3: GElj9icCt-w2mx3YliBHFVCYPPg.roa (hash: PirS1DKcgnSFMhly0KbVf5RAZaqtFd0hZcWS32fEx7s=)
4: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=)
5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: wyY1+yVaogICqvRRlM9Lqb+IHW3Qkmd4nddvIGhBTdg=)
6: _LFVw1RdLCWt-By3DgXS7TEwY-g.asa (hash: 7sp68pc4lJoudoB6GmnBQDPxVv/dJsT1KjSRKMkEvH8=)
7: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=)
8: m1QjC3UV2Ny4UxXqYlT4s7dYaFg.roa (hash: 6V+rFBPB+VWm7if/CwhSgG0t42lVGrHbuCda8HK7Mzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ec:c5:f3:cd:65:30:5c:ca:bf:0f:e3:3a:15:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Apr 17 05:01:39 2026 GMT
Not After : Apr 18 05:01:39 2026 GMT
Subject: CN=b0bc0646e6a20d0b938e226942bd77fd005e6888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c2:24:6a:10:73:80:06:c3:36:c0:65:45:9e:
df:a0:a7:d9:49:05:09:d6:e5:bc:d4:fd:76:c6:60:
00:a6:08:49:3d:ef:a6:ab:4a:dc:6b:6d:c4:e2:ea:
c0:5d:81:8b:23:b5:69:ad:9d:0a:14:87:b6:5d:b0:
04:c4:1c:0b:ea:1a:65:2f:0a:d1:f9:35:ee:af:26:
76:6c:c1:e9:e1:5f:2a:62:1a:e9:52:e7:f3:5f:d0:
8b:94:1a:94:e2:88:af:d4:77:20:34:6a:a9:cd:a3:
be:85:b4:a6:71:0a:d0:8d:17:f3:0b:36:59:65:f8:
5e:1a:cb:24:d7:09:6c:dc:4b:6c:15:9d:3b:a0:56:
92:90:9d:61:c2:55:ef:57:62:e2:b1:69:c4:90:60:
04:cb:a2:15:ec:c8:cc:97:57:d9:04:c5:70:00:f0:
99:a3:0f:65:d8:20:79:83:bc:8e:40:ef:9a:dc:9e:
f3:61:a3:11:02:71:73:b9:12:d6:4f:ee:3a:a3:d5:
da:35:91:f1:4d:29:e8:12:05:7c:0a:40:ff:1e:5a:
da:7b:68:fc:06:56:0c:7a:57:4e:ce:38:ef:33:be:
dd:71:3c:e4:62:0c:04:38:b2:93:16:4e:4e:9c:9a:
d2:a6:d0:29:d9:7d:cc:6f:02:90:c7:dd:15:17:e9:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BC:06:46:E6:A2:0D:0B:93:8E:22:69:42:BD:77:FD:00:5E:68:88
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ce:8f:57:49:5c:fa:f1:9b:26:b3:7b:b5:13:a0:f9:ab:fb:
da:b1:59:0c:c9:a1:0b:fb:9d:9c:4f:e2:70:98:a7:dc:be:cd:
99:7a:4d:79:4d:db:4a:af:6a:c9:ea:ce:b5:1e:f8:1f:b0:67:
aa:7e:b3:39:a5:78:16:5e:04:54:d9:08:e9:75:6d:a0:4f:fd:
1f:14:48:c8:03:5c:05:e8:30:6e:ea:3b:de:3c:45:60:63:31:
80:fa:b0:6e:69:16:58:cd:f3:11:73:2a:15:b7:88:72:28:18:
1d:31:59:dd:76:85:89:78:a4:e8:ae:02:84:5e:91:ad:85:db:
27:a9:1b:b2:ed:0c:e5:56:6c:90:59:e8:cd:66:de:ca:ff:ee:
2c:10:aa:92:0b:0d:4a:1e:93:e9:68:37:2b:25:da:a0:53:2b:
1c:f4:b8:37:92:81:af:af:a7:e0:4c:d8:94:3c:79:eb:5d:c3:
ff:57:55:6f:91:6a:3a:20:2d:1e:e4:4d:fb:61:ca:7a:28:6b:
c5:8a:8d:79:4a:2e:0e:62:02:86:6b:95:c5:05:1c:7d:79:38:
25:35:11:02:2a:25:3c:e5:cc:ce:62:a4:98:b4:09:ec:ff:0c:
a1:c6:0f:2b:f1:ee:ff:00:ab:59:4c:4e:8e:34:70:44:cc:a9:
f8:bb:c4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:37 2026 by rpki-client