Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
File: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft (raw, json)
Hash identifier: S5czUxMr9KJGAuOLDHVaeuqJW6w8IpIzqv9fdybiZRI=
Subject key identifier: 9C:57:66:1B:7A:12:5D:25:98:E2:50:79:FF:6E:AD:41:8D:F9:F5:FA
Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
Certificate issuer: /CN=646836c9214faaa16798a93e8773e599534b29d7
Certificate serial: 019D99CFF97A54E177ECFCFF500E149C048B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
Manifest number: 0A2F
Signing time: Fri 17 Apr 2026 05:00:36 +0000
Manifest this update: Fri 17 Apr 2026 05:00:36 +0000
Manifest next update: Sat 18 Apr 2026 05:00:36 +0000
Files and hashes: 1: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl (hash: Q+SXw+zvN3mCFgHVlFRH7xPAOzgTYztw8sI719frFrU=)
2: xqX86PxnYUFgmbMyGq-FYjU7myI.roa (hash: LU7BTND6Kz806aRKd+CDSvMICobI0jgTkTNE1f7lbDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f9:7a:54:e1:77:ec:fc:ff:50:0e:14:9c:04:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7
Validity
Not Before: Apr 17 05:00:36 2026 GMT
Not After : Apr 18 05:00:36 2026 GMT
Subject: CN=9c57661b7a125d2598e25079ff6ead418df9f5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:0b:e9:b4:cf:88:7e:52:36:f8:f3:86:a3:
1c:3d:98:09:bd:32:b5:cd:49:88:23:c1:4d:ed:32:
27:11:7a:71:10:8a:a0:68:1b:0f:4c:bb:b0:4a:58:
90:b6:af:4a:72:de:89:3f:8a:cc:42:d1:8e:02:1d:
48:99:a2:d3:fe:c5:b2:d7:90:72:d0:6d:2e:19:f0:
39:a9:d6:1e:40:0e:a3:73:fd:61:f3:2a:35:5a:60:
a3:33:78:5a:c5:f8:5d:91:b2:90:09:ba:a3:a1:bc:
e8:6f:9b:ea:04:42:e3:d6:e7:a8:29:c6:56:95:3f:
c7:9f:78:3e:6e:f8:fc:6e:63:fa:9a:cc:25:bd:6d:
00:fc:c2:6a:01:53:01:1a:6c:06:cb:b2:df:d8:34:
ab:e1:07:26:77:31:c6:42:72:7b:a0:2c:b8:89:cf:
c2:ad:05:62:d0:2f:67:ed:62:37:89:4e:ae:9f:36:
3d:60:6f:e0:55:1d:e2:79:45:cc:0e:5b:e5:a6:d3:
a8:57:16:6d:b7:9d:ac:00:26:fe:3e:49:53:4f:c9:
d1:f8:24:26:b0:c8:49:78:f0:14:1c:c4:70:81:ef:
e4:21:b9:7b:8f:5d:98:07:06:75:43:88:84:d9:ac:
e2:9a:de:0a:ae:2d:82:c3:ef:a4:df:51:6b:25:01:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:57:66:1B:7A:12:5D:25:98:E2:50:79:FF:6E:AD:41:8D:F9:F5:FA
X509v3 Authority Key Identifier:
keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:62:36:a9:7a:7e:19:fe:ae:4d:58:a7:a9:7f:a7:42:09:3a:
dc:b7:ab:0c:50:88:a8:28:11:69:90:e5:69:b1:71:c2:6b:28:
c9:26:01:7f:26:79:b1:ee:ff:db:7a:f2:f7:86:54:00:4e:ec:
e4:13:a5:45:21:1e:a4:fb:c3:31:b8:55:98:5b:ed:73:9d:2b:
ae:2e:34:d3:0d:6f:a8:c0:b6:1a:2d:0d:68:96:af:f8:36:fd:
d7:ff:90:d2:b0:10:0e:76:7f:24:97:df:da:ea:59:93:7e:d0:
a9:9d:7c:79:0c:39:26:f9:42:be:1c:0b:eb:67:b1:fd:37:b1:
f9:b9:8e:56:49:dc:44:32:10:e9:13:17:d1:3e:f4:63:32:91:
ff:86:19:53:18:88:60:31:b0:38:22:b0:a9:35:73:04:e6:b6:
3f:d4:8f:f9:16:21:e7:72:44:cb:00:cf:6e:94:af:50:d6:78:
84:f4:3d:b2:de:52:52:6a:38:2e:03:b9:31:d2:f4:91:77:fb:
06:0d:0c:0e:11:d9:28:ce:4b:3d:28:cd:81:96:a7:d5:80:8a:
d9:05:0c:fb:44:57:65:20:d6:02:97:6d:70:04:1e:35:4c:ad:
71:0e:e8:d3:90:fe:8e:ff:98:ec:66:4c:80:0c:1b:8b:f8:6c:
56:80:38:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:11 2026 by rpki-client