Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
File: zsY7h6iuwJPb5H3MqShg6oQSKOA.mft (raw, json)
Hash identifier: d1ywHYtBIGlyJTcbmfnOJmjxXSodrOQG23MqnUZIHVc=
Subject key identifier: D7:44:51:C0:14:7B:AE:58:96:8F:E5:E9:F1:76:4D:F7:3B:73:BC:97
Authority key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
Certificate issuer: /CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Certificate serial: 019DA30A3BDC308AB22C5CA819880E9CE858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
Manifest number: 0DCF
Signing time: Sun 19 Apr 2026 00:00:49 +0000
Manifest this update: Sun 19 Apr 2026 00:00:49 +0000
Manifest next update: Mon 20 Apr 2026 00:00:49 +0000
Files and hashes: 1: hl2ItpSJbgNc8RoWoL4bCpNDXxw.roa (hash: ThfYHLL+zFBLeQn7rt4aKrE2rh3ZM5jimecJ6acAoR4=)
2: zsY7h6iuwJPb5H3MqShg6oQSKOA.crl (hash: FXfZ9P5wcHRPfzpJfBcIPNCo8a7/f63eokjM3aCglUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:3b:dc:30:8a:b2:2c:5c:a8:19:88:0e:9c:e8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Validity
Not Before: Apr 19 00:00:49 2026 GMT
Not After : Apr 20 00:00:49 2026 GMT
Subject: CN=d74451c0147bae58968fe5e9f1764df73b73bc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:9e:06:99:fa:5b:70:b5:e0:c9:be:6f:0b:
42:8b:2b:a9:23:7f:23:03:94:81:53:d0:a1:64:9f:
ba:b7:12:d2:5d:58:f3:23:ef:bf:3d:fa:56:6c:4b:
77:5d:d5:3a:e9:b9:98:9c:84:e9:b2:a3:c9:8b:71:
a7:c5:49:fc:d4:13:25:4e:6e:5a:e6:dd:21:40:a9:
01:4e:68:ee:08:a0:73:31:04:64:1e:b4:cb:a6:f0:
bb:6c:40:f1:64:71:40:2d:eb:c7:c0:86:71:d2:a2:
62:8e:d3:e8:df:48:30:2b:cf:57:7d:96:65:05:67:
8c:7e:59:97:d1:d0:b9:ae:1a:e4:9b:ce:b1:b5:18:
73:fa:68:11:44:4a:88:fb:29:e4:91:1c:6e:37:96:
89:47:76:17:e8:76:ea:24:50:be:81:a5:15:13:ba:
81:e8:06:b2:90:5b:ee:93:45:76:d0:82:3f:67:38:
47:1e:be:c6:c7:8b:aa:fc:42:aa:d3:6a:84:95:d9:
30:3b:b0:7e:b1:7d:73:3a:5c:e1:01:f2:89:ae:ce:
31:8c:c4:bd:5f:a0:1b:5c:22:ee:98:ab:a3:74:4c:
46:53:dc:cf:da:50:08:e9:6b:c7:e8:e9:bf:ed:d2:
0b:ca:19:ad:91:e1:3f:12:59:72:fc:ac:fe:57:94:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:44:51:C0:14:7B:AE:58:96:8F:E5:E9:F1:76:4D:F7:3B:73:BC:97
X509v3 Authority Key Identifier:
keyid:CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7e:df:68:90:4d:6a:6e:bb:92:dd:ad:31:09:72:0e:69:c1:
cd:d2:09:ea:0f:f2:be:19:73:04:cd:4d:91:43:c8:d5:79:1e:
6b:3f:2f:e5:bc:ad:bb:35:f1:4c:01:15:9b:c1:85:ad:e8:f6:
37:ea:06:c7:66:36:c8:8a:48:7e:75:7c:06:41:a2:3f:25:e5:
10:24:66:40:b7:db:cd:aa:f2:0e:a4:10:11:d3:b1:ea:0b:b0:
74:7c:c9:4b:a1:63:2f:80:e5:19:d9:f9:b2:4e:49:9a:af:72:
78:c8:3c:41:73:13:8d:6c:34:0a:07:19:c2:12:50:2f:c8:60:
97:cf:a3:29:fe:a0:bd:0c:8f:f1:70:f9:6f:61:97:1b:ad:05:
14:5b:34:d8:34:18:70:37:0e:b0:67:9c:2c:dc:c8:4e:c9:11:
14:32:76:34:fe:d1:21:b2:b9:f4:23:16:ea:54:65:8b:f5:09:
85:d2:14:d8:e3:8c:62:0e:4a:f1:21:88:09:86:36:67:d7:af:
6f:dc:59:59:ac:2e:48:80:6c:17:58:e3:1b:1d:e3:b5:79:3f:
aa:99:64:43:5a:78:ab:98:4c:2c:a8:85:fb:4b:32:33:21:9e:
6e:49:ba:a2:70:a5:22:d8:1f:3a:6d:29:4b:6c:bc:c7:fe:f0:
b0:7d:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:55 2026 by rpki-client