Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
File: zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json)
Hash identifier: nIQfYc+sWtUVrv0z5uSEEKtowpAergwPzRAdqRGfVXc=
Subject key identifier: 7F:25:58:8B:4D:86:AB:EA:A4:DB:A9:A5:53:47:0C:E7:75:FE:D7:D9
Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Certificate serial: 019DA52F36B25B0A46D0562D1144CD17BBAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
Manifest number: 047D
Signing time: Sun 19 Apr 2026 10:00:27 +0000
Manifest this update: Sun 19 Apr 2026 10:00:27 +0000
Manifest next update: Mon 20 Apr 2026 10:00:27 +0000
Files and hashes: 1: kNIMwvIm17KNl4j_uiod0k8I7zA.roa (hash: UUpBz48IIuQvNQbtn+EM3409/ewRtq2gofruXX7xipw=)
2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: mJCG+BndPwzHjbV3KWUN2q2gL1hsRHvEjOj4yuFMWcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:36:b2:5b:0a:46:d0:56:2d:11:44:cd:17:bb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Validity
Not Before: Apr 19 10:00:27 2026 GMT
Not After : Apr 20 10:00:27 2026 GMT
Subject: CN=7f25588b4d86abeaa4dba9a553470ce775fed7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:2b:64:f7:5c:73:18:f3:63:27:80:9e:dd:
19:d5:30:02:37:12:ca:60:68:0c:bf:b7:17:fb:c3:
4b:96:dc:76:4e:ca:6a:74:39:bd:d1:e6:4f:50:3d:
88:71:79:8c:9f:89:f3:b1:e8:bc:f8:1f:66:a9:6b:
a2:87:3b:51:61:23:65:c7:81:92:99:8b:1b:6f:c6:
c4:a6:04:1a:66:b1:43:9d:47:c9:17:65:ad:a1:52:
cf:7b:86:d9:55:18:3b:40:cb:e3:09:e7:cc:7d:e5:
19:83:20:01:12:4a:9e:9f:f2:05:4c:c7:ee:a8:62:
36:54:5d:49:23:fa:79:7e:9f:79:e3:89:c5:3b:56:
d9:f5:1f:71:fe:f6:01:0c:4e:e8:6e:15:bc:9e:d0:
95:7d:e4:79:da:96:bf:20:9b:72:86:8f:06:27:77:
b2:e9:79:6a:1f:76:55:44:ba:2a:95:c9:fa:f4:52:
3c:40:58:4c:ea:a2:be:a5:fd:de:0d:81:e5:51:d4:
56:97:0d:34:15:cc:b0:b3:92:65:d9:97:3e:2f:ad:
7d:3f:fe:e8:8a:3c:a9:0e:48:8f:4e:f8:e2:32:9b:
ed:c5:54:f4:1f:16:a3:92:dd:49:f2:33:0a:cc:55:
e8:ff:ca:b1:ac:f1:c7:35:49:62:20:8b:be:89:e6:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:25:58:8B:4D:86:AB:EA:A4:DB:A9:A5:53:47:0C:E7:75:FE:D7:D9
X509v3 Authority Key Identifier:
keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f7:2a:07:da:e7:d4:3c:ac:c2:9b:39:17:95:b7:69:24:f7:
d5:89:9c:9a:16:68:b9:62:75:a3:ac:6f:cf:fc:af:5f:66:e6:
f8:bd:2e:3d:2c:b2:2f:48:33:d6:7c:48:5c:52:9c:e2:c1:4e:
cb:ac:34:d3:0c:0d:2f:ef:8f:72:a2:6b:b4:a6:ad:44:2f:f5:
87:7a:44:3d:84:c8:92:3f:30:4a:f1:69:30:a5:76:c4:ae:9f:
5b:b6:86:01:90:de:5d:c6:f2:08:6f:c2:68:fd:42:3e:7a:39:
cc:bc:37:d8:86:4c:2b:37:df:50:a6:c8:58:a0:29:89:0f:4e:
b0:fc:05:0e:5f:3b:fe:07:b6:43:ab:94:8c:c7:5b:0e:1b:0a:
f2:09:ad:1a:0b:ea:4e:a7:9e:19:5c:b7:50:b8:a2:db:5c:43:
03:a9:c5:f3:cc:a3:f9:54:7a:1f:58:22:33:fb:0a:03:9b:54:
54:79:67:38:c0:b5:da:08:1f:a3:07:2c:28:00:8c:05:40:14:
b4:08:69:05:2e:40:14:eb:48:07:fb:c1:e4:19:da:0e:8e:49:
70:27:aa:10:99:19:62:5e:56:76:a3:4b:4d:2e:62:31:71:84:
d8:1f:4d:fa:b9:82:c1:1b:5d:c4:75:ad:af:ae:31:70:bf:20:
c3:04:6c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:59:35 2026 by rpki-client