Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
File: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft (raw, json)
Hash identifier: kS/9WA2QkplouDFbVNfrhfM7SrypkSbIlGh35h7/ReM=
Subject key identifier: 5B:33:B7:E1:03:50:75:64:32:8F:FB:A4:5A:FC:7F:DB:99:4D:88:ED
Authority key identifier: CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
Certificate issuer: /CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Certificate serial: 019D99D01E14F841BE98B55F649E931E64D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
Manifest number: 0682
Signing time: Fri 17 Apr 2026 05:00:46 +0000
Manifest this update: Fri 17 Apr 2026 05:00:46 +0000
Manifest next update: Sat 18 Apr 2026 05:00:46 +0000
Files and hashes: 1: uqno00iVqXEbyw4Jce9I4NCSd6U.roa (hash: LOvolmVlOGfS5/Lu0OZEEESsBkxydv7fTijwns2OR4M=)
2: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl (hash: 6h3zd4yNnnOmwWvVVbeXPL4ygZeEAcWgqWHwGQ167ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:1e:14:f8:41:be:98:b5:5f:64:9e:93:1e:64:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Validity
Not Before: Apr 17 05:00:46 2026 GMT
Not After : Apr 18 05:00:46 2026 GMT
Subject: CN=5b33b7e103507564328ffba45afc7fdb994d88ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2d:45:20:44:34:23:f6:c0:64:09:fd:c8:df:
c0:71:cd:2e:d0:e2:9e:0d:40:3b:5a:3a:fa:77:cd:
13:56:17:d6:d7:d5:95:32:e5:b9:8f:1f:e2:63:53:
78:33:f9:d1:ff:5e:4e:d4:6e:15:65:d3:65:4d:20:
2a:04:9a:07:48:d2:a6:29:8f:94:30:34:ea:cd:b6:
60:b0:c4:ea:79:73:e3:b4:f2:08:3d:9d:3c:63:c7:
61:96:5d:ac:03:ea:6b:95:3f:d8:3d:38:9e:0b:a8:
d4:50:4a:50:50:1b:03:f7:7b:88:ff:d8:75:66:2d:
a0:41:3e:fc:f6:d0:ac:77:a5:85:d6:cd:ee:77:71:
ee:c9:2e:30:99:aa:fd:52:a2:56:cf:7e:a9:7c:05:
73:e7:e5:84:d0:be:7f:e5:0a:05:1a:4e:75:69:bd:
4d:3c:44:35:d5:85:c5:fc:d8:66:34:00:0d:54:fc:
c1:81:ce:e0:50:92:85:9b:e5:e1:aa:af:c9:64:f3:
69:58:f3:82:41:f7:b4:bc:4f:f9:06:39:4c:cb:ae:
1f:7b:b9:c7:2e:91:6d:7f:fd:6e:36:50:b6:16:60:
44:0f:22:d7:1e:e6:db:83:2d:71:13:17:02:c0:2c:
35:f6:f8:09:37:41:3e:05:a2:ee:cd:56:eb:b7:c4:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:33:B7:E1:03:50:75:64:32:8F:FB:A4:5A:FC:7F:DB:99:4D:88:ED
X509v3 Authority Key Identifier:
keyid:CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:58:4f:93:b6:06:b2:d7:7f:6b:a2:a9:4b:2b:af:26:4d:9a:
70:0a:9b:4c:ad:2f:80:8b:ae:1a:89:89:7b:ef:86:d2:ce:0c:
60:8b:f0:5c:d3:85:b2:d4:fd:fd:2c:0a:08:7a:8c:61:be:94:
93:08:3c:cf:e3:b2:42:f9:e5:34:2c:a1:ca:56:d1:1b:b2:e2:
88:e1:ca:f0:db:14:11:d0:ae:50:90:43:43:fc:56:b9:56:a3:
fe:e4:95:00:e5:e2:0c:79:0b:dd:25:c5:cd:6e:ba:49:26:fa:
79:88:f3:ca:d8:1c:fb:0f:69:da:b5:9c:4b:12:9c:5b:c8:4c:
d9:6f:65:fd:fb:21:1a:89:be:78:a3:e4:50:56:4e:fc:20:bc:
cb:c9:e6:53:0e:16:da:9a:16:c7:8b:e5:d9:29:bf:a1:e1:7e:
4e:62:61:b0:9b:99:46:5d:28:15:0a:c7:90:63:e5:c1:b6:3b:
d3:1b:05:13:bb:b4:a7:19:87:e5:25:9f:34:f0:7d:37:51:bf:
81:5f:71:95:76:80:28:02:5a:5e:1c:5b:74:99:bd:a5:db:c1:
cb:dd:ba:1a:9d:9c:46:ff:1c:6e:e1:a0:53:d3:85:00:47:f4:
a2:33:d1:8b:7a:f3:13:de:8f:10:91:c2:ad:78:d9:fd:a1:dc:
8a:57:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:39 2026 by rpki-client