Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: Plj5793Cv8uV3SkzL3PSiRd3n720zg5/AmkARhEm8i8=
Subject key identifier: B9:4C:26:9F:8B:24:EA:34:0C:C7:A3:B5:8C:D2:6B:0F:E8:67:28:3B
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 019D99CFE669F736DE1FBEDED7CB6D00E4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 15C2
Signing time: Fri 17 Apr 2026 05:00:32 +0000
Manifest this update: Fri 17 Apr 2026 05:00:32 +0000
Manifest next update: Sat 18 Apr 2026 05:00:32 +0000
Files and hashes: 1: VxWfHatZSPjNCGQb391xfXyxZ3U.roa (hash: k4qh49pNo2b+6Z7ZcEp1/eu5zGES0cIQ64LIQKZCaxU=)
2: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: 8SxyS30aP4Z2JvEzFlskgoEOC5RYLfLW3nBSGDXevo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:e6:69:f7:36:de:1f:be:de:d7:cb:6d:00:e4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Apr 17 05:00:32 2026 GMT
Not After : Apr 18 05:00:32 2026 GMT
Subject: CN=b94c269f8b24ea340cc7a3b58cd26b0fe867283b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:ba:08:95:ee:1b:f9:12:4d:45:40:f0:70:
17:e7:65:25:e7:fe:aa:dc:c0:04:8b:2f:ef:85:d3:
d7:cd:0b:be:e1:69:13:f3:33:74:e0:44:5f:de:13:
2d:40:cd:c8:81:bd:dd:04:cd:44:5f:81:73:c0:8e:
7b:e4:ed:ca:a0:2f:10:34:db:ce:00:9a:f5:c6:dc:
32:7f:5d:0d:66:89:ac:95:d6:21:f6:2b:22:f0:f6:
70:f3:b5:b8:a2:c4:d0:41:ad:6f:27:48:6b:c0:1c:
1c:5c:43:cf:d0:3b:6a:ed:57:dd:f9:9a:e1:e1:14:
54:04:6f:47:6e:07:91:48:3a:1f:0d:e3:8d:09:ca:
de:4e:f9:f9:04:0c:22:1c:a9:4a:79:81:39:73:7c:
ea:7b:df:e2:ce:71:15:a5:1a:63:a0:b9:c3:a6:8b:
23:7e:b1:42:4a:97:0d:ac:1c:d2:d9:79:28:f6:6f:
a0:8a:85:0d:f6:3a:4c:d6:95:0e:66:a8:db:49:c9:
52:a3:46:20:f4:f4:34:ff:b4:dd:db:0d:d9:fc:28:
d4:54:49:84:f6:ed:4b:f8:e6:dc:bf:7d:71:f9:5e:
0d:c1:ec:dc:72:22:38:29:ed:b5:f4:e3:f2:dc:a6:
69:69:c0:c2:c0:2e:4f:e1:4e:4f:07:c4:fd:7e:e7:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4C:26:9F:8B:24:EA:34:0C:C7:A3:B5:8C:D2:6B:0F:E8:67:28:3B
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:47:74:81:70:ac:e5:95:0b:7b:fd:ba:db:5f:a5:a8:b6:d9:
74:ae:64:43:bf:80:79:0d:d2:59:81:6a:8a:c2:02:a5:2b:9f:
1d:1b:e0:88:60:5d:cf:f4:3d:36:5f:cf:d4:20:da:76:e3:d8:
7c:89:d5:7a:c9:fc:dc:01:c6:c3:f2:73:55:5a:ac:4c:e8:49:
74:e8:cc:62:a6:1d:aa:2d:bf:2f:33:1b:43:23:9d:f8:e1:b0:
37:a7:69:70:88:4e:28:a1:ca:b9:ab:1e:f7:de:75:0a:b7:96:
bc:a7:30:04:5a:ec:50:be:43:c6:68:bb:72:c3:94:2b:dd:42:
b4:6c:65:ee:16:22:30:41:b7:50:81:b5:35:e2:3d:e3:c7:ca:
ea:f2:0a:86:31:59:18:88:1f:90:66:36:1a:e8:29:2b:80:90:
2b:01:90:a4:3d:4a:59:c7:39:8b:29:cb:1a:60:a8:29:b5:b0:
d9:f5:64:cb:97:8d:06:16:2d:c9:45:11:61:a0:5f:93:78:ee:
16:04:13:5e:97:77:dd:04:3f:31:da:3b:53:59:e0:fd:10:70:
9d:12:45:4e:f3:fd:07:e7:48:78:31:8a:87:96:91:fd:7d:eb:
b8:4c:25:d4:89:13:f8:e2:a9:5e:11:92:6d:99:f0:98:54:bb:
e7:20:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:10 2026 by rpki-client