Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
File: Zrds5_7vaVb437n4vDoiiGG5ny4.mft (raw, json)
Hash identifier: zh/YqS3ImB/n+OcyuXzd1EQqy3/S+16okXP5oBdbnCE=
Subject key identifier: 1F:37:7C:EC:46:8E:81:6A:D9:45:17:C8:75:6B:85:E3:56:54:B2:34
Authority key identifier: 66:B7:6C:E7:FE:EF:69:56:F8:DF:B9:F8:BC:3A:22:88:61:B9:9F:2E
Certificate issuer: /CN=66b76ce7feef6956f8dfb9f8bc3a228861b99f2e
Certificate serial: 019DA4F939078718BAF6472CBE9A709C7BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 09:01:29 +0000
Manifest this update: Sun 19 Apr 2026 09:01:29 +0000
Manifest next update: Mon 20 Apr 2026 09:01:29 +0000
Files and hashes: 1: DneugekopIxK304C8pLImv6Qcv0.roa (hash: +cGEhJmcpfO0fbmJYvL9sDH0f2ClBmDUFG+o22CeZUs=)
2: Zrds5_7vaVb437n4vDoiiGG5ny4.crl (hash: 2bQ/YoJAfJpsloQxuGBrq6x5yaekx8RGWQO2j0RDSrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:39:07:87:18:ba:f6:47:2c:be:9a:70:9c:7b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b76ce7feef6956f8dfb9f8bc3a228861b99f2e
Validity
Not Before: Apr 19 09:01:29 2026 GMT
Not After : Apr 20 09:01:29 2026 GMT
Subject: CN=1f377cec468e816ad94517c8756b85e35654b234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:0d:1f:62:11:c3:8e:78:49:60:34:16:9a:
05:dc:39:0a:c0:be:9a:ed:aa:e3:57:98:7c:01:98:
39:37:ce:12:49:de:c9:4f:4a:11:7d:65:04:ff:d0:
e2:01:0d:43:ae:f4:4e:bc:ca:7e:fc:40:96:ac:15:
ed:98:2c:ac:db:06:d9:02:aa:c0:1e:ba:81:d9:98:
c8:2b:3b:c9:74:2d:d8:bb:af:da:b9:06:91:66:e8:
5a:76:57:3c:f5:1c:41:ce:a4:e2:e9:a3:ac:ac:4b:
72:be:ff:38:46:cc:1d:74:5f:75:4a:52:06:5d:32:
d7:61:2c:a5:00:42:bc:42:4c:fb:92:68:46:22:59:
b9:93:31:4f:99:c6:dd:13:72:b6:47:bf:bc:58:41:
45:fa:cc:30:66:8a:7f:5e:d3:58:19:2b:c9:7e:94:
f1:be:4a:4b:b9:26:15:c3:01:e8:db:c1:95:dc:99:
fa:1e:f5:82:d4:33:f4:3c:2f:40:a4:ba:2d:bf:ac:
68:30:da:65:42:00:ce:95:b6:ea:c1:3b:99:ef:6c:
e2:ac:d6:c5:19:81:94:85:63:ea:ca:eb:74:3b:e1:
9f:34:a3:6d:5b:a9:fb:a7:60:c9:32:b9:4b:96:bd:
d5:e8:a3:a5:bd:13:9f:4d:fe:65:7f:9f:96:f3:aa:
6e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:37:7C:EC:46:8E:81:6A:D9:45:17:C8:75:6B:85:E3:56:54:B2:34
X509v3 Authority Key Identifier:
keyid:66:B7:6C:E7:FE:EF:69:56:F8:DF:B9:F8:BC:3A:22:88:61:B9:9F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c8:73:80:95:26:57:fe:1b:0c:89:99:3a:fa:e1:40:af:44:
2c:e1:9d:9a:45:39:50:d6:ac:95:b5:5e:7d:af:ea:24:af:87:
e8:97:70:96:44:20:7d:ad:1d:56:3d:c6:c0:e7:db:53:b5:2d:
4c:85:ed:4f:5b:aa:d4:7c:39:0f:c6:3f:2c:91:12:f0:8f:d0:
be:0e:fd:cc:0e:83:e9:a8:60:1c:c6:6d:45:48:fa:1d:e2:3e:
72:ce:9b:9b:74:56:3a:0f:04:0f:ff:81:a2:08:c2:99:18:3d:
d4:6c:ac:69:61:d4:cf:f2:54:87:70:5a:e8:35:85:e7:eb:84:
1e:3c:af:8f:cf:e5:d0:16:b4:fe:7b:b0:f3:13:b4:a0:95:c3:
1d:40:af:74:40:2b:56:c7:d9:48:d5:85:80:a3:90:ff:d8:59:
b4:66:a9:5a:60:56:aa:f3:39:e5:70:be:b3:1f:52:c4:ae:15:
2b:94:f9:96:7c:5b:6a:a2:4e:fa:69:6e:41:53:15:9b:e6:9e:
c0:ad:6a:51:d4:11:91:bd:74:42:72:56:d1:55:14:a4:1f:37:
9f:1a:eb:1a:f9:49:7f:86:8b:2f:62:3b:41:f8:cc:e3:82:a9:
f9:70:39:d2:95:55:14:20:fc:10:4e:e5:bb:63:3c:e8:a8:d3:
ce:ff:c4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:32:22 2026 by rpki-client