Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
File: zaiOm3q14yGxs_lXqboZdt1CW8M.mft (raw, json)
Hash identifier: kK4beYlIbc1H0DgzvUn1Y3BR9MHM725Kx7TYcZgY7WA=
Subject key identifier: 1F:66:1B:33:CB:3D:FA:63:F0:AE:EB:0C:B7:72:28:B7:E0:90:AE:88
Authority key identifier: CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
Certificate issuer: /CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Certificate serial: 019D99D0A39FE9C2CC11921CCF524AAB82F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
Manifest number: 062D
Signing time: Fri 17 Apr 2026 05:01:20 +0000
Manifest this update: Fri 17 Apr 2026 05:01:20 +0000
Manifest next update: Sat 18 Apr 2026 05:01:20 +0000
Files and hashes: 1: iPcjCWb0-4ZbIqsq4siteUaH3Yo.roa (hash: JNPz+DPVRJ+TisUyQ98oWlbI8xfnbWF+8FcFXp7EsvY=)
2: zaiOm3q14yGxs_lXqboZdt1CW8M.crl (hash: /1IwelO5S+ByOJfR1krk6zRhIMn0CT0AnRC3P27CQaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a3:9f:e9:c2:cc:11:92:1c:cf:52:4a:ab:82:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Validity
Not Before: Apr 17 05:01:20 2026 GMT
Not After : Apr 18 05:01:20 2026 GMT
Subject: CN=1f661b33cb3dfa63f0aeeb0cb77228b7e090ae88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:87:30:e9:c1:45:9e:53:19:4c:34:02:47:b9:
7d:5b:d1:d8:e3:cd:92:46:0b:31:21:7e:34:62:e0:
2f:59:6a:96:da:12:ec:79:66:63:99:64:d6:6b:23:
26:60:5f:1c:67:ab:6d:cd:d7:f5:9f:50:72:f8:68:
f1:96:8f:14:c1:ab:f2:e8:ca:a5:58:21:31:f6:ff:
2f:a7:0b:7e:46:90:7f:96:58:b6:76:7f:09:9a:50:
d3:00:9c:82:35:74:1b:28:ec:6e:c4:20:44:51:75:
71:0a:1e:54:f2:84:93:10:b9:1e:57:25:5c:a3:2b:
9c:c1:b7:20:b8:87:c5:84:d4:97:6a:ab:c4:30:1f:
bc:f4:8d:c9:ea:7e:4b:13:08:31:63:a2:1f:eb:59:
f2:da:bc:4d:21:5b:cc:b1:0f:7a:4f:81:7e:42:16:
3d:79:25:ab:1a:3a:a1:e1:f6:cf:c4:89:48:a6:c4:
01:48:26:ef:98:a6:8a:d2:02:ec:54:ec:2b:71:e7:
89:76:89:dc:01:a1:11:e1:9e:c2:cf:7d:2d:71:47:
13:b5:dd:a0:bf:90:28:a6:9c:78:a2:d6:02:83:d3:
86:59:b1:ba:3a:76:ce:d5:eb:57:a8:ab:2c:e3:2b:
e2:fe:92:6d:ef:ad:75:82:b4:62:53:b0:b3:58:46:
cf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:66:1B:33:CB:3D:FA:63:F0:AE:EB:0C:B7:72:28:B7:E0:90:AE:88
X509v3 Authority Key Identifier:
keyid:CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:89:f0:48:01:97:be:a5:8c:b4:e1:37:78:4a:fa:97:dc:23:
8e:22:ba:39:45:50:48:02:95:04:74:3e:4f:b4:83:2f:2f:7b:
bd:e4:86:fe:7e:52:80:ea:1c:9d:93:58:90:07:69:e0:24:a7:
4b:71:eb:21:d6:b0:37:52:15:36:09:52:cf:11:39:80:d0:dc:
14:55:b8:64:63:73:49:db:04:33:ed:fa:8d:2f:50:bd:06:40:
05:d6:88:fa:67:bc:82:94:5c:3b:13:6a:98:6c:d5:19:68:73:
8d:31:b1:59:f3:2b:6d:2f:e3:1e:1b:64:a3:e3:56:52:eb:d0:
c7:81:96:f7:98:09:2b:4c:2b:b0:9f:54:8b:eb:ce:c7:46:ec:
33:15:2f:6f:b7:ea:0c:34:b7:ac:a1:7d:c3:e4:7c:a1:10:cb:
a2:bc:c4:99:33:2d:4e:31:ae:42:71:8e:36:ca:41:12:23:94:
b3:b9:a3:60:db:a8:f3:c4:fd:f4:27:7c:ff:e4:45:53:f7:36:
2b:f3:96:f1:0c:d1:1c:7b:ce:71:b3:14:72:4c:58:f6:81:85:
e4:63:2a:89:cd:44:54:ec:24:b1:14:ab:36:7c:3c:ca:39:a3:
47:eb:92:5f:93:11:2e:3b:c2:46:3e:f3:e2:fd:a0:fc:8b:d2:
c5:2d:38:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:44 2026 by rpki-client