Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File: ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier: gDqVTrTJts/+5ScwreV9LFMDHRq049FO9aguIWj+22k=
Subject key identifier: E2:C7:9D:E4:40:3A:4E:41:C8:55:2D:76:73:C5:F4:D2:13:9A:A3:FF
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer: /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial: 019D9961E98260EA82CF245A049ADE34899A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number: 073D
Signing time: Fri 17 Apr 2026 03:00:23 +0000
Manifest this update: Fri 17 Apr 2026 03:00:23 +0000
Manifest next update: Sat 18 Apr 2026 03:00:23 +0000
Files and hashes: 1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: xr98oYBPki9w20GJNcK9S6DojKXtETzdVEaprxMM1lA=)
2: t-CPneeaVHYgCJeN9aRr26OHu8s.roa (hash: i5R3976Bs/xCdmNx5+5wTM2K2LQaNxrVpxX02Fkd/C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:e9:82:60:ea:82:cf:24:5a:04:9a:de:34:89:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Validity
Not Before: Apr 17 03:00:23 2026 GMT
Not After : Apr 18 03:00:23 2026 GMT
Subject: CN=e2c79de4403a4e41c8552d7673c5f4d2139aa3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0c:7a:da:aa:26:d9:35:80:8c:a9:4a:39:9c:
12:86:69:ea:66:9f:f0:83:8b:0c:25:68:45:34:86:
8b:25:f4:81:44:8b:e1:ba:9e:37:94:37:df:22:c7:
bb:3f:d1:e6:0e:17:9e:e8:c3:66:41:4d:02:14:41:
8c:c3:d4:02:cf:d7:ef:fe:6e:c7:57:4a:b4:1b:a3:
2c:5f:43:b6:cc:a1:4c:7f:e9:6e:2d:34:bd:8e:f7:
13:93:ad:9f:b2:98:96:bf:66:81:76:99:f8:88:fd:
4f:88:99:fd:85:3a:a6:58:d6:2a:37:50:30:5f:b4:
80:7c:38:cc:25:53:c1:fc:20:da:36:b2:f5:50:67:
21:c6:50:dd:fd:e9:77:38:2a:cc:ea:14:a8:55:c2:
65:5f:35:08:07:29:da:f9:3e:3c:66:3c:f8:69:b7:
64:4b:d3:22:e5:4c:cf:f8:f8:d3:6f:e0:b2:97:5b:
f4:1f:5a:0e:61:21:01:2e:f7:b0:6f:e6:69:79:34:
a0:90:1e:1e:d6:d6:8b:e0:ac:64:6b:a7:5f:d0:ad:
dc:9d:01:4d:9c:0a:60:5a:91:bc:8c:f0:e6:70:cb:
ae:6b:59:1f:61:4e:b4:cc:76:d2:b4:2f:86:2d:3a:
03:74:e5:d1:d3:ab:d5:66:47:b7:fd:49:53:db:48:
dd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C7:9D:E4:40:3A:4E:41:C8:55:2D:76:73:C5:F4:D2:13:9A:A3:FF
X509v3 Authority Key Identifier:
keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:dc:c7:49:e7:d2:31:3a:e5:83:cc:9d:1f:93:8f:ab:45:80:
72:c1:2f:aa:c7:ae:3d:2e:fa:a0:79:bc:68:89:b0:b3:1a:36:
51:e6:ee:2c:43:49:4e:8e:cd:5b:8c:7a:ae:82:4c:36:06:01:
55:d3:fd:41:0f:e6:a7:44:96:6a:18:0c:70:7b:cd:7f:df:12:
64:d2:88:80:63:0a:ad:65:79:17:78:9c:b3:34:8e:6b:d3:55:
44:7c:d0:5f:e2:78:3e:2c:e2:7b:18:98:87:01:65:23:ed:d4:
26:d9:c3:bb:d6:40:b7:d6:1d:71:7e:04:52:77:0d:54:8a:f4:
10:00:b8:89:8d:bc:1a:76:87:9c:e6:d1:f3:06:d9:38:eb:4c:
ad:9d:14:98:df:dc:c6:3b:4c:bf:45:2a:2a:2c:af:d1:4d:1f:
5b:18:e0:3f:bd:1b:39:24:4d:bb:c6:53:8d:b6:8f:eb:a3:e4:
b0:02:c7:f8:28:10:d3:e2:4e:f0:41:5b:4e:b3:6d:b7:8a:68:
ef:08:7d:65:ed:2e:f3:ba:2b:0a:26:85:70:65:7e:dc:ea:7c:
fa:a7:1a:ca:f8:f7:bd:19:93:66:5f:ba:c5:1b:12:81:93:47:
16:dc:8d:8c:a0:b2:82:2b:ea:7a:58:84:f9:2d:6b:d5:06:11:
fe:4f:50:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:58:03 2026 by rpki-client