Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json)
Hash identifier: +kvob0N1RadwmFS4GyR0w3sbqA3pxtyKJ5QcPxo4kWA=
Subject key identifier: 2B:88:90:D3:58:0A:93:73:72:16:99:C6:8C:A7:18:D0:A0:54:51:4E
Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc
Certificate serial: 019D9D3EA923F8B170BA65795A2AA17260DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
Manifest number: 0175
Signing time: Fri 17 Apr 2026 21:00:22 +0000
Manifest this update: Fri 17 Apr 2026 21:00:22 +0000
Manifest next update: Sat 18 Apr 2026 21:00:22 +0000
Files and hashes: 1: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (hash: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk=)
2: gIvmrtP4qhP-p_HNvQknynsugUc.roa (hash: T7F6BSJaNt+yN8P1agGWT43ZlvcgWoTw7wuq3mofmEI=)
3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: x52phGIyR7r8NJGv+pLB2fkKCzSwturdE8CRW5QGG5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:a9:23:f8:b1:70:ba:65:79:5a:2a:a1:72:60:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc
Validity
Not Before: Apr 17 21:00:22 2026 GMT
Not After : Apr 18 21:00:22 2026 GMT
Subject: CN=2b8890d3580a9373721699c68ca718d0a054514e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e9:1c:df:b3:88:ac:d6:27:b5:32:76:08:12:
bb:28:fe:ed:5d:f0:04:ec:ab:09:7f:37:ed:1c:86:
8d:e0:f4:14:16:96:b3:66:9e:cf:e0:b8:16:7b:d5:
db:82:68:3b:6b:1e:10:1d:38:bd:35:05:95:0d:66:
db:1c:12:bd:76:9b:aa:bf:d4:c1:a4:d7:e4:fc:89:
6a:9e:c2:c3:5d:cc:26:cf:99:8f:78:22:18:e3:e8:
b8:d5:7b:e9:62:a1:df:85:40:fc:de:8c:01:8f:63:
07:df:87:12:b1:57:10:13:37:8d:f6:05:e5:44:1b:
56:4f:f6:1e:a6:ea:f2:ac:2b:0a:36:c2:8f:27:19:
39:6a:dc:d9:9b:8d:5c:53:d7:9b:75:fd:99:f5:f7:
5b:e2:27:ad:c2:bc:98:d0:68:3a:03:35:a0:c7:9e:
e7:7c:90:e6:1e:b5:f4:48:49:62:83:93:3d:9a:6e:
bc:20:ab:0e:7a:59:29:5b:40:03:06:5a:90:de:9f:
ce:a0:73:d1:14:ce:67:17:0c:7c:99:4f:89:23:20:
15:cf:83:db:b9:fd:7a:7e:8f:4f:4b:11:0e:7b:7d:
6f:44:43:a6:29:3e:44:c8:37:a7:26:e4:3c:94:76:
2c:d6:80:72:5c:af:c9:d6:4d:0e:16:d0:49:9e:3d:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:88:90:D3:58:0A:93:73:72:16:99:C6:8C:A7:18:D0:A0:54:51:4E
X509v3 Authority Key Identifier:
keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2b:3b:ee:f3:dc:ca:b3:a0:5a:43:38:11:df:e5:55:80:24:
46:b9:7b:dc:10:bf:f5:b3:88:4e:26:d7:7c:89:41:03:35:6c:
f8:f9:ec:ba:97:b7:26:df:ea:db:37:dc:08:6c:43:9b:33:91:
6b:af:af:a7:c1:29:7c:0b:8d:f6:b8:f8:74:ba:13:3d:be:00:
a1:2f:cf:50:98:4c:bb:32:15:34:2f:b4:d8:18:c6:26:12:91:
67:c6:74:b0:31:db:91:14:44:ed:0d:58:1e:07:2a:84:a5:47:
c1:31:1a:c0:f7:af:41:dc:55:68:97:22:ee:3b:b7:19:71:36:
40:0d:96:b1:f5:9c:31:65:13:ae:59:d0:91:fc:ac:3c:09:52:
a7:34:64:5b:65:7f:22:9e:0b:e7:76:b0:3b:2f:3a:08:05:60:
95:80:e9:a9:26:b2:bb:61:84:73:58:69:76:91:88:f5:a3:15:
1f:66:ba:15:f5:b8:2c:99:ad:b0:22:01:ae:b0:33:bf:ca:fc:
33:20:2a:c3:1c:89:0f:de:5f:b2:0d:04:36:f4:0a:89:ca:fd:
87:2a:ae:40:0f:f4:e1:35:9d:27:41:fb:4e:ba:6d:fc:12:9f:
35:d9:a4:16:19:c9:3c:0a:43:6a:0b:73:24:cb:dc:c5:ea:88:
eb:ef:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:12:16 2026 by rpki-client