Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
File: Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft (raw, json)
Hash identifier: I3WNkrmuk3+OHZ6Koj+UYLNwBs0BGBT3VThfff8DBXg=
Subject key identifier: 24:23:E5:EA:A6:2F:30:25:92:43:62:03:DA:CE:11:35:9F:A5:E5:1A
Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
Certificate issuer: /CN=6798580bb843519c104420e59c0b5c2403414607
Certificate serial: 019D9B508DBC93D8730AF703B8D51DB2202A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
Manifest number: 0F00
Signing time: Fri 17 Apr 2026 12:00:40 +0000
Manifest this update: Fri 17 Apr 2026 12:00:40 +0000
Manifest next update: Sat 18 Apr 2026 12:00:40 +0000
Files and hashes: 1: 3oNBPDxqPmEzCAgvOd6HFjME9OM.roa (hash: oEX/gxqcuspBR3wSJHEr/VS6QW0PNYcAWyELJ7EqCc0=)
2: Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl (hash: 2su16nq9dGT7sNjpqKEreRz9xDqhG6610qhQVybT5mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:8d:bc:93:d8:73:0a:f7:03:b8:d5:1d:b2:20:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6798580bb843519c104420e59c0b5c2403414607
Validity
Not Before: Apr 17 12:00:40 2026 GMT
Not After : Apr 18 12:00:40 2026 GMT
Subject: CN=2423e5eaa62f302592436203dace11359fa5e51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:6b:d2:7d:1f:8a:3b:12:33:0c:1f:0c:c3:
80:6e:ee:cc:9a:b4:b1:09:ac:85:bf:2e:83:0f:cf:
07:82:4c:39:6f:d1:9c:41:ab:80:41:9d:fc:67:19:
bd:89:4c:d2:db:bf:33:c8:29:d6:22:cf:02:c6:8c:
96:7c:43:28:10:a2:9b:1f:63:dc:ac:08:2e:41:81:
99:6b:67:0f:b0:c3:ac:2e:f3:cb:3c:54:be:6d:3c:
c3:a4:49:37:37:b0:ab:50:90:b6:04:45:19:db:3c:
8c:22:2c:00:1a:8a:d3:69:a8:54:f6:6d:58:3c:af:
41:1d:c0:eb:08:04:11:e8:6c:c3:05:a0:38:02:77:
33:d7:f8:5b:58:d4:e2:c6:63:93:8f:3d:02:a4:ac:
2e:9d:2e:9d:d1:d4:1b:be:19:b9:61:cb:fa:3a:85:
cd:b8:38:c6:e1:d6:ad:0f:d2:e9:75:21:11:c9:41:
fa:ce:37:4e:65:74:10:73:a3:dc:c8:ab:2e:e8:a1:
9d:4f:ad:92:d5:56:04:8d:3b:ca:d3:5c:29:5c:f7:
70:07:10:ef:52:be:08:c1:32:aa:d9:15:39:2c:cd:
05:09:2a:26:79:01:1f:f0:e7:9e:c4:6c:b9:c2:20:
04:1d:01:30:87:85:9f:26:3a:0f:e1:c0:56:82:3a:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:23:E5:EA:A6:2F:30:25:92:43:62:03:DA:CE:11:35:9F:A5:E5:1A
X509v3 Authority Key Identifier:
keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9d:71:f6:ef:23:9e:36:04:82:2e:a5:17:f7:1c:ee:a6:83:
f9:6e:9f:01:cc:b3:da:38:68:97:b5:11:96:29:cc:c2:6b:30:
ae:e9:0b:16:0c:71:de:07:b8:9e:48:c0:23:99:98:63:03:a1:
db:6b:fa:96:10:db:98:4e:b9:16:16:a7:7f:1e:83:48:04:2c:
b9:56:6d:38:d9:bd:a7:1c:37:11:58:11:63:6a:f6:5e:a6:16:
34:4b:8c:fd:f7:80:aa:15:b6:0d:55:c4:85:46:0e:bc:f8:31:
ed:53:67:76:d6:c8:b7:2a:46:12:5b:5c:9b:bc:c1:2c:44:eb:
4a:d1:b7:2e:0a:d7:03:f5:69:71:39:76:50:af:df:5a:3d:e6:
49:68:05:21:a1:aa:8a:38:9a:38:10:6f:18:a8:65:69:7c:48:
4c:81:76:04:4e:50:53:c8:65:e4:d6:7f:15:5b:01:f9:a3:bc:
43:cf:63:b1:5a:c0:e9:54:34:d3:78:08:4f:30:1f:ef:eb:00:
bd:29:32:99:40:00:47:ce:e8:70:27:69:8c:2f:46:6f:c0:13:
1a:31:1b:25:26:76:83:f5:69:0d:98:b1:60:c9:c3:31:86:15:
59:26:10:92:e1:5b:a4:45:19:88:e7:48:84:4e:29:0e:ac:48:
d3:36:44:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:43 2026 by rpki-client