Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File: ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier: 7vdZrO6LV+5qJO/bFpyFg1ICckjX399m2bYim6HAU1M=
Subject key identifier: 03:00:C0:D9:39:B2:A6:53:04:73:B2:9F:19:B8:BC:FA:41:61:E3:F7
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial: 019D98BDB62FFF9BBF3B1A085F8E6B3F234E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number: 1029
Signing time: Fri 17 Apr 2026 00:01:02 +0000
Manifest this update: Fri 17 Apr 2026 00:01:02 +0000
Manifest next update: Sat 18 Apr 2026 00:01:02 +0000
Files and hashes: 1: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: gXtPRjzR/9Yab8DzXspZU6akCqzkZGoj0xZqA7CeSLQ=)
2: y5HQcVK0OCpA2qLDSgEXDDcdvrQ.roa (hash: N7GdQ0FkLOrci0SR8hsklzMqdumTV6SFC6K9X7skI5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:b6:2f:ff:9b:bf:3b:1a:08:5f:8e:6b:3f:23:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Validity
Not Before: Apr 17 00:01:02 2026 GMT
Not After : Apr 18 00:01:02 2026 GMT
Subject: CN=0300c0d939b2a6530473b29f19b8bcfa4161e3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:8f:01:2b:e4:e3:22:56:f4:ba:ba:b6:31:
96:23:34:87:44:c8:82:b9:86:ed:83:e9:06:b9:d4:
1a:b0:b5:17:9f:1e:14:b5:e8:cd:af:dc:ac:27:fa:
08:a6:e4:3b:03:a8:a8:dd:66:e9:15:3e:69:1c:16:
6b:5c:16:53:25:0f:68:9f:96:99:8c:a0:da:8a:0f:
fd:ba:71:57:b7:9f:86:53:2b:d3:2c:e8:46:24:85:
08:7b:02:7c:29:7d:ad:35:4c:cd:66:2d:56:b8:d4:
69:05:c2:22:ed:ed:67:7d:96:48:c1:8d:57:56:91:
d2:16:16:c2:55:3a:28:6f:c7:55:b7:95:97:5e:09:
97:7c:da:30:48:69:11:d7:41:5e:1e:d2:aa:e4:b3:
c5:ea:b0:b5:69:22:01:1e:ff:01:85:5d:58:0a:54:
09:39:31:10:e6:cd:c8:70:1e:b3:2f:d3:51:76:ff:
95:ff:25:d5:70:21:27:1e:05:97:81:48:ea:9c:e3:
53:fe:ae:c3:36:92:2b:ad:4e:87:98:b2:b1:5a:8a:
4b:1f:5a:32:f3:af:75:c3:33:48:0d:2e:ee:bc:1b:
3f:68:a0:86:75:42:48:0d:d7:38:e2:ab:bb:81:54:
6d:73:0c:80:c9:1d:ba:c8:32:56:f3:7d:95:a7:c9:
f0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:00:C0:D9:39:B2:A6:53:04:73:B2:9F:19:B8:BC:FA:41:61:E3:F7
X509v3 Authority Key Identifier:
keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6d:f3:ad:b8:8b:98:1e:b5:28:b7:93:c4:6b:50:fa:0d:18:
94:5f:da:b4:6f:a7:f5:90:6c:63:fd:47:81:64:4c:e2:b1:04:
7f:24:63:22:84:6b:94:38:fe:8b:5b:1c:49:57:57:d2:52:f4:
a1:fe:11:0c:87:a4:34:f6:84:45:dc:0a:e8:40:14:2a:9c:47:
77:1e:12:37:01:26:e2:fe:d7:4f:ad:ae:8e:7f:af:d6:61:f3:
9c:b4:0e:71:2b:64:32:e0:a3:18:d7:06:dc:a3:88:df:43:2d:
db:39:ba:47:f1:b1:fd:b8:54:7c:a1:37:0d:a7:a9:0c:ff:24:
d6:51:b6:a9:bd:1e:fd:e7:8f:83:9a:7e:41:7a:c4:7b:9e:de:
4c:ee:3a:ee:67:52:ef:7d:ea:61:70:a0:9b:3f:04:2a:7d:d2:
4b:0b:42:bb:ce:49:98:e8:3c:c5:bd:5e:8c:63:61:90:d8:98:
28:95:31:bb:64:06:c0:96:7c:84:88:5d:66:2a:be:f8:35:dc:
5f:8a:81:43:ba:53:ca:f7:a1:fb:1b:b5:45:d5:7c:9b:72:0f:
f6:fe:87:c9:dc:65:45:60:f3:88:ea:57:0f:e8:44:35:bd:c1:
c2:46:40:7a:9d:81:e5:3f:05:e6:a5:39:be:f9:57:e4:89:e8:
6c:14:f9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:17:32 2026 by rpki-client