Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: Wr3nQeMNETSRzKmy/TwjZwVr6zSTTkaniwaW+Gh+oLw=
Subject key identifier: FA:D8:0A:7B:9C:33:1B:0E:7E:35:0D:87:0C:27:15:42:CE:F5:A7:82
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 019D99D0D16BCEF4F7DCA27194AB9E135145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 04BB
Signing time: Fri 17 Apr 2026 05:01:32 +0000
Manifest this update: Fri 17 Apr 2026 05:01:32 +0000
Manifest next update: Sat 18 Apr 2026 05:01:32 +0000
Files and hashes: 1: J2KPu7SF8-IgFc_PEWtKR0GI_cU.roa (hash: VJE0x80m0wxxgNfwYsal4K/ZZSwAp/QnDuAp90J4C0U=)
2: PFi8UqEs0Ce2jyKlXcQsmaVNy0Q.roa (hash: EuK+aiouSE9l8DmSMYUXvpay7owoB5D7UbVEhjSaVSk=)
3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: gh3LbwV7U2Oph6ygKhR2Gh1pWsIKy+LJQqA2KkdtNnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d1:6b:ce:f4:f7:dc:a2:71:94:ab:9e:13:51:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Apr 17 05:01:32 2026 GMT
Not After : Apr 18 05:01:32 2026 GMT
Subject: CN=fad80a7b9c331b0e7e350d870c271542cef5a782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:36:9e:4c:c2:a5:a5:13:42:7f:47:aa:aa:04:
6b:8a:f1:b1:3b:a6:67:f3:03:16:8c:d5:87:a5:7e:
03:13:db:6b:ea:a4:7b:38:13:aa:ba:7f:90:7d:fd:
4c:af:6c:1d:a1:27:39:9f:b4:3b:bd:bf:0a:aa:92:
88:0e:e3:b3:46:fe:e3:af:32:79:bc:02:ea:00:0d:
1d:2f:46:d1:31:6b:01:aa:41:f7:de:7d:3f:12:08:
39:7c:8c:6c:a4:8e:23:57:f6:2b:54:f5:6b:b8:88:
b7:cf:26:86:56:c4:b4:5e:3e:69:6d:8a:6e:66:46:
ee:18:29:7c:71:6f:35:ca:34:03:88:cb:b3:3a:76:
42:95:98:f7:0f:15:d3:6c:a7:ac:e5:45:88:5d:b5:
ab:51:56:fd:f1:40:da:3e:00:ff:b2:ce:c3:3c:eb:
52:ce:da:7a:f7:b1:5b:d1:50:72:d8:29:36:2c:24:
d9:c7:50:28:44:a9:29:86:9b:89:98:1d:43:7e:30:
de:29:eb:cc:8f:3b:83:b4:2b:81:4e:f1:7a:ec:f4:
c6:06:77:db:b0:d7:92:8d:46:f0:d8:97:2a:eb:af:
b4:ee:bf:48:b0:bd:8a:5d:e0:72:f2:62:61:9f:e0:
78:4c:3a:94:3e:71:55:51:e5:d5:09:e5:89:67:ee:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D8:0A:7B:9C:33:1B:0E:7E:35:0D:87:0C:27:15:42:CE:F5:A7:82
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:89:4e:8a:3d:4a:c9:57:32:d3:68:b0:73:af:37:53:85:6e:
2e:b6:18:b4:85:37:cf:87:8c:73:44:7a:0e:5c:60:49:5d:3e:
d3:d1:34:aa:87:69:ba:0a:95:87:1c:11:72:d3:10:c9:3d:60:
6a:67:ac:6b:ef:50:50:bb:25:32:81:f6:da:13:bb:cd:dc:d7:
65:28:2d:1c:ed:aa:c1:e2:bd:5a:1d:da:d2:0e:75:f1:78:0e:
b2:95:ea:fe:ae:a0:98:2c:f6:77:d4:78:ab:14:09:e6:51:3a:
4f:f4:c4:cd:50:51:8b:02:0c:aa:e8:7d:7a:2f:e9:0f:d1:89:
01:48:88:d6:21:c2:5c:6b:87:23:97:48:b8:75:0d:2d:48:34:
02:e2:85:11:35:dd:b8:be:f8:e1:0d:68:c4:57:09:4a:dc:86:
8b:31:a9:67:d9:c8:22:77:74:4d:e4:83:2b:9f:08:c3:76:6c:
7d:fe:9c:b6:ba:32:ef:e7:0f:56:15:94:8a:44:b4:91:76:26:
eb:04:6d:24:cc:3e:77:e9:fe:2c:9d:18:de:f9:0b:d2:4e:19:
f1:05:0b:16:14:a0:ba:ff:d2:1a:b4:20:63:43:80:3e:8d:63:
af:16:aa:26:d6:56:23:94:ef:35:91:65:f8:84:81:cf:56:ec:
b4:b9:11:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:52 2026 by rpki-client