Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
File: zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft (raw, json)
Hash identifier: 6r88rBPkiE8GybZA3Xir5XAAf2D8YyWqe11DfEUwvyM=
Subject key identifier: CE:BA:A5:80:4B:4A:5D:AC:F7:2D:30:2E:EA:5B:93:82:3D:A9:1F:5F
Authority key identifier: CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
Certificate issuer: /CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Certificate serial: 019D9AAB753E111C8A36057E7AE31918DA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
Manifest number: 0E5E
Signing time: Fri 17 Apr 2026 09:00:20 +0000
Manifest this update: Fri 17 Apr 2026 09:00:20 +0000
Manifest next update: Sat 18 Apr 2026 09:00:20 +0000
Files and hashes: 1: Q8ZJJ74q6bMVlfcvJJudps61QXo.roa (hash: 3ZMgLTga1etNt6/GjM7UgVlhZAFMLoY4B0xB96tmQlk=)
2: zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl (hash: nAHfTFeb4MPrjmOQYmktf89e5aH9EF9jt+0/fH7Oj3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:75:3e:11:1c:8a:36:05:7e:7a:e3:19:18:da:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7ee4b0327996304cf18a128e2655780c9d6b9b
Validity
Not Before: Apr 17 09:00:20 2026 GMT
Not After : Apr 18 09:00:20 2026 GMT
Subject: CN=cebaa5804b4a5dacf72d302eea5b93823da91f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:23:60:bb:9f:af:87:58:24:8f:23:a7:a9:f8:
4b:4b:61:35:49:4f:f6:0e:f3:20:cf:60:4f:df:74:
4d:11:c4:ce:ed:03:f7:89:ba:db:a8:4b:3d:05:32:
d9:e5:0a:a7:1e:c9:99:05:47:7b:c5:5b:19:f9:f9:
71:8e:24:97:3e:e5:a6:3f:0e:a4:82:09:96:eb:27:
20:45:28:f6:53:1e:37:06:39:fd:ce:13:cb:57:b7:
b1:f2:48:55:44:6f:9b:e5:78:ec:ea:e1:ec:4a:92:
dd:00:91:2c:47:42:3c:7c:1f:83:63:d6:fe:23:3a:
ae:fc:0e:90:8c:35:46:de:33:28:ef:5c:41:f9:c5:
a8:ee:9d:9c:a2:35:3d:d7:6d:86:4f:55:92:1a:ec:
45:fb:7a:03:39:ff:f2:d6:80:72:1b:95:4e:29:a1:
b7:03:cb:db:14:8d:86:93:c5:98:cd:8c:bf:46:71:
7d:9d:60:aa:03:3b:94:12:c8:e2:2c:cf:44:c9:3c:
9c:76:7f:3d:5a:4f:62:4f:91:83:20:8f:aa:0a:25:
d3:16:93:f0:3a:02:29:b9:a4:12:a9:32:0b:e3:25:
6c:29:df:cb:5a:72:75:a8:e1:06:4a:7c:7e:7c:ff:
a2:e9:5c:da:91:ec:1c:14:80:6c:b7:9d:dc:11:e6:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BA:A5:80:4B:4A:5D:AC:F7:2D:30:2E:EA:5B:93:82:3D:A9:1F:5F
X509v3 Authority Key Identifier:
keyid:CD:7E:E4:B0:32:79:96:30:4C:F1:8A:12:8E:26:55:78:0C:9D:6B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX7ksDJ5ljBM8YoSjiZVeAyda5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ecaeb3-f42f-4bac-a49e-242ffdaa2670/1/zX7ksDJ5ljBM8YoSjiZVeAyda5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:02:87:11:aa:cb:94:9f:80:7d:09:22:80:25:c9:30:0e:2b:
a6:18:31:fb:d6:45:a8:3d:50:0a:b6:54:cb:1f:67:c9:3d:d5:
4c:ca:65:0a:b2:68:62:b3:b7:ca:18:97:b7:45:7a:72:0c:db:
98:f6:6d:0b:9c:ef:a3:99:aa:22:e7:3c:81:13:23:35:27:86:
bc:5d:16:4a:c7:b8:b9:3d:b3:21:b2:83:67:01:6d:56:29:f4:
df:95:fc:4c:3f:82:49:50:b8:e0:37:f3:48:69:0a:76:a9:e7:
39:df:46:6c:f7:3d:8b:2e:50:00:0f:d5:96:45:cc:da:f9:c0:
8a:8a:60:d7:c5:0e:84:8b:16:a3:62:91:57:d6:ea:b4:cc:a4:
96:f1:2e:f3:50:83:a6:b0:92:16:5e:2b:1c:b9:14:75:c6:1a:
11:04:37:1a:21:03:43:48:d7:27:d9:b0:e1:cb:69:0e:a6:38:
7b:f3:4a:05:97:6f:89:07:61:0f:0f:f2:58:4d:bc:02:d2:d9:
4a:80:82:bc:86:48:27:04:e0:e8:18:98:8f:0c:f9:fc:a2:d2:
be:4e:b2:78:9d:96:69:7f:d7:fe:ad:c4:18:f0:2d:f8:86:18:
db:ea:12:bc:17:84:c7:c1:eb:31:79:db:2f:8e:43:80:f0:de:
c3:34:5f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:55 2026 by rpki-client