Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier: DclGKKf1iyJa+cvXDGN1nu50mQ403fmFqeFxac8Sp40=
Subject key identifier: CA:00:F5:CA:B7:09:AF:4E:8E:9A:8B:77:F3:5D:21:E4:B4:E0:E2:55
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 019DA3E5CEBE76E75C12DB464655CAE5FAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number: 0DCE
Signing time: Sun 19 Apr 2026 04:00:40 +0000
Manifest this update: Sun 19 Apr 2026 04:00:40 +0000
Manifest next update: Mon 20 Apr 2026 04:00:40 +0000
Files and hashes: 1: 8a76FAqMjieN7aLSC8xEAc3hgOU.roa (hash: pAPcnCH+A+mHZKWJuKSuBMT8TzG5YvvwYe+EaHI/zYI=)
2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: jXBh9h0r03PvdC7ljgcOezx0XErEVvNzG3g+FrA1kCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:ce:be:76:e7:5c:12:db:46:46:55:ca:e5:fa:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Apr 19 04:00:40 2026 GMT
Not After : Apr 20 04:00:40 2026 GMT
Subject: CN=ca00f5cab709af4e8e9a8b77f35d21e4b4e0e255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:6b:70:04:cc:94:f0:35:bb:9c:9e:07:20:
86:fa:09:c9:c0:da:21:3a:64:f2:d3:63:74:60:f8:
d8:7b:10:ba:d2:ac:ea:2d:ca:98:f0:7b:b3:39:cc:
e2:93:c1:e4:8a:31:27:c8:37:19:b8:21:c6:43:53:
e3:0c:18:fe:98:76:dd:3b:af:d1:48:1f:c9:cc:e7:
42:a0:0b:87:a9:da:73:c1:a5:08:aa:4d:28:11:7e:
4b:ac:25:13:87:2a:c4:a5:c6:42:b7:87:4d:ba:8b:
aa:f4:a7:3d:a2:0d:4d:9c:20:55:82:d5:15:59:4d:
a2:a6:7f:c4:b9:67:95:ff:c7:5d:5d:6b:9d:1e:ba:
25:7c:1f:c5:df:3e:0c:bd:44:81:f8:79:6a:b2:43:
6c:28:97:8c:89:76:90:5d:ac:34:95:1d:43:dd:fc:
5b:ef:f7:50:b4:73:97:e4:ce:23:06:91:37:39:37:
7a:2c:1f:0a:9a:87:a3:f8:6b:32:49:da:cf:f3:58:
d2:92:85:3a:4f:1f:4b:c6:33:de:5c:96:31:ec:2e:
4f:f3:2f:57:88:e7:06:2e:54:60:fb:86:69:bf:6d:
af:70:59:05:f9:55:18:75:fe:d4:3b:b7:e0:c7:72:
69:4a:2b:82:35:b6:f5:8a:c8:9c:04:2b:38:11:88:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:00:F5:CA:B7:09:AF:4E:8E:9A:8B:77:F3:5D:21:E4:B4:E0:E2:55
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5f:10:7b:a6:21:eb:b7:9c:31:23:30:7f:a3:1c:83:d6:0a:
77:c7:10:36:8e:51:02:ee:93:2c:cb:4f:41:cb:db:4c:e8:26:
a4:a9:04:67:03:bb:39:c3:4e:07:a3:fd:f9:d4:86:21:eb:36:
49:95:54:3e:b8:f8:a2:b7:c8:ff:10:ce:ae:21:bb:3c:56:be:
85:11:b4:d6:2b:e0:4a:23:90:d3:26:5a:e6:d1:d0:a5:e1:c9:
23:27:87:c7:4d:40:65:aa:d7:db:8d:68:db:42:ce:94:6d:01:
bf:b0:c0:c7:54:1e:89:44:d5:fc:bf:f6:24:1d:66:4b:d8:6d:
6a:11:87:17:25:79:a2:b9:38:26:66:65:bc:96:ad:8c:71:a3:
95:8d:f1:ed:8c:a9:f0:c6:b0:c2:73:2e:5a:0f:c8:90:f1:33:
03:b4:38:14:e0:f5:44:98:77:49:67:99:e4:80:1c:f0:5a:2e:
a8:56:c1:fc:f1:7b:48:da:44:c7:08:39:80:fc:ac:bf:ba:ec:
e0:20:49:d6:f4:81:13:26:f2:18:3a:98:1f:b6:f2:99:5d:da:
07:75:e6:88:68:f9:33:90:ed:f7:95:49:76:1d:85:01:b3:0c:
02:3f:73:c9:f0:95:d7:62:5f:30:9f:31:fb:4c:fc:d2:20:c5:
da:cd:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:43:18 2026 by rpki-client