Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
File: zIiKpmyEAKHmQJxdzFDr17jkMF0.mft (raw, json)
Hash identifier: FoWHh4NNeRGiQK7txnIhjxmMi2+j4M5ff8StysZNUw0=
Subject key identifier: 5D:61:0D:E4:A2:E4:2A:FF:84:AB:14:4B:28:AD:4F:02:18:81:D2:B7
Authority key identifier: CC:88:8A:A6:6C:84:00:A1:E6:40:9C:5D:CC:50:EB:D7:B8:E4:30:5D
Certificate issuer: /CN=cc888aa66c8400a1e6409c5dcc50ebd7b8e4305d
Certificate serial: 019D9BBE3BFE70FBD7CCCBD303BE4047913C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
Manifest number: 0D
Signing time: Fri 17 Apr 2026 14:00:28 +0000
Manifest this update: Fri 17 Apr 2026 14:00:28 +0000
Manifest next update: Sat 18 Apr 2026 14:00:28 +0000
Files and hashes: 1: IQgUFXohTVi2Y4XfWtFJarOT0q4.roa (hash: J2MJLqrQ5YjNoDasd1MZixNZt0/WlW4h/Wdqx4ZC4tw=)
2: wQGsS70JXw7EzI_ohYX-ZhN3HWk.roa (hash: V9wby/6/IQHqv6ZSSWsMOjiXOYqBXSyK8u1dRZnHf0A=)
3: zIiKpmyEAKHmQJxdzFDr17jkMF0.crl (hash: XxRDRPi1Tioz9TWiqYNfFlXCFrXc4vsHIInLjpFjDXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:3b:fe:70:fb:d7:cc:cb:d3:03:be:40:47:91:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc888aa66c8400a1e6409c5dcc50ebd7b8e4305d
Validity
Not Before: Apr 17 14:00:28 2026 GMT
Not After : Apr 18 14:00:28 2026 GMT
Subject: CN=5d610de4a2e42aff84ab144b28ad4f021881d2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:5c:5f:63:5f:4b:10:c0:b0:7c:06:e1:ea:
64:37:68:53:6b:b1:ba:b9:c7:15:6c:13:ab:df:33:
e2:7d:fe:96:f6:2b:fe:e0:10:b3:d7:7c:fd:94:ff:
14:6e:e0:fc:b2:cf:7e:25:8b:68:66:85:b8:e4:f3:
78:f9:24:56:9f:3c:57:7d:c9:82:f3:34:a9:af:ac:
4b:5d:9b:fa:b6:fd:e4:f9:b6:47:d9:c3:5f:b3:11:
c9:b8:d1:d2:4a:cc:c9:a2:0a:9b:f8:03:c5:c9:51:
45:bb:35:42:b7:17:4d:76:93:cb:69:25:2c:11:77:
b4:fe:75:cc:a8:31:52:d0:03:f6:ef:11:6d:92:1b:
59:34:39:3d:f6:29:b3:19:51:c3:eb:b0:cd:9a:bc:
03:ba:44:f8:93:6d:e5:3a:52:4e:c2:59:58:51:e7:
76:4f:43:2e:72:7e:7b:31:28:95:4e:21:12:b4:54:
bf:78:7d:69:d4:a9:c4:72:27:04:6d:52:2d:06:45:
86:14:d2:a9:e8:3c:91:ac:07:1d:66:15:ed:07:6f:
9f:3c:5e:29:76:a6:1b:0e:56:e7:3c:fb:e0:b7:6c:
6f:2c:f0:08:ba:a9:c2:92:8f:13:44:34:13:43:58:
e5:97:b9:a9:4d:c7:db:12:3b:df:f7:c2:2d:65:04:
56:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:61:0D:E4:A2:E4:2A:FF:84:AB:14:4B:28:AD:4F:02:18:81:D2:B7
X509v3 Authority Key Identifier:
keyid:CC:88:8A:A6:6C:84:00:A1:E6:40:9C:5D:CC:50:EB:D7:B8:E4:30:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fc:98:ea:d3:3e:16:db:b3:34:c7:c4:99:a1:8a:69:51:81:
77:da:6a:88:1d:1c:16:f8:a9:35:6a:d0:c1:d7:eb:c9:55:b8:
2a:f0:1e:93:49:b0:e2:3b:39:0c:6f:af:7d:31:3d:ab:ec:9a:
f7:52:c5:be:19:4b:2e:e4:f4:1a:0c:c6:24:3d:de:ef:a7:e6:
0a:53:d5:a6:e2:32:e1:34:2f:42:20:62:31:6f:67:2a:6e:da:
c3:d0:55:8a:8d:70:34:83:02:af:f3:5b:c9:0f:a3:ac:e0:2c:
5e:b7:33:34:51:b6:2a:49:1f:81:73:24:c3:ac:f8:91:ee:2d:
b4:8b:f8:5e:f9:bf:fb:74:ed:c5:46:58:b1:7a:4c:66:34:cd:
06:af:0a:2b:f0:c6:cb:46:d8:56:04:3a:3d:c7:e1:15:b8:24:
a0:44:ce:d4:c0:03:b0:8f:59:3b:91:54:13:34:25:33:5f:d2:
39:2e:4e:41:68:01:96:78:9b:6d:aa:ee:de:1c:9e:5f:83:6a:
92:59:ea:e4:fe:ec:0e:7b:ef:c9:73:6d:41:1f:4d:c6:24:83:
50:b7:7a:6c:b1:e8:a3:b0:90:07:95:55:36:05:22:c1:cd:57:
11:9e:81:9f:b9:11:95:44:f0:21:22:f5:d9:e8:55:08:68:c8:
3f:bb:4c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:54 2026 by rpki-client