Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
File: ZrB43tN1kjDKLho76QZjjRMGuQg.mft (raw, json)
Hash identifier: RlMWR36nyEXGZfkiwyuS6cdAxAJjSS7Kx5MH8W4/XQs=
Subject key identifier: 25:59:4E:C1:63:92:4A:6A:89:0F:26:11:ED:D3:D0:E4:00:EC:04:99
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial: 019D9B879B11AF4BC7E705CA75F394361A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
Manifest number: 0C09
Signing time: Fri 17 Apr 2026 13:00:48 +0000
Manifest this update: Fri 17 Apr 2026 13:00:48 +0000
Manifest next update: Sat 18 Apr 2026 13:00:48 +0000
Files and hashes: 1: 0P7uN4tvEIayKbjzLDxjuMY6fB4.roa (hash: D76OIMLLfFy5FtZGfX5Tk3VMAoafB+zBwfrTHH9d6Ao=)
2: ZrB43tN1kjDKLho76QZjjRMGuQg.crl (hash: ZppG9ayiH+6MhoNWo+hwgKBMr2TlgxWLVk8Thr0r3Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:9b:11:af:4b:c7:e7:05:ca:75:f3:94:36:1a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
Validity
Not Before: Apr 17 13:00:48 2026 GMT
Not After : Apr 18 13:00:48 2026 GMT
Subject: CN=25594ec163924a6a890f2611edd3d0e400ec0499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:8a:52:39:2d:a0:57:3e:a4:8d:60:1b:04:
73:4e:5a:26:ed:ea:9a:e8:bf:6f:23:da:46:63:6e:
ee:c6:52:40:e9:25:4e:9f:5f:4d:99:9a:01:3a:1e:
86:96:af:44:0e:d2:ae:b1:72:1c:2c:d6:6e:d9:fc:
e3:2b:1a:c1:51:5c:9f:b6:d8:c1:63:73:49:08:44:
d8:e7:48:12:58:1a:32:94:5e:b7:93:4c:fa:78:7f:
8f:ee:ba:fc:4c:e9:db:3a:81:68:e2:1e:14:08:a6:
71:ac:f4:55:cf:39:04:35:53:32:82:17:c6:67:4b:
8b:4b:50:7e:e5:6f:ae:6a:87:48:02:d0:05:e6:77:
84:4b:06:ba:28:b2:2a:1f:c4:bb:b4:bf:17:b0:4b:
30:aa:13:82:7a:ce:d6:fd:75:ea:ef:95:3b:bf:59:
d1:47:51:bf:30:6b:ba:b8:04:b7:d1:d2:cd:e3:c0:
49:db:d0:a0:b3:e4:5e:f7:0f:38:5c:08:79:91:82:
5a:3c:0a:a4:c9:bb:5a:68:59:01:d7:07:76:25:44:
76:c9:80:b0:6d:c7:ad:af:72:19:44:1f:21:0b:c6:
d2:64:9d:8a:8c:2f:48:a1:86:0b:86:42:88:54:27:
b0:66:6a:6f:0f:4f:8f:8a:0b:2c:a4:a3:93:fd:46:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:59:4E:C1:63:92:4A:6A:89:0F:26:11:ED:D3:D0:E4:00:EC:04:99
X509v3 Authority Key Identifier:
keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fb:67:c4:90:3a:4a:00:b1:e7:3e:48:11:7e:39:a4:63:37:
c0:a5:d9:a0:01:bb:c4:7e:ed:72:aa:a6:1f:43:c4:b9:2c:e4:
6f:c4:8b:53:36:2d:53:28:d0:15:1f:27:59:df:af:8d:4f:10:
0b:03:60:10:c8:43:60:8a:39:84:6f:bf:3e:53:75:57:fd:82:
cd:fa:1d:98:86:0a:db:d7:03:eb:5e:ff:a3:05:e4:46:e8:7b:
c8:14:e1:5d:53:1e:24:a7:14:6a:e7:4d:07:d6:d3:7e:de:5c:
d0:e5:35:45:3a:b5:19:c0:75:75:b8:87:54:10:f1:e1:94:9b:
0a:5f:b0:8a:ee:b1:08:8f:e7:ec:bb:ed:20:c2:08:44:4d:78:
0c:90:a6:a9:97:4f:fb:df:13:e5:06:f3:92:88:0d:2c:f4:b0:
f5:c9:2a:91:75:33:01:a3:7c:3b:b7:98:a3:66:8a:6e:2b:fc:
b3:1c:a0:65:26:f5:44:a1:91:73:8f:c8:98:5a:6b:bb:6d:2b:
25:8b:06:9b:f1:51:58:bf:14:46:d2:d3:56:14:3a:f3:29:1f:
30:fd:db:32:a4:04:ec:6a:65:97:d6:c7:59:8c:49:f2:fd:09:
96:96:4d:dd:71:d2:00:26:9d:76:a0:19:65:3e:f5:79:d5:fe:
e0:03:c0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:29:29 2026 by rpki-client