Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: Z6ylf/AQWdrq7m4Cesm4il5p6rMe4ZdMRrcrihJyLv8=
Subject key identifier: 90:01:3E:A5:41:95:33:06:89:E8:8E:40:6D:32:18:F1:3C:78:6C:03
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 019D9B87A1EF7416D75A34BE358BF3B333FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 0425
Signing time: Fri 17 Apr 2026 13:00:50 +0000
Manifest this update: Fri 17 Apr 2026 13:00:50 +0000
Manifest next update: Sat 18 Apr 2026 13:00:50 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: jIqbqF744JOu8xO9qFY+mmaFEd9/OocQZM5kdpyx450=)
2: 7jgvwOfbTS9EcboNY_mci-_zFzQ.roa (hash: SGXWMpwVSmLMAKNP+kPKK/+5RwAE6AIl6oVDLelweNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:a1:ef:74:16:d7:5a:34:be:35:8b:f3:b3:33:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Apr 17 13:00:50 2026 GMT
Not After : Apr 18 13:00:50 2026 GMT
Subject: CN=90013ea54195330689e88e406d3218f13c786c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:46:c4:19:97:17:9c:b7:31:cd:62:b9:50:
7a:da:4a:62:80:dd:6e:cf:6d:10:5f:8d:e4:51:88:
60:77:61:cd:3b:13:29:a2:49:12:0e:46:12:65:51:
15:38:ec:d2:d2:62:bb:c4:6e:1a:59:3c:2d:ba:0b:
53:c1:53:9e:bd:6c:f3:44:7e:20:92:47:25:a4:72:
42:98:2e:b3:44:90:40:34:a2:fd:db:51:78:7c:6b:
bc:d2:56:cb:32:b2:73:29:07:fa:54:32:72:92:96:
52:12:f6:de:35:37:98:33:85:8c:66:99:50:44:75:
02:80:c8:b0:2b:73:29:28:83:66:db:7a:f9:87:da:
c9:aa:1e:0c:c7:8e:6c:4e:13:ad:73:f9:17:e9:c8:
d4:3d:8f:56:5f:33:6a:aa:5e:8a:85:98:2b:ef:12:
08:e2:1e:88:f0:c3:6d:00:be:27:9f:d8:4f:b8:d0:
a2:b2:aa:24:45:45:bb:44:57:85:43:01:78:eb:f4:
73:ab:65:75:88:91:14:83:d2:54:86:7d:1d:52:d9:
46:71:12:4c:59:ee:46:ba:c2:3e:6b:e5:24:47:92:
13:47:29:5e:9b:6a:aa:0b:c1:b4:81:d3:33:a6:a1:
09:00:9c:5c:01:8e:13:08:9e:b0:96:9d:03:e5:23:
77:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:01:3E:A5:41:95:33:06:89:E8:8E:40:6D:32:18:F1:3C:78:6C:03
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7b:73:0f:59:90:25:a7:5b:54:77:1f:ce:ec:ad:55:df:ef:
7d:08:d4:99:15:3c:ec:44:e7:17:56:c7:66:eb:b9:b2:03:8b:
de:3f:3a:2e:b5:0d:ae:8a:08:b4:b3:c0:31:35:1b:c7:c0:48:
3a:2e:8d:f8:81:f0:18:c7:51:90:d6:0f:cf:79:d8:92:fa:35:
b3:a7:c3:00:c4:24:3c:9b:bf:8e:bd:66:0f:1d:ec:9a:e6:9d:
f9:a8:4a:bd:79:ae:06:66:07:b8:f3:61:46:6e:1c:3c:e9:3c:
22:f5:54:e2:37:83:d0:ad:54:75:20:1c:e3:92:0a:e2:cb:50:
43:4d:02:83:8f:ad:fb:64:43:06:f0:3d:93:58:0d:7b:68:02:
13:ce:a5:49:f0:17:58:2b:96:f8:ff:78:9b:5e:aa:a3:54:35:
fc:b9:d8:c6:2b:59:07:b5:8f:76:f9:9c:85:c7:90:15:99:a8:
2a:14:36:d7:03:08:a2:9a:0b:18:0f:8e:17:73:d8:d9:c6:a0:
48:d7:d2:8f:5b:9c:73:bf:f8:aa:09:69:1b:b1:78:6b:86:90:
86:d9:68:ae:5b:67:53:0f:d1:23:5e:77:31:b8:2c:2d:96:dd:
9e:1b:b7:ac:e8:d5:e9:fd:57:18:d2:2b:c8:a1:db:70:7c:05:
c5:57:47:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:23:56 2026 by rpki-client