Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
File: ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft (raw, json)
Hash identifier: hpJAN/97OpXi2rr1N+/ykgdF7OU7HN8fm6P7QACbocY=
Subject key identifier: 96:DF:D8:13:1B:5F:A2:13:B6:23:F0:97:EF:87:F2:A8:FE:CA:3A:F8
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 019DA453F525E9FAA8F81C4FCD73785C43E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
Manifest number: 0A7C
Signing time: Sun 19 Apr 2026 06:00:58 +0000
Manifest this update: Sun 19 Apr 2026 06:00:58 +0000
Manifest next update: Mon 20 Apr 2026 06:00:58 +0000
Files and hashes: 1: CB7ZOTfRe3Lfy6bzU3USZ75HVvw.roa (hash: FlUrZcGjnxqC1lXl49edK/FXKIDYYIun/75ke4aPSyw=)
2: KER-U-aRYckOZzpn7PbWOavueRg.roa (hash: VnTgbJYVhXdPGDTQ2hppQejhsFcgs5I5az6oUP5boak=)
3: ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl (hash: DWBG18+7hC9XlziRKFdK1tOQQIDGZben7S1gS0+GVrg=)
4: dO6zq4mmDPmBhklgeAWbYzuw7zU.roa (hash: 8vn7qHuvz3bv0ogVMjPFxFjhxK9cBzVdZyb1bNw0jOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:f5:25:e9:fa:a8:f8:1c:4f:cd:73:78:5c:43:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Apr 19 06:00:58 2026 GMT
Not After : Apr 20 06:00:58 2026 GMT
Subject: CN=96dfd8131b5fa213b623f097ef87f2a8feca3af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9b:c5:89:30:35:05:a6:2a:f2:70:5a:c5:bd:
73:f8:22:0e:68:69:63:80:4b:91:e2:f6:93:7e:6d:
25:88:b8:d2:d2:38:ef:42:97:08:53:00:30:c2:50:
8c:e6:f0:a3:87:ec:0b:e3:4c:90:9a:ee:ce:ad:49:
7e:de:38:07:88:c4:ce:24:09:e7:93:68:68:59:56:
25:5f:7f:12:41:1f:f7:bf:3f:b3:7a:93:93:cb:98:
6c:d1:a7:a3:9e:3f:6f:8e:80:85:5e:61:b5:6c:18:
e2:7f:d9:32:d7:7a:f8:ee:6e:c1:db:01:fb:f4:63:
99:3b:0d:64:5b:f4:1b:16:82:09:87:25:de:43:2d:
63:43:95:1e:2c:5d:7e:66:c5:d1:a4:1f:54:b0:40:
71:e7:57:ad:eb:cd:cd:8c:81:ee:f4:b8:e9:2c:9e:
ae:d9:54:01:c9:04:36:97:80:29:20:66:38:d5:44:
ca:f1:ff:c0:bc:af:72:2f:f3:95:99:87:23:3e:75:
77:2a:a3:c8:90:9f:58:93:9e:d6:0a:a3:53:40:5c:
fe:94:0e:5e:ca:b6:fd:a6:4b:1a:14:7b:bf:8b:55:
19:a7:e5:6f:9c:f6:ee:8b:12:4d:9f:ed:a3:c0:0d:
60:91:43:64:39:17:99:74:e5:e7:7f:81:53:f7:6d:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DF:D8:13:1B:5F:A2:13:B6:23:F0:97:EF:87:F2:A8:FE:CA:3A:F8
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:03:2c:3d:db:cb:42:0c:bf:a5:d6:ca:b0:de:40:b0:7a:a9:
a9:dc:bf:65:26:48:96:ee:d3:d6:57:d4:7b:cc:fb:74:61:0a:
e3:ff:62:c1:37:04:5f:47:45:12:36:5c:23:e8:50:c4:91:84:
3d:b8:a1:b5:c7:30:ab:92:e2:23:6b:47:28:5a:a8:62:d7:04:
ba:2f:fe:2b:26:67:7f:00:8a:a4:5f:a5:c3:c8:d8:4a:ee:fa:
74:1c:48:bb:79:62:fc:ea:43:64:5d:90:c6:ba:c8:bf:86:9e:
90:a4:c3:90:b1:63:3d:b8:6c:73:1c:d6:a1:36:af:96:e6:34:
5c:ea:f7:56:99:51:cd:5c:78:0b:b9:90:89:d5:7b:d8:4f:f3:
7f:65:7e:4f:ab:64:5f:b2:b9:89:6e:c7:20:92:44:bf:43:16:
e6:91:d6:19:a6:37:b0:ca:ed:49:2b:75:5d:eb:13:7e:dc:cf:
a5:1e:66:4a:79:38:6f:1d:42:d5:2b:2e:ba:ff:47:20:78:49:
68:9f:57:30:7e:4f:0e:3c:7e:f9:4d:3d:8e:b6:7c:c5:68:81:
cc:b9:6a:7e:f8:00:af:d1:93:9f:13:12:5a:6b:b8:1b:da:31:
ee:97:0a:c0:a2:b5:c4:12:24:5a:00:53:1f:54:73:b8:91:f0:
9b:6f:6e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:06 2026 by rpki-client