Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
File: ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json)
Hash identifier: EiUtKSJ4X4V0WVRUKR7Q+yz9UBbp4odOkP3jOoU5o3U=
Subject key identifier: 8B:02:0F:F1:D2:BC:75:17:99:76:1F:84:07:DE:FB:F3:18:75:EA:9A
Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
Certificate issuer: /CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Certificate serial: 019D99CFF9279735CE57B0FFBAFB47409A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
Manifest number: 1628
Signing time: Fri 17 Apr 2026 05:00:36 +0000
Manifest this update: Fri 17 Apr 2026 05:00:36 +0000
Manifest next update: Sat 18 Apr 2026 05:00:36 +0000
Files and hashes: 1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: mjIBmeTfGZUG6hPDRtXH5v+Yza9v+B1Aerkf/vNdusw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f9:27:97:35:ce:57:b0:ff:ba:fb:47:40:9a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe
Validity
Not Before: Apr 17 05:00:36 2026 GMT
Not After : Apr 18 05:00:36 2026 GMT
Subject: CN=8b020ff1d2bc751799761f8407defbf31875ea9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:a8:13:4f:bc:55:dd:3e:cb:b3:66:08:45:
2e:80:bf:8b:f0:c3:65:25:d1:be:2d:45:69:53:29:
e4:01:2d:3b:aa:be:0d:4e:b9:a5:f0:f6:c8:36:d6:
6b:b6:c8:84:bf:07:b6:6f:fc:54:71:ab:2f:e5:35:
1f:1a:f7:f6:f6:76:92:3b:6c:f6:3c:98:6f:f6:a2:
ad:b7:2f:53:a0:35:ed:b3:9e:8e:91:82:e0:6b:71:
9f:b0:e8:42:83:06:19:4f:bd:cc:d0:88:6c:ad:7b:
1f:25:87:a8:c2:8e:c2:9d:d2:f9:88:b5:5b:e3:10:
43:d1:67:fc:a3:e6:66:f1:f6:d6:c4:39:18:df:b7:
21:dd:90:c2:50:f8:95:36:94:97:a4:25:79:f7:60:
49:d2:f1:81:96:47:12:ae:93:0f:12:e7:44:ef:6e:
1a:18:88:b9:53:ea:bf:eb:8e:7b:0f:0e:b5:bf:50:
7a:4d:b8:c8:b5:c2:19:0f:f4:fd:ea:3b:cb:62:34:
73:e2:c3:0a:d4:f7:3c:b4:06:d7:20:38:eb:71:36:
87:39:2d:d5:fc:8b:23:15:f9:8d:ad:e8:4f:ad:2a:
f6:d7:ee:1c:b6:b2:56:97:95:95:64:ff:48:6f:fc:
e4:be:52:87:9e:89:24:cc:f6:c9:83:33:23:80:56:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:02:0F:F1:D2:BC:75:17:99:76:1F:84:07:DE:FB:F3:18:75:EA:9A
X509v3 Authority Key Identifier:
keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:93:ad:6f:c7:5c:dc:98:14:ef:5f:0c:34:e6:49:2a:ab:c8:
6c:b1:5c:70:02:9b:8a:3c:4b:f5:b1:ce:9f:85:da:1f:8f:cb:
96:d4:67:01:77:1e:6a:e2:8d:bd:4e:e0:c7:38:3d:c2:cd:a2:
7b:6a:1c:68:0b:db:2f:34:7b:6b:dd:a7:99:5d:8f:a1:4d:d0:
10:de:10:1b:c8:95:6d:6c:67:f0:a7:68:3a:ba:a3:3f:97:f4:
9b:7a:9a:63:38:60:7f:23:58:f6:aa:9f:33:25:b5:38:38:6a:
aa:8d:a5:d2:95:b5:04:6e:dc:a6:93:0f:97:a5:12:4d:22:b6:
ab:06:25:f5:0b:cc:35:50:78:ce:4c:37:52:f7:74:14:04:e4:
1f:a9:ad:46:3a:1c:b3:ca:89:5d:87:59:da:36:93:f2:40:42:
f9:cf:e5:02:e0:fd:49:85:b3:3a:b9:21:c4:97:c6:c3:9e:4d:
b7:d5:ae:8d:ee:53:c8:b0:4c:eb:53:57:01:ab:73:68:8f:37:
89:92:79:f1:23:da:74:f2:2e:5e:01:2b:53:50:de:db:c6:23:
42:f8:42:be:51:af:65:0f:bf:82:5a:a8:df:9e:c2:91:aa:de:
22:b6:36:8c:58:e7:73:0c:49:e5:1f:b6:d2:85:a5:4e:5f:d1:
cb:22:78:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:12 2026 by rpki-client