Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
File: ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft (raw, json)
Hash identifier: zvssVYNWS2x2uxVvcVoOHz0ORWVhAK8tFqZGpyFRU74=
Subject key identifier: 87:28:E4:4B:49:B5:26:7C:C5:2A:8C:CA:5D:22:A3:8B:66:F0:3B:1F
Authority key identifier: 64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
Certificate issuer: /CN=64d4054d1b62158b8335a2019f0548b3872a3443
Certificate serial: 019DA30A59AFDA49D2DAB19DFFA152782D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
Manifest number: EB
Signing time: Sun 19 Apr 2026 00:00:57 +0000
Manifest this update: Sun 19 Apr 2026 00:00:57 +0000
Manifest next update: Mon 20 Apr 2026 00:00:57 +0000
Files and hashes: 1: JtxOMgCxIcJ8063ibiFRPahyjno.asa (hash: +TvpXjZ0wFORbZZJKdEWxbp7qspbkU7cAvB5pkqzaHQ=)
2: QaPIopLuEp6Kuf7J9YNJD8hjYqg.asa (hash: rL3mEvSiXaribwijI5L6bEj56L+yV0EhSxzmATCigVM=)
3: ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl (hash: Mm7DTPhIJqH3bQgx1bt9eoM1NHigZGOkKlKYAlezss8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:59:af:da:49:d2:da:b1:9d:ff:a1:52:78:2d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4054d1b62158b8335a2019f0548b3872a3443
Validity
Not Before: Apr 19 00:00:57 2026 GMT
Not After : Apr 20 00:00:57 2026 GMT
Subject: CN=8728e44b49b5267cc52a8cca5d22a38b66f03b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:df:84:9f:f7:18:ef:ba:68:92:e3:41:25:
72:5d:c1:a6:d4:bb:5a:32:ce:ad:d2:b1:a3:86:23:
23:fe:00:e2:2c:67:c9:f4:79:d6:e9:9c:91:13:5b:
6f:62:a7:f4:4d:8a:8d:a2:93:be:b3:9b:33:0b:3f:
13:72:40:36:46:a5:96:86:70:3d:29:13:92:77:26:
9b:80:2a:a6:9d:8b:36:43:ee:3b:8c:c2:eb:9b:72:
59:7c:51:df:8b:96:6d:92:07:fc:a6:78:ab:0f:99:
07:a5:1b:8f:e7:b1:30:34:77:af:1a:0b:6a:8a:76:
d9:ff:be:ab:21:f8:fb:b1:9c:ad:e8:1b:09:22:02:
bc:cd:f6:da:27:c5:a5:5e:45:02:00:64:a1:79:8d:
d3:c0:ac:ac:ac:a0:a9:d6:46:b5:21:ad:ad:b6:16:
d3:7c:7a:cd:f2:01:fc:6b:b7:67:85:fb:31:b4:bc:
6b:4f:d0:88:0c:8a:3f:98:03:7b:df:94:88:ed:f2:
09:85:17:f0:34:67:1e:f0:20:bd:41:6c:fe:ae:9c:
75:b8:90:55:67:10:dd:3e:c9:f2:c2:5a:8f:18:f3:
b8:a7:13:76:b8:35:a4:3f:de:fb:cf:2f:71:29:18:
44:ac:ce:dd:14:e2:06:2f:45:99:f6:ee:82:56:33:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:28:E4:4B:49:B5:26:7C:C5:2A:8C:CA:5D:22:A3:8B:66:F0:3B:1F
X509v3 Authority Key Identifier:
keyid:64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ea:3a:af:a0:32:c9:18:c1:f0:d9:3b:d6:18:23:05:95:39:
ed:d6:de:93:00:f1:95:5f:dc:4c:9f:7e:cb:fd:b5:d7:b0:f1:
04:5c:c3:f0:18:8e:95:ba:4c:8a:b6:6a:19:46:2d:2f:8b:60:
76:8c:3d:a4:6d:19:0d:57:7c:46:ee:39:ae:58:f9:ab:4f:37:
53:f6:de:70:0e:1e:39:5d:5f:75:5c:56:37:f4:5c:97:85:b7:
a0:d0:16:89:9f:4f:ba:46:f2:d3:04:12:6c:d9:9a:bf:47:bd:
8e:d0:08:08:5b:22:79:bd:4b:43:7f:5b:9d:cb:eb:75:f6:2a:
16:80:91:37:8c:e1:e6:f2:dc:b6:f0:c5:0c:6b:9f:ad:63:b4:
ee:55:a6:e2:7b:07:b7:96:e2:74:f7:90:94:7d:ab:02:73:62:
ad:21:da:dd:80:6e:31:87:03:8b:76:c4:02:4d:96:74:1e:d3:
32:c7:6c:54:ac:2c:d7:39:df:92:4c:57:1b:54:53:be:a0:93:
0f:de:4a:42:72:7c:88:c7:b4:0f:7e:ef:92:c2:f4:39:62:8b:
9c:41:4f:2f:0e:81:32:dd:50:79:0b:d9:82:ce:44:52:b0:75:
ea:00:12:fe:c3:41:76:7a:bb:af:8a:f9:33:8d:88:cd:3f:f4:
7b:7f:69:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:24 2026 by rpki-client