Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
File: zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json)
Hash identifier: xlJegi1EzlyLxF6LCKGuTWQhvgm93hcm+PabybA2Ln4=
Subject key identifier: 3A:70:4D:EA:29:A9:A3:EF:F0:D6:D6:FF:BD:AA:00:05:BC:C3:20:25
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 019D9C9A98BB0B3B5E3BDE9E5CEBD791DAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
Manifest number: 0DB9
Signing time: Fri 17 Apr 2026 18:01:10 +0000
Manifest this update: Fri 17 Apr 2026 18:01:10 +0000
Manifest next update: Sat 18 Apr 2026 18:01:10 +0000
Files and hashes: 1: JLo2q2iBmFKeMgKoTnjBpvjAjJY.roa (hash: qaCH/S3HYUp62JimShr7jtytmfdudoB+yYvxVEqY8JY=)
2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: sW0fw1Ub2V94JQBCsE1WeT9EV5wWz831YuIpOxVpJMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:98:bb:0b:3b:5e:3b:de:9e:5c:eb:d7:91:da:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Apr 17 18:01:10 2026 GMT
Not After : Apr 18 18:01:10 2026 GMT
Subject: CN=3a704dea29a9a3eff0d6d6ffbdaa0005bcc32025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:f1:8f:79:ff:0c:81:e2:54:40:23:38:02:
12:fb:95:74:ef:37:a6:a8:44:5e:2c:80:c3:ca:0e:
cb:d2:cc:96:46:a5:74:d9:7e:c8:ed:55:fc:52:20:
25:62:d7:9c:35:2b:f3:63:c0:ff:25:3d:a7:1c:2c:
2a:76:74:90:b1:60:a7:cb:a9:04:3e:b2:ce:00:ea:
54:02:f7:63:b6:5b:f2:c4:1a:c7:88:21:55:cb:e9:
7c:e4:fb:36:00:b6:f7:ab:33:13:dd:39:c5:61:e5:
35:7f:ab:e5:d2:10:67:4d:63:d1:9e:89:c9:30:e7:
09:57:71:8b:0c:b7:be:82:e7:41:84:19:4d:32:8f:
4c:a1:e1:a4:0e:de:d9:46:08:f6:3b:15:9c:8b:da:
85:d8:d1:f6:42:4f:4b:05:ee:24:02:79:d5:e1:fc:
66:bc:a6:35:c1:1d:bc:75:c8:d2:28:f6:e3:bb:77:
8d:ca:8e:88:c4:c8:ed:0e:26:3f:e6:49:1c:5f:ac:
a6:fe:f3:f7:6b:a2:e6:c2:ef:a3:22:2e:58:46:63:
cf:49:4c:73:d0:97:d0:fb:21:30:2a:f7:98:5a:3f:
e3:a4:ec:bf:b1:45:b3:fe:7c:72:70:ca:2f:63:73:
f6:b8:07:3d:80:25:5d:23:f8:ae:7b:bf:6b:d3:01:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:70:4D:EA:29:A9:A3:EF:F0:D6:D6:FF:BD:AA:00:05:BC:C3:20:25
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:70:a7:91:1b:83:bd:f0:ca:c2:7e:cc:80:80:51:4f:23:37:
6b:91:5a:26:88:ae:05:92:40:23:b7:c2:27:e4:7a:e8:b3:a6:
a4:67:03:0a:e8:c8:0c:f4:44:c0:82:09:dc:04:99:c1:f7:ab:
8d:81:b2:87:d0:42:c9:21:61:83:cd:a8:40:e8:ac:b7:76:0c:
b3:48:83:b8:e6:db:2d:e2:af:53:d0:52:b1:c5:db:91:63:4f:
9e:bb:36:a0:36:92:39:f9:e0:f5:a4:53:cd:a4:47:9f:7e:b6:
86:fc:b1:6b:8c:f4:53:9d:a3:1c:6c:c6:b5:f5:44:48:79:a7:
2f:36:9e:72:2e:04:3c:ab:2d:47:ee:4d:7d:a7:fb:bb:ec:78:
e3:50:81:ff:a2:a0:9a:0f:94:de:69:d5:49:e0:5c:8f:ea:d6:
5d:aa:6f:5f:65:0d:1c:2e:48:1b:ce:e9:50:ce:e5:a5:25:13:
91:7a:c8:44:4c:09:d5:4d:b3:d4:24:6a:59:17:12:97:2e:32:
a9:2c:c1:60:ee:13:fa:00:f9:71:6a:12:ea:75:2f:c2:fb:fc:
49:22:2d:1d:b1:08:d8:37:86:16:86:42:c2:09:57:ec:83:d8:
f7:4b:73:3e:cc:f0:30:aa:bc:47:09:c1:61:44:88:42:ae:b1:
b4:a1:30:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:04:15 2026 by rpki-client