Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
File: Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft (raw, json)
Hash identifier: heHq4D29608YgF/E0Z3qwOhSbVJiciVGtEPgys5de7M=
Subject key identifier: 05:89:FF:83:E4:13:AF:28:A0:5A:D9:35:9D:54:26:26:0A:8C:0B:3E
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Certificate issuer: /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial: 019D99D0A796C9CFB14427CA91BD8A0B796A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
Manifest number: 1896
Signing time: Fri 17 Apr 2026 05:01:21 +0000
Manifest this update: Fri 17 Apr 2026 05:01:21 +0000
Manifest next update: Sat 18 Apr 2026 05:01:21 +0000
Files and hashes: 1: HymtY1xBPTqgspy2R9WlDjTq7C0.roa (hash: otzuSUG5+mHBacjIwL+bRGVnp2sGdruALqEv8ZrCUdQ=)
2: Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl (hash: xOYgqyoawzJ9nkMC4566d3dbaZzkTzwpiEuQ+mnWlac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a7:96:c9:cf:b1:44:27:ca:91:bd:8a:0b:79:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Validity
Not Before: Apr 17 05:01:21 2026 GMT
Not After : Apr 18 05:01:21 2026 GMT
Subject: CN=0589ff83e413af28a05ad9359d5426260a8c0b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3b:b7:0c:20:d5:09:16:a1:9e:37:30:d7:f8:
eb:86:f5:34:76:02:a3:88:79:ce:57:d5:8e:5c:33:
07:e1:03:16:d2:69:d5:d3:f6:ed:80:53:61:00:ef:
80:63:4a:b3:e4:49:c2:6c:e8:59:e4:1c:86:14:ee:
57:ef:f3:84:b0:c0:8e:8b:35:73:95:2d:c8:8c:a4:
ed:b3:11:8d:42:6a:ef:e5:cd:67:ef:7c:90:0e:9a:
79:2f:ff:00:c6:28:54:ab:01:fe:2c:27:0d:1f:de:
42:6b:c3:a2:63:09:b7:d0:b0:3e:6b:bf:ea:6c:8e:
c1:28:6f:14:eb:ef:84:0e:1b:a8:4f:20:49:af:b7:
ca:c0:cd:1f:5e:7b:2e:8e:8c:17:22:1c:57:a9:d0:
5d:8d:02:9b:e3:a0:db:62:fd:85:eb:2e:1d:d4:77:
be:f9:3c:cc:54:74:6e:07:3c:55:34:8e:45:51:cd:
09:24:d6:b9:42:21:83:97:e7:30:e4:31:b3:d6:fa:
c9:6b:bf:15:be:24:5d:49:32:58:03:ab:f5:a6:ee:
e8:a4:ef:14:b1:70:19:d3:a3:15:dd:d5:50:f5:ca:
bc:d5:98:fc:3c:93:57:c5:ea:57:02:fd:47:be:90:
6e:cf:f1:9c:e8:0f:5c:c8:d3:f9:cb:01:d2:3b:28:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:89:FF:83:E4:13:AF:28:A0:5A:D9:35:9D:54:26:26:0A:8C:0B:3E
X509v3 Authority Key Identifier:
keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:09:34:ee:a5:ac:68:fe:ee:04:26:84:70:c4:38:36:27:49:
e2:2b:25:9e:fc:7d:d2:61:d2:a8:dd:5e:88:12:06:cb:f6:8f:
60:7d:84:ee:dc:7c:f7:fc:48:21:33:b8:ae:09:89:c9:4e:90:
d2:a4:88:d2:de:e7:e7:1c:09:c7:8b:e3:4d:2b:91:1b:be:4d:
71:fc:30:b6:92:a9:cc:d2:86:1a:7b:39:0a:f1:67:58:d8:1b:
98:66:0f:39:c1:13:9c:6b:21:ec:d8:dd:2f:9c:39:c2:3b:e7:
15:bf:5d:ba:34:99:4e:43:65:62:45:f1:dd:e0:a4:d3:c1:ce:
eb:77:d1:df:73:a9:98:24:af:da:72:93:8c:cf:12:ea:65:f8:
9e:21:be:42:d5:62:94:58:c6:3c:5d:4e:4f:ba:81:69:c9:69:
25:f0:87:9a:d3:cb:aa:48:f8:04:d3:15:95:77:63:4e:7b:16:
25:99:dd:11:40:01:ed:c8:26:ba:2f:be:7b:bf:b5:1e:7f:01:
50:b4:45:5d:06:26:c8:fe:1b:fb:a0:0c:64:85:19:52:1f:2a:
ae:c6:a8:b0:1a:93:bf:7d:02:e9:f3:70:2c:cb:9a:ca:71:95:
34:32:39:25:7b:20:09:a2:04:bf:c3:a9:47:5d:88:6c:22:ec:
c8:f2:ab:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:17 2026 by rpki-client