Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
File: zR5W5MTEpRjyOIpay1rwRSzCpZU.mft (raw, json)
Hash identifier: No0w84Z1NY47ZMwG39bsaZ/wmwbyaAj+932RYcro7gY=
Subject key identifier: 8A:E9:56:84:CC:50:EF:A7:92:9A:5D:F3:BC:BC:B2:A4:85:04:BB:82
Authority key identifier: CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
Certificate issuer: /CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Certificate serial: 019D9BBE6A2388CF9F6E2B9D51566F11ACE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
Manifest number: 108B
Signing time: Fri 17 Apr 2026 14:00:40 +0000
Manifest this update: Fri 17 Apr 2026 14:00:40 +0000
Manifest next update: Sat 18 Apr 2026 14:00:40 +0000
Files and hashes: 1: mksXPvzfs0a6_2GYuOBUxDiXzU8.roa (hash: MCOyKzIAtyadIzF2fgEZDjYZ2qaVt54CQCVZbXjLi+0=)
2: zR5W5MTEpRjyOIpay1rwRSzCpZU.crl (hash: yZYvjmFmFewiGQfjnI4V2W48BccXlCtslS6vIxO3ImU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:6a:23:88:cf:9f:6e:2b:9d:51:56:6f:11:ac:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Validity
Not Before: Apr 17 14:00:40 2026 GMT
Not After : Apr 18 14:00:40 2026 GMT
Subject: CN=8ae95684cc50efa7929a5df3bcbcb2a48504bb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:77:7e:2b:4c:9e:77:28:6a:7d:ac:87:b6:c7:
c2:94:f2:c2:59:b5:7e:b6:d5:23:3c:b0:08:c5:7c:
0c:dd:bd:8a:f2:df:19:45:c4:80:bb:ee:eb:ce:f3:
5e:03:74:36:98:68:fc:e3:3c:f8:73:e5:da:00:c0:
d8:c6:34:90:f1:43:ee:7e:d5:70:01:7d:6c:d2:49:
ff:a5:3e:41:e8:df:6e:ca:e4:7e:19:ea:d1:1a:80:
85:10:7f:bc:65:e9:16:18:2d:f6:65:e7:05:fc:d1:
01:cc:ca:a5:a1:a7:ff:98:06:0b:7c:bd:f4:bb:4b:
a0:b9:db:7c:fc:b4:c2:63:be:24:6b:e8:12:cd:85:
70:29:c9:a8:ab:fe:26:04:e9:8e:31:05:60:8f:bc:
32:6f:3e:33:00:62:82:11:43:50:81:53:49:fc:01:
c7:3f:98:12:2c:0b:ca:9e:49:f7:54:33:20:63:11:
f3:67:05:eb:c3:6e:ff:91:1a:2f:f4:31:0b:10:f0:
70:79:95:f5:2f:a8:af:aa:fa:4e:af:0d:3a:9f:5a:
1f:86:97:52:dc:44:b8:81:0c:5c:a9:af:0a:a3:a2:
66:89:9c:a0:d9:fd:af:6c:96:d4:a9:05:d2:61:8a:
d1:0c:ec:69:c1:52:e9:4a:ee:58:93:00:27:5a:de:
50:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:56:84:CC:50:EF:A7:92:9A:5D:F3:BC:BC:B2:A4:85:04:BB:82
X509v3 Authority Key Identifier:
keyid:CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fe:fb:5b:0f:59:4a:06:0b:31:77:a4:04:1e:aa:7f:cd:c3:
92:1d:f0:c0:4f:6c:c3:d7:a1:24:70:91:83:48:5a:cc:63:5c:
40:a1:8e:b7:a6:82:7e:fc:f2:c6:e6:5f:7f:50:e9:12:c3:53:
ac:fe:08:a0:42:cd:3f:eb:7d:1d:f2:ab:82:24:12:4c:b3:e3:
6a:4f:a0:f8:52:63:aa:b8:11:ee:6c:3d:58:ce:a2:fa:dd:f8:
99:5b:6e:b1:1d:f1:a5:18:dd:34:4b:11:bc:79:2e:6f:76:96:
5a:e2:c9:3c:f6:7a:dd:c6:d4:38:5c:fa:eb:c7:01:7e:12:8f:
1e:b4:b9:d9:cc:28:7d:87:68:0a:67:57:5f:e6:b9:c2:be:13:
c8:e4:a0:9a:f0:c7:87:ee:83:4a:9b:6c:49:81:4d:c9:8d:37:
19:f9:73:38:b2:d3:24:19:af:25:ec:fd:77:2a:9c:b5:9f:40:
36:26:34:c1:3e:0f:c9:67:ea:79:52:3f:2b:1b:80:c8:71:3e:
c5:0f:73:d5:ba:aa:24:b3:88:20:32:55:06:d6:4b:d4:87:43:
cf:ca:ed:12:ac:ba:51:bf:7b:5c:0b:37:8f:8c:d0:a2:b2:86:
fa:58:48:9d:0b:6f:1e:6e:c4:72:f6:48:7f:06:65:61:26:9a:
26:40:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:16 2026 by rpki-client