Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File: zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier: dbCAEpF/CKq7zgEtff8mhdmDhE2j9EEVFltG1kFK6h4=
Subject key identifier: 13:E8:6F:6A:AD:BD:D2:B5:D1:52:8D:11:D7:68:3C:85:33:E9:BD:98
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 019D9B19DD373F24EB1BF5FC8C3E17B6193B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number: 11BE
Signing time: Fri 17 Apr 2026 11:00:56 +0000
Manifest this update: Fri 17 Apr 2026 11:00:56 +0000
Manifest next update: Sat 18 Apr 2026 11:00:56 +0000
Files and hashes: 1: 1-xP6wGH4E4j9NJ-NB2QfLldx1Lw.roa (hash: uFFlZsAMKLJKDEktW5ybjbZi8RHcBaE5UQZ62izVnr4=)
2: G9U4X93rXqstWDjqCmr74O0MOOc.roa (hash: lHIU6yFEQWHJAGlwWMO/pP3VoRev0tS4Byvjv7Nl/Nk=)
3: SV_A5OMf5Dv_YVGf3i03i121qDE.roa (hash: Yx1VNJorHPI+3bEwTwwZMtNZ1vpLF6jyHjPFF9j0vFs=)
4: u0VefA4FNPAM3OaDOe1uGO8G7GM.roa (hash: L/EGbgrpKOwV4dXB0O77kAg3sNSvZROrNTY/PmdUGpM=)
5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: gHJEndcTayqwZV0TATXWEJtG074bMdUUWupydS7E4Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:dd:37:3f:24:eb:1b:f5:fc:8c:3e:17:b6:19:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: Apr 17 11:00:56 2026 GMT
Not After : Apr 18 11:00:56 2026 GMT
Subject: CN=13e86f6aadbdd2b5d1528d11d7683c8533e9bd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:96:75:9b:b3:53:7d:bc:4d:fc:0d:84:d5:
1e:d8:27:0b:df:b7:9f:4b:26:ec:83:2d:c2:14:63:
bc:2d:a9:4a:95:59:96:20:7f:f0:f4:8e:a1:04:42:
e9:2e:03:31:01:e6:f1:f1:35:36:a8:0d:5e:9c:fe:
0e:dc:3f:ca:9f:fd:03:a4:9a:3b:fb:4a:bd:91:03:
22:76:70:03:1e:f4:c8:6f:d5:ee:04:09:f2:6c:94:
b6:f3:e6:f0:17:b6:73:27:7c:6c:c9:28:e7:f7:95:
ac:40:bb:30:fc:ec:33:0e:8f:ff:0e:60:31:b8:3a:
c0:64:5d:a6:4c:a4:3c:55:2e:d3:de:9f:1a:e0:c1:
0c:f9:4e:b0:b7:c6:76:3b:69:6d:c2:18:b1:8b:5c:
91:20:3a:c6:48:bd:42:d3:33:fa:57:a2:6a:b8:09:
62:56:b0:c7:58:10:29:40:2d:f0:ae:23:cb:cd:ea:
d2:6e:3b:46:95:91:5c:c7:95:ee:b7:21:1d:62:7b:
7d:08:c9:21:85:5d:63:d3:05:8f:3d:71:e8:98:ab:
12:62:2e:5e:f6:99:11:be:9b:81:32:90:7b:9a:56:
1d:36:3c:b4:6a:d8:18:76:1d:45:6b:29:d6:d8:0e:
ed:82:be:96:20:da:a8:db:63:c0:7e:4f:48:01:7d:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E8:6F:6A:AD:BD:D2:B5:D1:52:8D:11:D7:68:3C:85:33:E9:BD:98
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bd:b8:0c:ad:a0:85:dd:1c:1d:19:53:eb:d3:e6:85:77:24:
d2:b7:70:fb:57:00:89:ec:93:c8:45:93:3c:de:d7:e1:e9:ac:
4e:96:d2:9f:9e:d0:47:1f:ac:00:d4:14:3c:56:63:05:13:49:
40:18:7b:19:e2:26:a1:cd:d9:05:0f:00:39:1b:92:60:30:ca:
14:68:d5:82:60:db:1e:b8:c3:af:cf:3a:e4:13:eb:25:e4:8e:
f5:62:9f:c9:8d:93:12:b5:42:19:83:00:9c:70:6b:ab:2f:af:
ea:04:22:66:13:31:af:b6:d2:b6:3c:e3:bf:72:35:10:13:35:
6b:d5:8f:cf:55:1f:b9:61:cb:73:6c:ea:a2:d1:23:f7:ad:60:
61:d1:2b:70:c2:2b:4e:d4:6b:2a:e4:c6:e9:fe:d3:f3:7b:2a:
bc:e8:71:13:e4:47:e1:6b:9d:32:6a:c9:97:cf:3b:6d:d3:cd:
87:78:2e:53:71:d0:63:33:c8:49:8d:17:24:57:9a:4b:33:4a:
dd:0e:8b:47:b8:6e:6a:94:11:30:3c:b8:51:30:b3:81:56:1c:
1e:3e:7e:d0:01:2e:00:c1:68:c6:9d:78:d1:5c:25:3d:17:9d:
72:18:ff:e6:55:5f:56:22:a1:15:10:9b:a3:a0:af:22:a9:36:
ab:15:ba:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:59 2026 by rpki-client