Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: AMOiNIxq8quWe5iI0RcL3wBWApFGjaF3BuKfvG3rFsg=
Subject key identifier: 50:5B:42:DF:4B:91:8D:46:43:AD:5F:C6:51:48:F9:FF:BE:7C:40:0B
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 019D9B50E7B880D852525E8E18C9710C8BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 18D1
Signing time: Fri 17 Apr 2026 12:01:03 +0000
Manifest this update: Fri 17 Apr 2026 12:01:03 +0000
Manifest next update: Sat 18 Apr 2026 12:01:03 +0000
Files and hashes: 1: fpYgYHcSe1IMtLQuQ8ZHZS6M188.roa (hash: lFEjpgx0+Rqia9Wt28o4eVjHYzMi3xg620xweR16lkU=)
2: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: b2GlLsCgi1t7npBx+tpLYRpmS+uvvB2V0zEgD7rcfXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:e7:b8:80:d8:52:52:5e:8e:18:c9:71:0c:8b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Apr 17 12:01:03 2026 GMT
Not After : Apr 18 12:01:03 2026 GMT
Subject: CN=505b42df4b918d4643ad5fc65148f9ffbe7c400b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:98:40:72:74:61:a9:f7:37:72:e7:24:f5:
37:9d:62:3d:ec:e5:cb:1c:a5:99:c5:36:d8:51:98:
79:32:a4:b8:9f:93:5b:1f:b3:85:c0:29:1a:c3:60:
e3:f7:37:05:03:17:dd:2f:2b:b8:28:42:21:ab:6d:
f3:61:fa:01:f9:d2:42:8b:83:ab:75:b4:6d:5e:19:
60:ad:94:58:cb:a4:df:e2:21:02:06:c6:d9:c6:c0:
79:b6:a8:8a:fd:7d:8e:25:1f:91:11:90:01:10:c4:
b3:ba:32:59:69:91:d4:e7:4c:4b:d9:5b:9f:c7:86:
bf:7b:ee:29:38:5a:5f:50:57:5b:5c:73:17:9b:94:
02:51:ce:f7:a4:58:3c:56:99:34:2f:6d:a5:0b:65:
62:29:e7:28:cb:76:46:25:58:11:ff:83:ab:95:84:
47:62:ec:4b:90:b0:80:2c:4b:34:fd:04:79:b1:22:
ef:2f:fb:ac:88:9f:02:6e:3d:9c:35:09:e8:a4:90:
ba:79:7b:9c:bf:da:20:df:75:23:40:8b:d9:8d:fe:
27:a6:3e:6c:44:58:53:93:29:85:32:2e:57:79:82:
6d:1b:7d:20:f2:49:7d:c3:7d:fd:aa:c8:e9:e0:a0:
1a:08:1c:4e:ce:54:61:82:44:95:13:72:11:8f:66:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5B:42:DF:4B:91:8D:46:43:AD:5F:C6:51:48:F9:FF:BE:7C:40:0B
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:86:60:1f:43:e9:65:b6:fc:20:f3:a3:94:ae:26:2d:76:82:
04:04:1c:24:4e:ce:10:70:3d:ca:88:40:70:6c:8b:62:38:a5:
5e:a7:45:c0:b6:fb:a4:eb:09:ac:82:81:c9:8a:cb:28:00:5d:
16:b1:e0:47:2b:a7:1b:4a:a3:f0:d4:4b:5e:93:0e:9e:5e:3a:
73:05:3c:46:fc:12:55:c8:47:49:3b:a4:88:4a:1c:26:af:75:
db:6e:bb:02:4e:8f:f1:b6:42:09:37:a2:03:3d:78:60:3c:20:
6a:17:d8:84:41:84:bc:cb:6d:2f:d6:d2:25:2b:04:02:0b:7d:
20:04:fe:d4:f9:85:b9:d3:9f:69:dc:91:6a:bc:e6:8b:4e:c2:
e6:a2:a4:a7:63:c1:c3:18:57:7d:62:63:00:81:74:70:5d:ec:
a3:69:b4:f0:41:85:bb:64:88:af:5a:79:87:49:ee:4b:d3:be:
42:91:55:88:6f:2b:d7:fb:00:fe:5f:ee:84:a4:20:58:51:7a:
e0:87:1a:26:c3:b5:d8:45:d6:56:ea:24:d8:a8:c9:dd:9f:2f:
dc:44:54:61:d1:d2:45:6b:7b:5b:59:23:31:ff:38:bc:75:b5:
f0:32:06:ca:50:42:64:7f:b9:15:8b:3e:6a:4f:9a:06:20:50:
9c:c7:66:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:34:22 2026 by rpki-client