Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File: zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier: 9sYlKji5NU0jHW7/zVU3xvOOYrUX9960t0lR0Mxt4L0=
Subject key identifier: A8:66:C8:CC:A1:51:33:1E:F5:61:EB:39:AF:42:DF:F8:35:5A:0B:D5
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer: /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial: 019D9AE34B0C0AB77C9AB48C9262EFC26F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number: 132B
Signing time: Fri 17 Apr 2026 10:01:20 +0000
Manifest this update: Fri 17 Apr 2026 10:01:20 +0000
Manifest next update: Sat 18 Apr 2026 10:01:20 +0000
Files and hashes: 1: aq4p8HsGl9pKO4noCxxMdLO1S3k.roa (hash: WnMcucTbt4CWLUco8Rw4MOO6knRkLOBVBAUuHlupSc8=)
2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: 8VERSlh7p9rPP5jAlJAvYcxhy98CDrbCWOo7PG8RSpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:4b:0c:0a:b7:7c:9a:b4:8c:92:62:ef:c2:6f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
Validity
Not Before: Apr 17 10:01:20 2026 GMT
Not After : Apr 18 10:01:20 2026 GMT
Subject: CN=a866c8cca151331ef561eb39af42dff8355a0bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:ee:85:81:52:a8:99:34:fc:77:f3:4c:fe:
de:7c:af:36:41:7c:b0:f3:26:d4:ed:44:d9:9f:1a:
43:d7:c4:45:1e:21:b8:d4:a2:0c:ca:2b:4d:c0:31:
80:15:1b:c0:61:d7:b9:09:c0:6c:ee:cd:31:e5:a6:
aa:34:ab:37:92:44:2c:0e:dc:f4:07:5f:b2:39:f3:
d0:7e:03:22:2d:52:ee:9c:73:10:30:88:ab:69:d9:
22:01:85:76:3c:4f:08:e0:4d:95:07:97:84:06:14:
ee:09:34:2d:95:c1:c2:6d:85:8b:35:4c:85:52:0d:
de:38:75:b2:c1:07:38:b5:97:12:16:e9:7a:f3:10:
44:2d:61:4b:76:b7:74:74:66:2b:76:57:d6:34:b7:
4a:83:e2:ae:2e:60:b3:46:6d:1e:e6:c6:dc:3d:08:
46:de:cf:8d:7e:45:e0:4d:c1:0e:0d:03:47:4b:46:
71:07:14:cd:03:1f:29:88:e0:ad:04:57:d4:07:4a:
67:54:b5:a4:e8:88:5f:61:fe:bd:02:15:aa:4d:6a:
8d:78:e7:9a:60:83:43:3f:26:a6:2e:3b:62:24:13:
70:84:a3:2d:7e:df:23:0c:46:9f:df:67:23:55:be:
3b:ab:72:dc:3b:93:0a:74:68:f5:b2:48:88:05:e4:
83:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:66:C8:CC:A1:51:33:1E:F5:61:EB:39:AF:42:DF:F8:35:5A:0B:D5
X509v3 Authority Key Identifier:
keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:85:24:3d:98:34:78:bc:b0:5e:cc:00:8c:43:14:aa:2a:63:
34:1f:0d:5e:64:bb:3d:62:33:a3:4b:7f:0c:1a:a0:0d:df:c1:
40:80:32:83:2d:5e:48:6e:39:0f:50:b5:ce:1d:b7:b6:fc:8f:
35:bd:35:96:15:3c:0b:f1:f0:6a:91:dd:57:df:8d:f7:4f:85:
00:ce:a5:1e:71:69:3a:ef:c3:9c:1b:18:88:6c:b8:71:c4:28:
d1:96:d1:4c:90:81:b5:cc:95:4e:df:d6:d5:d4:c7:76:3a:6c:
1a:26:70:c3:e4:95:d9:ec:c1:d2:b7:d0:ef:fa:90:d2:5c:10:
88:e4:52:ab:94:35:ad:67:3d:41:95:67:cd:0d:0e:ca:c2:60:
27:eb:2c:47:72:d3:c8:d2:fc:a3:c9:13:5b:55:74:d5:ee:b2:
58:26:bb:c3:45:8e:98:98:2b:af:16:76:15:b4:53:67:d4:64:
ac:4d:93:14:54:39:64:c4:d8:94:4e:68:f4:31:7e:e6:7b:63:
9f:af:e6:ba:72:af:c5:e1:be:e2:5e:b2:f4:de:40:1f:f8:77:
32:fc:2a:ed:1a:46:e5:ff:27:6b:08:77:dc:d0:6b:b7:71:22:
94:50:12:ae:92:99:5a:a3:cc:1f:40:37:83:96:f0:e3:14:e6:
b0:9b:c9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:29 2026 by rpki-client