Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: S5tV1ztN18UhhUoFMJZtN0vJZjHJZkAHR4DkfNKueqg=
Subject key identifier: 50:21:B7:8D:B1:F8:52:6D:56:5B:B9:0B:0F:08:55:B7:88:26:44:26
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 019DA309D4568B99E910549EAF645883E337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 15D7
Signing time: Sun 19 Apr 2026 00:00:23 +0000
Manifest this update: Sun 19 Apr 2026 00:00:23 +0000
Manifest next update: Mon 20 Apr 2026 00:00:23 +0000
Files and hashes: 1: q_Sdx_pDux5HG_B-3KML3ZxV1Q4.roa (hash: ht/8yca5f/4MvUCuC03a4MjP5eq5Ql1KG2x7zVYULEQ=)
2: v8cGXi_NSEn4R2Pj8ik0gEWzS6g.roa (hash: Tc7POOVIwZMXLz0qNFWoVFFcyKsqMyAM9BmZSJShLfc=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: EN1TbxAA/M4KOeFIuEAkpg+DfXYrcsY69L82Gvj63Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:d4:56:8b:99:e9:10:54:9e:af:64:58:83:e3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: Apr 19 00:00:23 2026 GMT
Not After : Apr 20 00:00:23 2026 GMT
Subject: CN=5021b78db1f8526d565bb90b0f0855b788264426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d7:a9:49:fc:62:86:87:ce:4a:a4:94:36:e9:
de:64:7c:a6:75:90:8c:48:38:01:fb:3d:e0:c9:bb:
f9:62:52:02:ff:57:c0:7a:78:bb:63:df:c0:02:51:
a7:d5:43:55:c7:27:e7:b2:94:10:7c:9b:8a:9c:57:
9a:e8:02:be:77:b8:6c:0d:92:be:76:0d:c9:8e:74:
7c:28:9d:e4:91:70:2d:cf:9b:c4:11:4c:34:40:31:
f3:33:e6:74:b9:b8:7a:8e:20:a2:29:f1:2d:df:ed:
b3:d1:d3:a1:3f:5b:4b:fd:66:a9:08:de:7f:6a:41:
f5:12:33:d8:ba:60:ef:7c:09:70:e8:6e:b4:8a:b4:
53:1e:9e:ed:fd:d8:5a:5b:a1:e4:ae:e2:74:29:72:
5f:99:b0:a8:d3:a8:51:a8:b0:1b:46:2e:49:38:2a:
85:28:c9:ba:34:85:55:48:c0:26:e8:9f:8f:22:3f:
de:22:6c:ec:dc:f3:5e:87:06:09:9a:a9:0b:f1:09:
df:1e:40:90:9f:60:1c:da:8a:a7:2a:40:c9:35:23:
6b:97:a9:b2:dc:2f:bc:9f:24:9d:b9:93:7a:a9:0d:
e4:ea:9e:97:09:1f:a7:11:f4:2f:c1:8a:66:e5:49:
6a:72:52:45:62:b4:7a:ad:10:c1:bb:0a:9c:95:d6:
69:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:21:B7:8D:B1:F8:52:6D:56:5B:B9:0B:0F:08:55:B7:88:26:44:26
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b9:6f:84:3c:ee:d4:2c:16:83:75:d7:87:d4:7c:64:46:4b:
d0:db:e5:24:71:10:b6:7d:de:dd:39:48:31:61:0c:27:a3:6a:
21:d3:c2:9f:e9:64:d1:ee:3c:9f:de:eb:21:4d:c4:c7:02:d9:
f6:a2:ae:10:65:6d:71:f4:c1:5f:da:34:fc:e4:6b:3a:62:58:
21:1e:17:a6:cf:17:ac:ac:7f:eb:17:1e:56:03:9b:cb:1d:66:
50:a9:6f:f3:5f:3f:b0:48:0a:d4:59:20:75:55:ad:33:a6:92:
32:a1:21:e5:2a:ac:e0:62:ab:c2:bd:92:31:62:cd:75:92:a9:
e6:e7:8c:78:13:80:eb:66:94:35:e9:c2:4d:b1:c3:d9:dd:66:
af:8e:48:00:b6:42:25:12:ce:61:32:25:89:5f:42:7f:6e:9c:
b3:16:41:68:d4:92:9c:5d:5c:07:da:e7:0a:9a:ff:b2:b8:99:
42:c9:25:52:c3:68:c9:05:45:ac:f3:c9:94:74:45:d5:5c:0e:
bb:d3:f8:b6:d3:1d:43:77:32:f3:cb:a0:42:67:fe:47:a3:52:
53:98:37:31:e3:17:92:3c:81:ff:7d:d0:83:b0:e4:99:c0:41:
db:8e:54:5a:da:be:41:b3:27:c3:57:62:89:18:fa:08:52:77:
c1:36:5b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:09 2026 by rpki-client