Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
File: ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json)
Hash identifier: tyW8V/rv2aLYjgYKqNJ/drl0IsZfFRN/LIsnLYa8ymE=
Subject key identifier: 29:9A:53:63:55:55:BF:B0:02:27:93:3C:D4:0F:27:90:63:A8:00:04
Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173
Certificate serial: 019D9B19E1BDBB22B6E572D6B8FCAD407A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
Manifest number: 1583
Signing time: Fri 17 Apr 2026 11:00:57 +0000
Manifest this update: Fri 17 Apr 2026 11:00:57 +0000
Manifest next update: Sat 18 Apr 2026 11:00:57 +0000
Files and hashes: 1: x9QsQ2MvWpON4kKDHpcRaSQsYcw.roa (hash: 4Sqz3nDe+SLiXa/m3KHMeflziRuyuGIJ470KTQ8nem4=)
2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: FnBhc/J7WoK8lYfAdaw9s/ojvNO13GPTwN293u304R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:e1:bd:bb:22:b6:e5:72:d6:b8:fc:ad:40:7a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce235c504019c504021e0662f70133b7ee733173
Validity
Not Before: Apr 17 11:00:57 2026 GMT
Not After : Apr 18 11:00:57 2026 GMT
Subject: CN=299a53635555bfb00227933cd40f279063a80004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:46:03:2b:4e:d3:28:66:69:fe:56:c1:99:
86:4d:78:a0:cf:bf:19:5c:20:0a:f3:87:a2:e6:07:
d8:81:b8:40:4c:96:9b:c8:93:11:d8:70:83:db:dc:
8d:36:7a:4c:3d:ca:eb:52:23:99:2a:71:54:8f:e6:
e9:35:d1:ee:f8:23:1d:ce:5d:3a:2a:0e:f5:af:3d:
b2:80:90:64:e6:f7:99:0d:10:17:50:8b:14:37:c7:
40:c1:7e:44:fa:11:86:c9:a4:1b:4b:71:f4:57:a5:
19:8f:15:93:82:7b:e6:84:83:eb:02:16:5a:fe:42:
ef:60:85:05:d6:28:df:da:96:a9:55:a1:be:d4:a7:
14:96:77:58:73:b1:5a:4b:cd:04:44:0c:a7:f4:b9:
8e:85:b4:62:6c:bb:c6:57:6d:9f:a6:4c:90:cb:20:
f1:3e:39:d4:25:a1:4a:ab:ab:ca:32:30:82:80:68:
d0:15:6c:52:ac:a3:91:87:cd:8c:c5:9d:ef:e5:5d:
29:c0:cc:77:16:1f:1e:90:bb:9f:0e:3d:60:53:36:
9d:61:4b:85:f9:0e:e0:26:eb:dc:a2:48:99:c2:a2:
9c:13:b0:09:e8:39:b2:2c:41:67:a9:e2:78:b4:f9:
9d:c3:db:22:d1:6b:3e:4f:cf:d9:a1:61:8a:51:1a:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9A:53:63:55:55:BF:B0:02:27:93:3C:D4:0F:27:90:63:A8:00:04
X509v3 Authority Key Identifier:
keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c4:3c:aa:09:03:2b:76:dc:11:aa:61:aa:be:32:18:18:e1:
58:30:0a:ed:93:d8:00:7a:79:01:b8:a6:33:76:69:06:2f:96:
e8:19:80:00:49:19:77:ce:94:37:1d:88:41:91:bd:89:52:d4:
11:22:e9:48:94:37:aa:d2:16:96:b1:8d:70:7b:82:2b:6b:fc:
83:5c:35:73:dc:a8:f5:b6:6c:cd:0a:40:b8:44:cb:6d:5d:8a:
1d:db:1d:7c:1a:49:b2:a0:52:c4:ab:3a:c8:28:fa:b9:08:55:
29:21:33:72:3a:6c:16:17:e5:fd:1c:d4:a1:66:1e:44:c4:6a:
9b:6a:f7:6b:a0:36:f3:cf:91:84:99:9b:ae:19:dc:ab:37:36:
8c:ff:54:ea:59:a2:7d:aa:52:2c:eb:ba:ef:d0:ac:c3:61:c4:
df:ab:69:28:79:81:d3:4e:76:7b:30:e5:ac:40:68:50:4b:1e:
6b:b2:dd:36:6c:3b:11:c1:9c:c1:47:9a:e4:10:d4:11:aa:57:
2f:a3:64:42:cd:e8:76:b2:63:10:ed:3c:ce:04:18:f7:c2:17:
38:a1:bf:b5:fb:0a:3d:0e:51:4b:2e:40:43:e2:ca:a8:61:25:
09:b7:3f:01:4e:00:ee:21:95:dc:d5:51:76:f5:d0:2f:85:eb:
5b:0c:09:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:34:42 2026 by rpki-client