Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
File: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft (raw, json)
Hash identifier: eC4mSjEdt409b4CGc4hUXtN8gmWhhoN1ytLrgI5CYhc=
Subject key identifier: 38:BA:18:12:61:81:0C:F4:A6:A8:A2:A4:7E:66:9B:E9:1C:FA:93:7E
Authority key identifier: 67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
Certificate issuer: /CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Certificate serial: 019D9998FB5DCE0B06BA85C23B7735886CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
Manifest number: 13E1
Signing time: Fri 17 Apr 2026 04:00:32 +0000
Manifest this update: Fri 17 Apr 2026 04:00:32 +0000
Manifest next update: Sat 18 Apr 2026 04:00:32 +0000
Files and hashes: 1: U6MNXsIiQyUWzfXpW3UnHYUwHkc.roa (hash: jrq3ihzHX+Q926Z95yemtvB18GgOprbk1pa3OArkcrg=)
2: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl (hash: G5J8e38xTO4fRqt5xGloB6Vj0U5TG4vatRkda/XhirE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:fb:5d:ce:0b:06:ba:85:c2:3b:77:35:88:6c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Validity
Not Before: Apr 17 04:00:32 2026 GMT
Not After : Apr 18 04:00:32 2026 GMT
Subject: CN=38ba181261810cf4a6a8a2a47e669be91cfa937e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:bb:41:d6:94:e1:ef:39:5e:b7:15:9c:2d:
5d:a1:2a:5a:22:0c:71:3a:b9:24:06:8b:b3:67:bf:
a8:29:39:2e:09:6e:c3:21:88:3a:2e:51:ba:8f:ff:
8a:fe:d0:df:72:40:6a:25:51:29:a4:bf:c9:c5:2f:
9d:a6:e9:c1:a0:18:79:c4:3a:d9:7f:2f:cc:79:ab:
35:9b:ec:b8:22:d2:3d:fb:8d:29:7f:5f:b1:4c:eb:
71:5b:ae:ed:a9:ec:b2:4a:63:bb:95:7f:9e:d1:83:
a1:4f:93:45:06:c7:c0:f5:20:da:f7:15:9e:9b:af:
f9:a7:a0:89:01:d9:47:c2:1b:a9:68:a1:d7:5b:04:
b3:67:8b:ee:51:f5:ed:6b:87:e3:7c:05:54:b9:5f:
3b:59:ac:d8:1a:47:f3:78:ac:63:f2:d1:bd:98:53:
87:c7:9b:fd:b3:f3:43:7d:b1:c9:2b:b6:94:10:ff:
e2:55:e7:b0:b9:93:ec:7b:5a:7a:7a:d8:d9:17:ec:
3f:5f:48:ef:3f:f0:ce:7a:38:91:48:9e:30:b2:9f:
b9:a5:c1:cd:2f:fa:6d:c8:6c:fd:ea:e5:84:6a:ed:
5d:70:fc:e9:e6:8c:5d:96:e8:4c:31:ae:93:2f:f0:
36:bb:73:7c:bb:53:26:c0:e4:75:4a:b2:c0:65:a9:
03:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BA:18:12:61:81:0C:F4:A6:A8:A2:A4:7E:66:9B:E9:1C:FA:93:7E
X509v3 Authority Key Identifier:
keyid:67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:dc:31:f5:53:a8:e1:f3:73:38:8e:cc:ab:b4:e2:ff:1b:e8:
81:c9:b4:52:14:bc:21:b5:67:2a:24:56:76:f9:4a:41:a0:ed:
e0:bd:58:09:a0:66:30:4e:b7:9d:f5:57:5b:a8:43:f9:29:c3:
c5:80:2d:d6:e4:39:2e:99:4a:13:18:8f:a9:99:00:25:5c:49:
4b:08:7e:51:81:85:8f:73:74:7d:5a:3c:02:4d:fc:f8:9a:d1:
a2:d5:14:ba:ae:7e:4d:7e:36:44:1f:9b:2a:29:db:bb:27:57:
67:c5:4e:8a:4a:8a:1c:89:6c:84:85:78:11:39:d4:8e:f4:5f:
d3:6a:4b:9e:03:6e:74:37:36:d1:9e:72:04:52:bd:1b:31:c0:
a9:ac:ff:f7:3d:79:e5:ca:58:e9:f1:61:61:1f:e0:2e:93:5c:
52:b5:2a:dd:60:b0:e5:41:58:6b:c0:1b:b5:a2:92:d6:81:b4:
cc:b3:8b:3b:14:0c:c5:e9:78:9b:26:d6:e2:41:8c:50:40:4a:
66:f3:0e:3a:6c:2c:c7:00:9f:d9:03:da:e3:21:8a:f1:9b:8e:
ea:94:51:b5:cd:bd:13:66:2e:10:a5:a2:40:12:67:05:e1:f5:
59:b3:46:5c:ff:14:64:a3:d2:6c:bc:f2:e1:71:37:7d:ee:e9:
5f:2b:77:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:55 2026 by rpki-client