Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: u0ZIr9ZDtoTObFD1hQCfp0IpVTLbUfEz+vyvLZ1qnLU=
Subject key identifier: A2:97:A3:19:70:95:D4:C5:3A:86:04:78:3A:58:A7:CA:5A:22:7B:8D
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 019D9A070ADA29B77C03342A9FFC58251B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 1569
Signing time: Fri 17 Apr 2026 06:00:45 +0000
Manifest this update: Fri 17 Apr 2026 06:00:45 +0000
Manifest next update: Sat 18 Apr 2026 06:00:45 +0000
Files and hashes: 1: CmEbUhenhDmMKvHKSkFpe9LG8X0.roa (hash: Jsb+hfYBWXp4dm2lj3dTAoFqYAK6O+6kl4dBC77ANZE=)
2: GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa (hash: OD5qNfz5l9josRO/cRdoZZIkXHpha2NNc9udJTgh6/s=)
3: SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa (hash: MYiap9ADnfYQb/YwxbWyM4PVhhzPTbhg8edINlxn310=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: FN1K/qDhR4z+4FMQt9uBplDEukjLU/89lOBWklexNIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:0a:da:29:b7:7c:03:34:2a:9f:fc:58:25:1b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Apr 17 06:00:45 2026 GMT
Not After : Apr 18 06:00:45 2026 GMT
Subject: CN=a297a3197095d4c53a8604783a58a7ca5a227b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5d:8d:b7:69:79:ac:0e:35:17:dd:d9:03:2e:
06:a3:fa:32:30:23:6f:25:46:90:d5:c1:45:94:21:
74:62:ae:07:d3:d3:64:1a:7d:63:13:89:e7:a0:77:
79:b8:a0:99:fc:6c:8a:b2:36:61:cc:8e:b1:89:06:
96:bf:94:24:c1:e3:33:6c:e5:ed:09:ae:18:ba:62:
55:be:f6:e3:e7:97:79:3d:2e:72:05:d6:53:50:ac:
ab:02:2c:fe:aa:b1:98:1e:4d:02:42:94:eb:3e:92:
3e:4d:ed:04:64:6d:b4:60:6a:f7:4b:89:a6:96:e6:
55:8b:2a:c0:dc:14:0c:61:68:1c:2d:f2:17:22:91:
8f:54:dc:aa:3c:8b:e7:9d:3d:5a:36:39:3a:3f:98:
2d:0e:69:20:07:c7:ca:05:bf:e3:27:fc:84:7a:d0:
f2:ba:4d:52:72:b5:02:b1:65:ff:aa:5a:57:73:e7:
77:c8:25:43:cf:15:e8:f8:13:da:18:66:06:a7:3b:
a4:7f:29:9c:d3:e2:45:af:79:87:99:8f:15:96:4c:
c3:58:f9:c1:47:ca:e6:80:c8:56:97:6e:b5:7a:29:
eb:01:38:f0:99:c1:c7:88:23:2d:37:10:b9:ae:a1:
43:93:bb:6d:a3:ee:81:0a:cc:78:53:7a:89:37:ea:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:97:A3:19:70:95:D4:C5:3A:86:04:78:3A:58:A7:CA:5A:22:7B:8D
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:37:4e:f4:22:14:70:8d:fb:41:87:c7:96:55:7e:53:82:56:
7d:d2:63:e8:6c:d7:05:19:fe:8d:cf:f8:61:9c:a6:68:60:d1:
85:c0:d3:86:ab:01:32:b7:0e:fe:9f:14:ff:00:c9:3d:18:1a:
4d:85:8c:0f:11:27:25:19:1a:de:2a:77:8a:00:59:7f:c5:4c:
a1:e8:d3:36:d2:f9:bd:ec:28:c1:49:05:de:84:50:bd:e2:c4:
1c:18:43:76:22:8e:d0:d2:c7:3d:3e:83:04:dc:9d:1c:e1:ef:
8c:51:e9:87:8c:64:c3:a4:1e:fd:5b:6f:6d:cd:41:4d:28:87:
65:d3:32:6f:62:8c:c7:d3:e5:99:f0:5b:8c:71:ce:8a:df:c7:
1f:f3:2b:bd:03:91:e5:7c:3b:06:71:ec:93:7c:87:3e:76:db:
78:6b:90:86:9d:49:7b:76:5c:cd:56:52:b1:68:86:52:c7:df:
70:bc:61:3c:3f:10:a2:fb:3b:49:f8:a3:2d:81:8d:e0:15:be:
35:e4:08:d1:e8:b1:2b:c9:85:84:72:ed:ab:91:f7:22:fb:70:
1f:5a:d4:f3:cd:2b:b6:b4:84:73:31:46:5b:55:db:15:a8:b9:
08:2e:74:bb:6c:b2:1b:87:f8:87:df:b0:56:c4:63:d1:8e:99:
9b:58:0d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:15 2026 by rpki-client