Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: GClw5DO+8YUglT3MndWh0kjLnK7fUhXUUwNCNDdsCI0=
Subject key identifier: C6:E9:F7:48:D7:C6:D7:23:D2:36:ED:7A:71:BB:4D:B1:79:B2:39:46
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 019D9D7653A32A669AE150260366EAD86241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 0426
Signing time: Fri 17 Apr 2026 22:01:10 +0000
Manifest this update: Fri 17 Apr 2026 22:01:10 +0000
Manifest next update: Sat 18 Apr 2026 22:01:10 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: DEOePgA9u59oUAszJubtOudy4Muyk7HfnAwF5XTS++c=)
2: 7jgvwOfbTS9EcboNY_mci-_zFzQ.roa (hash: SGXWMpwVSmLMAKNP+kPKK/+5RwAE6AIl6oVDLelweNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:76:53:a3:2a:66:9a:e1:50:26:03:66:ea:d8:62:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Apr 17 22:01:10 2026 GMT
Not After : Apr 18 22:01:10 2026 GMT
Subject: CN=c6e9f748d7c6d723d236ed7a71bb4db179b23946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:97:39:7b:74:ee:1b:f9:34:84:57:67:4b:27:
8d:cd:c6:ad:8b:26:5c:5d:b9:8d:ee:13:63:67:8a:
b1:de:96:ec:fd:77:29:9a:61:d2:9c:88:8e:82:6b:
af:d1:56:24:00:c9:54:92:08:cd:26:d6:ca:5e:e5:
79:0d:b6:b2:33:03:d4:d2:d3:a6:4b:39:37:18:86:
c1:f8:48:b7:f7:61:28:e2:64:a2:63:7c:ee:7e:b2:
81:c2:f2:6c:3c:3a:d8:18:cf:f4:47:a9:45:31:f7:
c8:23:8e:f5:ee:35:43:b2:7d:52:4c:5b:22:75:0e:
38:df:99:db:53:e9:63:cd:92:f1:ce:47:31:0e:31:
c7:51:5d:18:29:ff:8e:ca:84:ab:a2:d5:c6:f9:0c:
b6:04:74:5e:6e:43:04:fa:1d:95:18:27:e6:18:ec:
be:19:92:9e:db:6f:c9:91:30:f3:c6:7f:4a:24:6d:
97:ba:bd:52:40:e4:9b:2c:26:47:ed:89:09:df:09:
bd:d9:0b:00:bb:f6:cb:75:54:ab:b5:70:25:26:e1:
e9:18:58:e0:f6:e1:2c:18:e9:49:11:84:3f:ad:bf:
22:93:7f:12:92:b1:54:1e:90:ef:0f:06:38:7f:d9:
6e:e2:06:ca:41:8f:1a:eb:5d:08:f5:0b:8c:b8:4d:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E9:F7:48:D7:C6:D7:23:D2:36:ED:7A:71:BB:4D:B1:79:B2:39:46
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f2:22:74:b8:1b:93:95:f5:81:83:9a:6e:a7:ed:c2:c0:ee:
a6:48:ce:bd:b4:35:e7:5c:ea:f8:31:3a:5e:52:70:f6:d3:95:
cf:08:34:b4:b4:04:d2:14:3e:8c:1c:60:54:68:9b:94:99:c7:
8d:35:d7:b3:d4:5f:46:d7:11:cb:a7:fa:67:78:ee:38:65:e0:
7c:c4:ab:58:90:66:09:90:0e:08:21:2c:2c:e8:71:6c:d9:b1:
da:fa:0a:9d:e3:4c:dc:74:fa:b3:25:b4:e1:f8:29:7c:64:ca:
b7:e0:87:6e:1a:60:58:e8:65:aa:e7:95:3f:a6:3a:70:5f:88:
76:11:8d:5f:ff:3a:ba:9b:1b:9c:4c:cc:d5:a3:e9:db:a2:10:
18:1d:40:f2:94:c6:be:1e:02:fa:03:f1:9f:4f:40:20:28:a1:
70:6a:90:33:09:56:bf:af:3f:a2:e0:55:cf:cb:25:6b:00:54:
ae:4f:a1:c1:12:8c:02:6d:95:a6:ca:14:73:a6:ab:19:3f:8e:
3b:1d:98:11:29:c4:3c:07:54:33:cd:c0:8a:b5:f0:ac:8f:39:
04:7e:30:50:a6:ff:87:e7:5c:91:9e:58:68:d5:26:15:42:e2:
f1:52:ff:32:fa:6f:74:a0:86:87:9b:72:56:1f:54:e2:f7:2a:
46:27:40:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:40:41 2026 by rpki-client