Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: KVszXMWfXZNwlCJUlUFFCtUjkM2fCUqQeKBjC3K7OGc=
Subject key identifier: 0E:EC:3C:A8:DA:7F:20:D4:CE:0F:53:48:65:86:BD:6F:81:B9:5F:71
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 019D9A3EE2C442043C192C720FDD6A4A7C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 18CB
Signing time: Fri 17 Apr 2026 07:01:45 +0000
Manifest this update: Fri 17 Apr 2026 07:01:45 +0000
Manifest next update: Sat 18 Apr 2026 07:01:45 +0000
Files and hashes: 1: 1-hd-jGZ4MVZi47nPzXJSf7Lg4GU.roa (hash: Zdx22tTGOTuJxXlStTXGJ2H5gGzDrcZyL0B14W8hVh0=)
2: 2aoGpLTGgK9wzCk0NHOhSBbwi24.roa (hash: CXhLfyqzlLn95FrK9zjRoOjfQ+gMogkZUp2jk/vKqTo=)
3: 6DeN01ACaOk4UT4cNyp6go_l9cA.roa (hash: Tnr/zZaEXUElLJBlgdEv3aoEsmGDmbMF/eY6+kGdmsE=)
4: G-aVVHLMC99yYOkBY3QkMmE3DqY.roa (hash: fvB74CE0O3+aj6NhVlobrpzhtdxqjyZg+fgfBzqKZNg=)
5: HWvGRqMe27--NoC2Dyw8FKUNjHk.roa (hash: ycBN27AOuQt6gtV2gw83af0DBTats6sXAt4skvhgHcE=)
6: JAPut0UfxbemMj59AxqmwrRJ0Ls.roa (hash: 0o1Sw2aOg/g6GSUlci0ay0W5MyPhGrJoF8RlAJMyZz4=)
7: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: IZvUVshIIodV2o/PIV39XvnYor141i0TU3jCp+yp7nA=)
8: qSsf5vEudpSeKXdovHkXjheUpNQ.roa (hash: lDG010Lrz1cwQmsgQKn3qDK0y/5g/pHYKd0HNTHtbvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e2:c4:42:04:3c:19:2c:72:0f:dd:6a:4a:7c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Apr 17 07:01:45 2026 GMT
Not After : Apr 18 07:01:45 2026 GMT
Subject: CN=0eec3ca8da7f20d4ce0f53486586bd6f81b95f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:a8:47:af:7e:77:ae:bf:e0:d6:1b:10:9d:
e5:c2:0d:2f:80:15:e5:f5:94:b6:17:ca:c3:07:a3:
d6:9b:bc:e8:b4:41:45:8d:1b:05:25:9b:97:ff:3b:
b4:e4:5a:29:52:28:1e:2a:e8:fc:e9:2c:dd:d9:9b:
40:e2:cd:aa:40:14:fd:d5:0c:12:3c:ba:63:d7:7d:
8f:44:52:fd:8e:72:de:66:46:71:33:b8:56:d5:fb:
52:57:9b:ac:6b:31:02:53:37:4d:b2:04:cb:c9:9f:
89:d2:b7:2d:61:a5:44:ea:2e:11:af:cf:00:6a:d0:
90:ba:3f:1c:0b:87:5f:94:4b:62:d3:92:05:89:08:
cc:56:84:3d:30:e6:b4:72:09:77:68:fd:40:69:6e:
dc:40:68:f1:03:62:11:8f:c7:ca:b8:e9:44:ad:5d:
5e:80:4b:3f:10:55:85:94:5d:b8:8f:95:b7:d4:03:
02:c7:8d:c5:33:cd:93:b8:6a:c8:de:f8:7b:54:83:
6b:0b:b3:d9:dc:36:fd:da:68:0c:8d:e7:c5:47:8a:
d5:3c:f0:9b:5d:48:f3:2e:5f:f4:3e:ff:4a:cf:29:
d4:68:97:ec:78:67:ae:4b:73:65:8d:0a:85:d1:80:
5b:33:f8:bd:c7:88:ba:4f:39:88:83:5b:d4:e7:52:
db:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EC:3C:A8:DA:7F:20:D4:CE:0F:53:48:65:86:BD:6F:81:B9:5F:71
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fe:ce:a3:bc:36:4b:c8:df:31:0e:51:42:18:4e:81:50:b2:
c8:33:46:e5:7b:fa:22:74:fd:f9:8c:a8:dd:5a:b3:de:47:d0:
50:a9:d6:28:52:7a:fb:6a:d0:5f:7b:08:36:95:d3:1f:62:76:
89:0e:8d:38:7f:d5:25:67:77:81:73:a4:69:79:af:f7:94:5f:
00:0b:6c:ed:37:c5:fc:8e:4c:b0:2d:47:0b:cd:63:26:5b:7b:
22:d3:70:b2:35:81:7b:a2:5b:94:90:ae:02:fd:94:d5:e1:c2:
f5:b2:b4:77:51:17:e0:b4:87:86:b4:4c:54:53:6e:6a:aa:2f:
23:d1:5e:52:4b:0e:81:3b:88:10:17:47:97:dc:9d:5e:66:4d:
67:ff:e9:99:14:af:08:1a:fd:23:52:84:47:be:d5:16:ad:83:
9f:f8:3f:ec:e7:b0:7f:ad:19:00:87:c2:a6:aa:55:95:00:5b:
ca:12:96:a4:67:59:cb:92:6b:7b:72:b4:22:82:ca:83:32:36:
36:73:ac:c4:47:49:34:18:96:9a:0c:3f:54:1d:f4:f5:0f:33:
e5:de:50:03:33:fb:8e:92:66:9f:d3:58:21:40:36:29:59:c0:
5a:bb:7d:61:e0:0e:bf:92:5b:93:8c:0d:2e:2c:58:ec:e0:6f:
79:c9:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:42 2026 by rpki-client