Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
File: z65GEYj_we8vOhR0VxqUOaVTdKw.mft (raw, json)
Hash identifier: DaxkQhMK8NE/o2/X+zmqR1LDrJ8liUVyQc5AjLhVQ/4=
Subject key identifier: E7:A4:88:B3:03:FC:C2:AC:AD:44:B5:8B:1E:36:10:CE:E8:62:23:1E
Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
Certificate issuer: /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Certificate serial: 019D9BBE9D30394A0C5B461705D3D7F52119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
Manifest number: 05DE
Signing time: Fri 17 Apr 2026 14:00:53 +0000
Manifest this update: Fri 17 Apr 2026 14:00:53 +0000
Manifest next update: Sat 18 Apr 2026 14:00:53 +0000
Files and hashes: 1: K7fqgzr4VaMwzxlQivTAcOb_S58.roa (hash: y3NGcPxthNQN1k1rh0jeoOmPaNWELIzyDE/AvyrEZsE=)
2: z65GEYj_we8vOhR0VxqUOaVTdKw.crl (hash: d+399/jz4DZdA/VH/iClkmPm/mPdoJAC2q0dkomxtp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:9d:30:39:4a:0c:5b:46:17:05:d3:d7:f5:21:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Validity
Not Before: Apr 17 14:00:53 2026 GMT
Not After : Apr 18 14:00:53 2026 GMT
Subject: CN=e7a488b303fcc2acad44b58b1e3610cee862231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:2a:ec:a8:dc:c8:eb:f5:ef:09:af:5f:08:
31:4f:3c:45:c8:e2:a9:14:d3:8e:25:41:2c:63:50:
f8:e0:a3:e4:93:f6:0f:28:1d:44:3d:e5:c1:78:9c:
2a:76:7d:18:6a:3c:33:4e:8b:aa:d4:f1:26:d7:d6:
c8:b7:63:e0:8b:b7:0d:0d:46:f8:fc:87:18:8c:6c:
4d:26:3a:f1:69:bf:f9:e6:a8:23:ab:b1:67:dc:23:
6d:0a:48:01:7f:17:b9:63:47:2d:d6:4d:f9:47:76:
56:00:00:a8:53:fd:f5:b9:1e:31:42:eb:e2:7d:49:
62:10:2b:3a:80:3b:d5:6a:f7:5c:8c:6b:3d:ad:f3:
dd:b0:48:ae:68:98:6d:b4:46:13:ee:5b:30:ea:39:
69:2e:07:af:e0:1f:b2:2f:ac:2e:e7:80:47:45:ba:
1d:d0:21:14:74:a7:12:d1:e1:90:09:dc:3e:35:29:
f3:21:ad:9d:ff:d3:90:07:bc:b0:c1:2f:90:e1:9b:
40:c0:9a:75:63:d5:1f:64:45:6d:f1:bb:c4:93:25:
ae:89:f4:4f:e1:f9:68:bf:9d:17:a9:9d:9b:3a:9a:
0e:e7:2a:e5:49:7a:6a:5d:25:d0:d4:f3:41:54:e6:
c4:b8:ce:c4:9b:4e:3d:e8:88:2b:32:eb:ae:cb:75:
39:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A4:88:B3:03:FC:C2:AC:AD:44:B5:8B:1E:36:10:CE:E8:62:23:1E
X509v3 Authority Key Identifier:
keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ac:ae:45:02:e2:85:2d:9b:91:a0:e1:a1:46:89:82:4b:60:
89:e8:0d:c2:83:02:e2:2f:b7:d2:96:0b:fa:34:ad:72:ee:68:
44:e3:bf:ab:f5:a3:7e:c5:db:79:af:f3:f8:d7:2c:01:e1:aa:
0e:2f:9a:bd:26:11:a9:41:4b:c8:7b:49:d8:52:3e:70:58:24:
5d:60:40:58:ac:8c:1b:30:35:db:08:e6:5a:51:53:ca:96:88:
d4:8f:18:9f:dd:e9:11:38:43:a3:25:08:40:c1:37:76:68:31:
94:95:49:89:96:e2:54:43:a2:8b:e0:04:3f:b1:f0:ae:e2:e8:
66:b4:a1:73:b9:15:0b:f8:28:6b:64:38:ae:cb:35:b7:da:09:
01:4a:89:b4:1c:c6:d6:4a:f6:1d:7b:38:e5:17:3b:c3:e4:89:
64:40:8d:72:28:91:1a:d4:44:5d:00:a3:50:94:4d:99:48:c7:
aa:fd:83:e8:f2:5a:84:73:da:e6:73:3f:71:0c:8f:df:e5:10:
dc:f8:4c:7f:f9:97:3d:28:77:b4:fc:5a:18:3e:34:dd:3d:49:
58:e4:44:05:62:8d:e2:02:ab:e7:6c:48:f0:2c:4a:2e:c7:27:
90:81:15:a3:2a:c9:92:73:7a:eb:5a:70:e5:4d:a6:d5:bc:df:
e2:27:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:27 2026 by rpki-client