Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: 19NGIgqZ9w2zBBGdXoBFlRKclc2GBMHgaotMSJquBF0=
Subject key identifier: E0:8D:43:B3:F2:F7:03:BE:05:D1:66:15:88:14:F5:7E:DD:B5:5E:9D
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 019D98F4D5F0CCD4F4C9F96809D6B9EDF565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0F5E
Signing time: Fri 17 Apr 2026 01:01:15 +0000
Manifest this update: Fri 17 Apr 2026 01:01:15 +0000
Manifest next update: Sat 18 Apr 2026 01:01:15 +0000
Files and hashes: 1: BcIjFBUMP6CBeWgUBi0kiP8mMD4.roa (hash: AnrLYQrWg/R3TPt/tXnLy7bKSyCDh8qfOknLsoHKVr0=)
2: tt8_4epx4fUU-t0TnlM9j9Sy8Gc.roa (hash: LFx80Ot89ti4/nAcgN280XkSiewCdAO+iihbkS/s85Y=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: JTKZAEE8Gkbnk4b9U4Z3a/9QakR9jw+KyGNpaJ19zkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d5:f0:cc:d4:f4:c9:f9:68:09:d6:b9:ed:f5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Apr 17 01:01:15 2026 GMT
Not After : Apr 18 01:01:15 2026 GMT
Subject: CN=e08d43b3f2f703be05d166158814f57eddb55e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:7b:d6:bb:fe:7b:8a:3a:ec:83:cb:d1:68:
c2:96:c9:e6:4d:02:bf:0f:a6:da:92:d9:90:bd:91:
89:17:0e:57:35:c7:ad:b0:2c:f3:11:b9:c1:b1:c7:
27:be:9a:bd:29:07:dd:f8:67:a8:de:a2:b5:10:88:
32:74:5e:0c:d0:00:2b:ac:ef:19:8d:1b:d4:14:f5:
24:26:e1:df:96:75:c2:07:c1:3d:b1:fd:3e:c0:cd:
72:34:6f:df:36:a5:c2:8b:a1:e4:a9:30:96:ac:dc:
94:b4:de:85:0c:a2:2b:0e:cc:f6:b3:12:06:62:83:
e5:40:4c:97:48:59:fa:d8:14:b3:2b:99:7c:37:6a:
d9:03:99:73:35:8d:21:0b:95:d2:65:fe:fb:bd:79:
de:a0:e3:08:b9:73:d9:cd:0b:2d:42:9d:b7:d9:42:
d8:94:76:d0:3f:95:72:e1:2b:21:44:c3:76:24:0c:
9e:6f:84:5f:47:66:0c:65:81:b5:4f:2f:bd:49:c5:
bb:2a:22:6e:f5:2f:f7:11:ad:e6:ee:f6:46:83:4f:
2e:4d:2e:c3:4b:2a:53:9d:b9:e3:2e:75:6a:2f:b1:
65:81:36:16:1c:7c:42:45:12:24:86:0d:0e:7b:60:
a7:7f:5f:39:d8:2e:87:ef:d0:5b:d4:22:e3:5c:cd:
6f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8D:43:B3:F2:F7:03:BE:05:D1:66:15:88:14:F5:7E:DD:B5:5E:9D
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:72:27:33:d1:6a:eb:35:1d:28:64:fb:dc:02:1e:98:3a:72:
8a:46:3d:08:2a:56:2a:43:2e:02:67:e3:60:e2:7b:6d:3a:04:
4c:e7:d0:a9:61:b3:de:2c:3c:67:7d:5d:57:8f:35:15:05:82:
7e:11:58:4a:28:04:56:8e:e3:d9:77:21:be:a7:27:c9:fd:02:
8c:d2:ab:46:84:e5:e7:a3:2d:83:d9:0d:f2:ab:5d:db:5c:32:
93:c1:40:3e:26:4e:86:a9:03:d2:a4:f6:a9:44:b4:85:f8:d9:
c1:91:e9:2b:14:d0:94:f1:77:e7:b7:ea:61:11:49:ec:c3:cd:
cd:b4:e6:6a:22:34:9c:32:81:6c:bc:8c:c1:4c:ea:30:b7:2c:
67:63:9b:6b:6b:c9:cc:56:62:63:0c:51:9a:da:1c:b9:49:53:
16:9e:01:34:ce:e6:53:6d:3e:c1:07:60:ac:6c:9e:07:05:8d:
0d:87:5d:c9:bc:c3:e6:37:0b:ae:aa:fd:c9:8a:38:8f:a4:81:
92:16:ac:f0:11:85:5a:e8:75:88:68:6a:6a:7a:f0:0f:80:03:
e4:4e:f1:cf:77:55:ac:bf:f7:ee:4b:16:62:05:a9:74:55:ee:
3d:30:b0:d4:72:35:a3:98:e1:6b:56:fc:07:15:3e:2a:16:bb:
d2:80:8e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:19 2026 by rpki-client