Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
File: Zs01lGjIuqmPw8ou8tkFg6aeABY.mft (raw, json)
Hash identifier: y/AGnnUc0WhCt5uhWNH65wTygazPAGrByUNF0cHqzgM=
Subject key identifier: D8:59:D7:E9:4D:8F:B4:91:E6:DD:13:9B:66:7F:75:94:A0:76:97:5C
Authority key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
Certificate issuer: /CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Certificate serial: 019D9C636AA76653ACD3C629D5212E662C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
Manifest number: 0146
Signing time: Fri 17 Apr 2026 17:00:54 +0000
Manifest this update: Fri 17 Apr 2026 17:00:54 +0000
Manifest next update: Sat 18 Apr 2026 17:00:54 +0000
Files and hashes: 1: Zs01lGjIuqmPw8ou8tkFg6aeABY.crl (hash: 5vFHfzrNU+P7RwVM724PdWaNAk8isBzHXLFlrsDw87w=)
2: rqJldLN-S-H8DV7_BXB9c6fFRDg.roa (hash: 8ct3OMMYCUQEAyF1g7DbkXYuvpJT+cTHy+wjPP6qYuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:6a:a7:66:53:ac:d3:c6:29:d5:21:2e:66:2c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Validity
Not Before: Apr 17 17:00:54 2026 GMT
Not After : Apr 18 17:00:54 2026 GMT
Subject: CN=d859d7e94d8fb491e6dd139b667f7594a076975c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:fe:90:37:a2:d9:96:24:0d:26:ed:06:0f:
ec:75:92:04:29:c9:dc:8d:0c:d3:ea:4d:15:87:b8:
26:50:ee:ee:09:bd:53:24:c8:0a:c2:4f:89:ba:ae:
73:a3:7f:3f:cb:5e:04:3b:16:ef:d4:9a:1b:70:95:
26:07:fe:01:35:83:a7:28:ca:bc:ff:f2:75:a7:81:
4b:86:98:cc:d7:f2:88:98:ec:9b:be:e3:a7:9e:66:
7c:32:69:ad:d1:93:7f:70:26:65:ee:a8:fe:94:c6:
c7:c2:d6:4d:b4:03:e5:b8:3c:c2:75:76:90:15:64:
ba:1c:87:39:da:cf:56:21:a6:8b:b1:ed:41:e6:b9:
e8:9a:00:2e:7d:58:f1:dc:a2:d2:c8:da:5c:36:f1:
01:b8:25:b5:21:a8:63:04:73:36:d7:57:35:49:c5:
fb:4f:2d:b1:05:a0:bd:50:9f:7e:4c:0e:52:58:f6:
f0:83:27:53:76:f5:cf:0a:21:85:b4:86:c0:9a:dd:
8b:b2:49:ff:f5:3c:3d:12:61:3a:28:61:50:9f:9f:
fe:7d:3f:a6:e7:e3:f4:ba:6a:51:91:b2:10:9d:56:
94:16:1f:fe:23:9e:29:5f:50:41:2a:12:c6:6a:42:
0f:fa:47:e6:92:59:9e:f8:96:6d:1b:38:c7:fb:3e:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:59:D7:E9:4D:8F:B4:91:E6:DD:13:9B:66:7F:75:94:A0:76:97:5C
X509v3 Authority Key Identifier:
keyid:66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:00:1e:91:50:22:ad:ac:b7:fe:50:d9:82:08:20:d0:93:72:
ce:a7:47:52:f7:8c:da:8d:71:75:39:fe:4a:a1:e5:07:8c:e5:
43:31:25:1d:64:3d:4e:0e:85:66:c8:37:69:37:51:85:ff:5f:
cc:64:28:f1:5f:e8:0e:04:b6:02:2a:d7:4f:e8:72:a1:da:e2:
33:73:48:e6:b3:58:1d:f4:df:3e:96:c4:2a:eb:7a:d8:22:8b:
1b:40:9b:f8:3f:87:cd:ca:3e:9b:f0:3c:1b:ff:41:75:32:cc:
ab:99:ab:65:aa:cd:9b:52:0c:02:d9:fa:da:6c:ba:b9:08:60:
be:c3:d8:ec:66:65:3a:1b:e9:39:c7:b0:66:8d:67:da:77:0c:
67:3f:25:6b:d8:a6:e4:fa:ea:95:b4:6b:26:fe:30:cc:32:ce:
aa:62:36:bc:1b:bb:b8:00:04:34:03:74:40:6c:c4:f0:66:d8:
9f:b5:76:55:ad:76:5a:95:b8:7d:26:80:92:b2:e4:91:44:63:
96:e5:12:c1:7d:7c:f8:8f:71:34:9f:3f:0f:d0:82:96:4a:79:
4f:ab:cd:01:f1:b8:fe:72:3c:a0:ec:92:b6:35:c0:a4:d4:d4:
22:df:2d:7a:be:43:4c:b8:25:21:1e:e2:97:f4:b2:b3:30:f8:
c0:50:6e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:10:41 2026 by rpki-client