Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: ZexKen9cC7QLJcs3mAh3uMKHviIW+3YnUDQJyKId6WU=
Subject key identifier: 83:B5:B1:08:8E:C7:1E:E4:E0:1F:4B:CC:13:36:54:C7:B5:58:0E:59
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 019D9C63AC7ED1B5B321E07FE06FF6186B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 1803
Signing time: Fri 17 Apr 2026 17:01:11 +0000
Manifest this update: Fri 17 Apr 2026 17:01:11 +0000
Manifest next update: Sat 18 Apr 2026 17:01:11 +0000
Files and hashes: 1: 1p6N-kK_4V3GFKcMeMBC634qt2Q.roa (hash: TSyzIZ76W8e8kErWqZwdXl64ZiwUdxKLNAqgp6ToAQQ=)
2: 4WvNG4qNCW2EFlj86dJTOuveJH8.roa (hash: oJyVY5B1qiE0XMrui4EotkBx3jXoI+Z2a2bCSywanP8=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: b7QwLaXeIKJp83OyjcWcSDMoVaig1sThDPhk56ij6UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:ac:7e:d1:b5:b3:21:e0:7f:e0:6f:f6:18:6b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Apr 17 17:01:11 2026 GMT
Not After : Apr 18 17:01:11 2026 GMT
Subject: CN=83b5b1088ec71ee4e01f4bcc133654c7b5580e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:26:1c:35:ce:42:a6:05:db:41:f0:dd:15:
7d:61:46:82:0b:5f:db:2b:33:15:b1:09:c1:c4:22:
4b:51:25:d3:9d:a7:40:85:d8:05:e6:cd:49:27:d4:
80:57:13:ff:c4:fe:46:3f:e6:66:51:74:39:76:4c:
25:1c:d0:99:81:ab:48:60:ae:e1:ca:99:82:c7:84:
e4:8c:98:29:e2:ad:87:bd:80:47:75:c8:cc:b6:33:
49:98:a9:93:33:7a:ee:62:bf:e0:9f:60:c4:7f:95:
d7:db:47:b8:e6:62:bb:bf:5f:03:12:01:3b:58:e7:
b0:a9:54:07:f3:ff:7a:3f:1f:fd:7f:b2:6c:77:50:
66:14:ee:e8:5f:81:f6:48:3a:fe:09:95:80:db:2f:
f6:38:55:f0:9f:2e:11:da:d6:d5:d9:95:8b:63:97:
6a:09:38:f6:29:b2:f0:0f:87:42:1d:45:37:0e:0b:
92:a1:e0:3c:96:10:04:cc:15:36:c1:14:66:8b:1c:
f3:38:72:41:7e:96:73:43:3d:d5:48:4e:72:2c:ec:
99:ec:6d:27:46:ab:ea:0b:f0:b1:fa:8d:94:dc:a6:
9c:2b:d2:6a:41:eb:92:9c:c4:7c:2a:be:44:54:6d:
01:b0:7a:49:e0:66:26:56:b9:67:06:1f:69:93:ff:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B5:B1:08:8E:C7:1E:E4:E0:1F:4B:CC:13:36:54:C7:B5:58:0E:59
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5e:3d:9b:92:53:d5:48:bf:5b:f9:f5:a4:73:70:b9:1a:67:
74:e5:f3:cc:9e:7d:bc:46:a8:ea:49:4a:ae:4a:0a:3a:c5:87:
1c:50:3f:9b:0c:36:2f:15:d5:d0:08:c7:ba:63:c5:bf:40:5d:
cd:5e:40:d4:eb:17:54:d5:66:81:fc:21:b4:4f:7f:92:32:2a:
c7:cd:f8:46:0a:5b:d8:79:f0:d5:d9:13:16:a5:c1:74:be:55:
af:21:6b:6c:ef:42:6f:62:8b:3b:b7:ee:33:a1:5f:cf:19:d5:
d8:72:e1:24:e1:74:13:bc:11:07:c3:e3:6c:91:d2:b8:83:f5:
d9:6f:68:13:73:f5:88:70:f3:16:4d:f9:63:59:80:76:2e:47:
3c:8d:2b:ab:1f:81:d0:a7:1c:ab:7d:4c:cb:3f:18:cb:8d:fb:
4e:d6:4c:fb:c4:33:9e:84:cf:78:7f:4b:43:ae:94:fe:30:46:
2e:6f:fd:7a:9c:14:6e:0a:6c:6d:a5:91:3e:62:67:9d:8e:43:
c6:90:9b:10:90:2c:a4:1e:95:50:03:fc:4e:01:20:8b:76:dc:
d2:79:c9:95:f0:06:22:8f:64:4b:0c:1b:cf:37:9a:dc:87:53:
f5:59:97:bc:97:5a:f0:0c:76:7f:70:2f:a8:7f:49:dc:b6:80:
cf:69:0c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:26:58 2026 by rpki-client