Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: TWCCjKFV0PZUyflvlbby2XbbrXgCyw6m9Zv58sKLhqo=
Subject key identifier: F8:CD:EA:A4:4A:C8:35:A7:F5:D3:62:EA:55:DC:0C:60:C8:4D:26:E6
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 019D9B19CD3F275DC95BA65243D9ED59BC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 0940
Signing time: Fri 17 Apr 2026 11:00:52 +0000
Manifest this update: Fri 17 Apr 2026 11:00:52 +0000
Manifest next update: Sat 18 Apr 2026 11:00:52 +0000
Files and hashes: 1: 7BgGMhfrcQqzufLm6BOZyNmcrP4.roa (hash: Ez1hXHY/SyH5UhM0EJmIkgA9tRyMxJtbCALr5l1nz1Y=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: YBcoA34JFvv8lPf+ZvLZJ8QVqkJ8EJxTsqAyvKK79Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:cd:3f:27:5d:c9:5b:a6:52:43:d9:ed:59:bc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Apr 17 11:00:52 2026 GMT
Not After : Apr 18 11:00:52 2026 GMT
Subject: CN=f8cdeaa44ac835a7f5d362ea55dc0c60c84d26e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:a0:dd:3f:8d:51:7e:ec:ea:76:76:0f:e3:
12:0a:9c:b2:a9:11:82:d6:e5:d9:0d:82:f1:71:c7:
07:a0:89:05:cd:14:76:7c:40:b2:ff:f2:a6:23:cc:
ea:45:27:cb:a7:5c:8b:bd:c0:e6:6c:38:ec:3a:c4:
16:ef:d7:2e:70:3a:33:94:1b:4c:49:da:5b:ee:e4:
d1:93:85:20:2c:f6:02:b2:5e:3d:11:89:44:53:71:
df:f8:a2:6c:50:6c:06:b2:ca:bb:36:ef:0d:b0:fd:
52:1b:eb:96:ec:49:24:79:26:41:89:0b:b0:fb:d4:
11:39:da:a4:88:6c:6b:df:10:be:63:38:48:da:ba:
65:7e:ef:cb:6c:14:65:0e:b6:a8:6f:37:1c:a0:16:
f0:a2:76:ce:9c:35:d6:d8:27:0d:3d:94:f3:65:9a:
47:44:31:26:e6:a2:f1:8e:67:bd:1e:33:ff:f9:b6:
90:7b:cc:5a:b3:22:64:5a:e5:b8:ce:4c:9b:ad:85:
8f:f0:d0:47:2c:be:b8:ea:51:9c:e2:5e:5c:ca:b7:
0a:08:bb:74:a0:4e:4a:ec:3b:61:a3:74:3d:f7:ba:
1b:4f:43:c7:41:72:7e:0c:15:6e:aa:23:a6:98:71:
d1:7f:27:03:23:1d:94:2f:2c:2a:7d:28:0b:74:39:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CD:EA:A4:4A:C8:35:A7:F5:D3:62:EA:55:DC:0C:60:C8:4D:26:E6
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f9:da:c7:6e:84:eb:bb:1a:d6:d3:30:af:4b:82:3a:fa:3d:
08:59:ba:b2:69:96:74:54:fd:e0:ce:80:cf:d9:e7:08:13:54:
d0:ae:84:52:9e:b3:47:27:d3:eb:4b:09:1f:5c:ff:3d:f1:e0:
a8:b7:2f:a8:2c:39:87:7a:4d:df:ee:79:2e:7e:b9:20:24:ca:
92:46:f2:ab:5a:5f:18:aa:5e:70:ed:92:89:e3:b4:49:d7:3f:
30:7b:72:7c:e1:4f:c8:29:8d:33:e4:c3:94:99:38:bd:c2:d0:
27:28:9c:b5:f0:33:f4:b8:5e:97:0f:03:a3:fc:f0:6d:01:a8:
73:76:11:ab:39:77:96:85:04:86:84:27:8e:e5:47:13:99:70:
3c:a8:fa:0a:59:29:6b:a1:bc:c6:ae:68:1e:d8:16:54:dc:f0:
9d:48:7d:43:33:ca:1c:14:fd:10:15:15:18:3e:db:e2:f5:f9:
27:95:0a:8b:dc:16:f7:79:63:32:c8:df:df:00:67:5d:ac:13:
cc:b0:c8:99:56:b3:40:28:49:55:bd:50:12:e4:58:e6:32:73:
dc:30:5f:ad:b5:cc:7f:0a:34:f8:d8:59:bb:33:40:9b:14:95:
2e:88:f7:a5:3e:a0:05:b5:0e:2a:0a:16:97:28:a1:61:95:cf:
ea:50:0a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:41:13 2026 by rpki-client