Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier: 498BzoZnybqUl4yggrcD164IynY+ycTsiWYzvBVAmQ8=
Subject key identifier: 21:F4:90:36:03:9C:86:6E:FA:8F:C4:8F:B6:35:BA:84:DD:67:2B:08
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 019DA3E685BE5F1327DE51571B047C5915E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number: 1709
Signing time: Sun 19 Apr 2026 04:01:26 +0000
Manifest this update: Sun 19 Apr 2026 04:01:26 +0000
Manifest next update: Mon 20 Apr 2026 04:01:26 +0000
Files and hashes: 1: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: hHtgvUWsw1qyxU/YhADpfmSArxBWc/IMWWHiJNqXJYc=)
2: q07ydXKNCfhsxkbz0OLUwwXQNww.roa (hash: WGl6n1WY5g82kxAJzk5G8tAK5EnNCEBo+zn2QvwiGL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:85:be:5f:13:27:de:51:57:1b:04:7c:59:15:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: Apr 19 04:01:26 2026 GMT
Not After : Apr 20 04:01:26 2026 GMT
Subject: CN=21f49036039c866efa8fc48fb635ba84dd672b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:03:74:24:1b:d7:91:8e:77:4b:96:fc:ba:
d6:1b:1b:f1:17:53:20:b5:6a:43:79:87:2e:76:78:
1d:d9:50:d9:6d:f6:6e:ab:4a:4f:69:a1:f5:cf:fa:
4f:a6:ba:3b:17:d1:05:74:67:c8:b7:0d:12:80:b0:
17:2a:49:fc:45:31:71:1c:10:b8:77:5f:95:1e:d8:
ee:0b:cb:fc:3d:ac:f0:e8:32:84:e6:e6:04:17:40:
44:a6:f8:a3:3c:86:e0:07:00:2e:10:d5:aa:30:62:
c6:a1:b2:8f:cf:4a:ea:f8:7a:ba:7a:ff:58:77:24:
f2:40:78:a0:8d:50:e6:d1:c3:a5:69:3e:dd:48:80:
9f:0c:88:00:4a:a2:11:fd:e5:7c:96:79:ed:06:2d:
63:9e:5a:4f:99:cd:1b:03:aa:64:d1:3c:6e:45:e9:
cb:8c:c0:0d:0c:88:95:5d:81:d3:0e:04:80:e5:d8:
98:6c:f0:bc:a5:10:ed:e0:e0:e9:26:6d:d7:6c:ad:
18:dc:cf:55:e9:3f:f0:49:5b:b9:b0:08:94:0a:86:
e4:d9:37:07:3f:45:95:e4:6f:0d:7b:8a:a7:aa:05:
e7:32:b2:67:9f:8d:f7:41:c3:aa:7c:ec:f8:fe:92:
40:ec:de:bd:73:26:b6:95:0d:91:92:5f:7f:e9:3d:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F4:90:36:03:9C:86:6E:FA:8F:C4:8F:B6:35:BA:84:DD:67:2B:08
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d7:02:fa:e4:ae:48:a6:5f:9e:29:b4:29:2a:16:06:17:c5:
3c:e5:d3:6b:ef:d8:e1:79:f8:a9:b6:c0:0e:85:cd:93:b1:e3:
61:a2:b0:ca:0b:a7:c3:23:a5:b2:05:84:30:6f:d5:65:eb:18:
84:05:55:83:1e:25:99:02:d6:20:2e:92:27:9f:8d:6b:9a:a2:
bd:04:1a:4b:05:41:4f:a7:bd:30:46:cf:08:da:a2:7b:69:a1:
b6:ba:ac:37:c5:1c:83:be:8f:ea:98:2b:13:5d:d8:09:b2:3e:
26:b3:d6:67:62:c0:db:24:76:73:11:81:b5:c5:31:88:9c:06:
ae:27:c9:88:cd:49:17:ef:82:ad:67:86:1f:0c:a7:06:24:28:
26:f4:50:95:5e:ca:67:d8:4b:f5:46:eb:d6:9f:fa:78:a2:da:
bc:94:c9:1f:43:b8:51:47:7d:d7:0a:fb:14:bb:b8:7d:c1:9d:
8e:7b:e2:f4:e5:14:94:a4:24:f5:e8:7c:31:85:76:4c:c1:a3:
a9:81:67:48:1e:1b:3b:db:b7:a1:f7:2f:bb:c3:3f:11:53:cd:
23:05:4f:86:51:74:7c:98:35:b0:54:8a:5c:66:51:e5:17:71:
ee:8a:20:88:2c:6d:3e:17:97:65:8d:50:3e:07:a1:ea:1f:b0:
ef:c9:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:51:14 2026 by rpki-client