Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: o4SizfkG4IhTQxtKbL6idoUcTt2J5DeDo6raIsIgCYg=
Subject key identifier: 33:B1:4D:C3:2F:88:E7:6A:D4:2F:21:B7:65:A1:5C:65:06:7D:49:41
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 019DA3AF264AB82324749B7777FCF7EA38D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0EBB
Signing time: Sun 19 Apr 2026 03:00:57 +0000
Manifest this update: Sun 19 Apr 2026 03:00:57 +0000
Manifest next update: Mon 20 Apr 2026 03:00:57 +0000
Files and hashes: 1: 9As_XsenM5-QTmM1X_BCn4yPeqA.roa (hash: Dxtnn5XYXXhgv4gymsVhkJbLhB4m0DGlBCGRadS6kHQ=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: eIlatZvvVvxLdPIqJG0ucHCLlDW7MXmSl95J9gC/gb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:26:4a:b8:23:24:74:9b:77:77:fc:f7:ea:38:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Apr 19 03:00:57 2026 GMT
Not After : Apr 20 03:00:57 2026 GMT
Subject: CN=33b14dc32f88e76ad42f21b765a15c65067d4941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:91:76:20:b4:e6:98:2c:e2:1d:91:70:46:
01:3e:06:c1:12:7f:14:76:fc:bf:ff:78:26:1a:c4:
f3:90:04:c8:b2:86:dd:5a:5c:f0:ed:9e:a4:14:34:
80:b0:64:d2:55:5c:10:66:18:38:c8:64:c7:6e:cb:
30:2b:d6:d6:9e:0a:a5:e0:cd:4e:d4:b9:1f:4d:2f:
1c:08:31:b7:38:db:54:21:41:d0:7f:0b:9c:23:2a:
87:ec:e2:67:da:fd:dd:79:f3:27:de:45:fd:2b:48:
6d:37:4c:d0:70:d9:46:fd:c9:df:81:6a:89:16:45:
6b:31:7c:46:6b:55:cf:8c:c3:01:8a:b7:33:e3:44:
8d:b8:fc:d5:63:74:28:35:a6:1d:21:bd:7f:49:99:
c4:f5:97:c5:37:10:cf:1b:6a:02:86:b7:61:2f:70:
1e:c8:17:63:c2:7b:fd:da:24:3d:63:90:e9:fb:07:
d3:12:9d:98:a2:9a:31:84:35:db:d6:f0:df:da:37:
65:0d:0a:b9:2b:c8:83:9c:94:95:15:ab:62:44:0a:
2b:d0:62:2c:91:95:ce:15:3e:b2:e7:42:50:43:72:
e6:60:7c:67:57:09:a7:81:42:aa:38:eb:55:91:fd:
58:ce:b1:a7:df:d4:2f:bb:f9:21:11:f3:70:cf:54:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B1:4D:C3:2F:88:E7:6A:D4:2F:21:B7:65:A1:5C:65:06:7D:49:41
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:39:c5:61:9f:0e:d3:59:65:f1:d5:ee:a2:40:84:fb:cc:b1:
4f:d7:07:3a:0b:4d:eb:38:6e:29:61:c8:8d:1b:38:ec:04:d5:
86:e7:5a:a4:40:73:7c:d4:44:12:73:48:e2:98:50:d9:4b:8c:
b2:6c:7e:89:e4:a6:25:dd:cf:ce:6b:07:6c:7f:50:b1:b1:c9:
53:30:31:47:9d:61:44:cd:12:bf:ab:ba:fb:9a:37:97:3f:2e:
c4:71:0b:e8:f2:c4:4c:ce:b4:f5:5f:88:21:f2:88:f4:9d:eb:
96:90:76:c6:a2:6f:f2:47:9a:d9:f7:96:f5:69:5b:41:06:f8:
ff:e4:0c:30:30:a1:42:c3:1d:2d:5f:e5:b8:43:b2:ff:d4:7e:
a9:b5:b1:b8:c2:ee:05:e8:1f:9d:47:22:72:fe:b8:bb:83:e6:
66:a2:b7:10:37:08:69:b2:f4:0f:cf:ad:1d:0d:d4:d1:f2:a0:
f6:c6:b6:e0:e6:76:d9:e3:cf:e9:a6:a9:b4:a1:46:09:a7:8a:
4b:35:29:38:98:3a:73:6c:3e:9a:76:25:b4:e5:2c:84:8b:cf:
8f:ce:49:d9:7d:0a:86:a5:bb:a9:e2:28:cf:71:2d:1e:28:74:
77:55:f6:96:e8:ab:64:88:08:84:77:29:cb:41:d2:4d:58:4d:
f7:ef:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:26 2026 by rpki-client