Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json)
Hash identifier: zOV90yOK4QOZpX/LyJA+Iy1gYTxtcHZhd6H+a6hs5PE=
Subject key identifier: 30:50:5F:FB:96:72:0B:D2:80:07:B1:19:3A:87:72:F3:6C:35:A3:DB
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial: 019D992B6F79EB36A51DE0F1AA165A71E5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
Manifest number: 09B1
Signing time: Fri 17 Apr 2026 02:00:53 +0000
Manifest this update: Fri 17 Apr 2026 02:00:53 +0000
Manifest next update: Sat 18 Apr 2026 02:00:53 +0000
Files and hashes: 1: 5vsHr6Xl2tRUiexVlz3FOn-aeHo.roa (hash: 242jMsYVWeBLhjugJFcXOkAL1qz3e8MYr9rwKIXdUO0=)
2: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: GH9hy5xJ5uHFli2fNAzdZM98HHOUw+om6eI9CxYwJD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:6f:79:eb:36:a5:1d:e0:f1:aa:16:5a:71:e5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Validity
Not Before: Apr 17 02:00:53 2026 GMT
Not After : Apr 18 02:00:53 2026 GMT
Subject: CN=30505ffb96720bd28007b1193a8772f36c35a3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:fa:72:32:95:a8:10:82:7f:5e:5a:99:b8:
92:25:78:f5:04:bc:41:7e:07:09:28:6b:c4:b1:45:
32:cf:8e:06:9c:9d:cc:f9:3d:e4:c5:9f:b4:b3:ef:
12:08:0c:f5:24:b8:95:b5:4e:ba:42:a7:89:3e:32:
37:3a:14:27:f3:2e:b2:b3:ce:29:b8:b0:65:3b:6c:
7d:04:a5:6f:71:4e:e0:ba:b3:c4:d9:e1:68:81:ea:
3a:6c:5f:2a:80:35:c7:43:6c:db:21:7b:30:6e:1b:
44:e4:c7:cd:1b:81:c0:67:59:86:9e:e7:e2:1b:6f:
ba:ab:26:d2:3a:74:26:cb:2c:5c:3f:13:25:8e:5f:
90:9a:d1:51:e5:4e:82:12:c1:41:00:f5:5f:a9:67:
de:39:7f:c0:99:07:d7:4e:68:5b:4c:b0:54:8c:16:
86:69:3e:82:06:60:60:71:22:75:be:9e:e2:77:7b:
52:11:e2:8d:0a:86:19:29:fd:2b:71:9d:fb:53:dd:
1d:fb:f9:b2:e0:a3:2f:66:4b:58:b9:78:e3:ab:a6:
92:31:12:ba:ab:1a:35:45:96:cc:c6:72:a7:f4:57:
cb:b1:fa:e2:c1:d6:00:1a:91:39:9f:cc:b0:dc:2c:
fe:af:eb:4c:eb:ca:6e:aa:b1:5c:ba:54:10:dc:1a:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:50:5F:FB:96:72:0B:D2:80:07:B1:19:3A:87:72:F3:6C:35:A3:DB
X509v3 Authority Key Identifier:
keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a3:c1:e8:10:5c:92:82:c7:1f:bb:88:ec:38:1f:77:85:3f:
05:47:95:42:80:d6:67:ba:2e:44:84:5c:d6:d7:69:7f:ac:1c:
33:eb:f3:36:9b:f7:96:40:db:77:a7:7f:e5:85:46:7f:17:5f:
6d:e0:ff:81:9d:f8:0f:a0:f3:87:bd:50:ff:4d:02:4c:63:e2:
5f:4c:59:38:4d:d2:e5:48:ed:b2:39:94:0e:87:81:c0:34:8b:
31:dc:59:5c:48:99:21:75:27:42:26:97:f0:d7:8b:3c:82:60:
45:43:4f:08:59:4b:ba:70:59:52:51:73:f4:9e:52:a0:9e:b6:
f2:70:44:79:98:46:1a:ae:eb:15:44:d1:16:53:d7:85:20:50:
75:43:83:dc:e7:af:11:af:a7:79:65:24:c6:2e:b6:db:84:19:
3f:14:8a:b5:78:a6:8d:6d:f2:e6:bb:b6:d2:53:30:cb:04:f9:
c2:07:b5:fe:da:28:dd:9f:a3:b8:24:e1:d3:cd:02:ef:f6:33:
b0:cb:d4:72:b7:6b:5f:bd:92:da:08:82:89:16:1d:9f:8f:86:
29:0f:c4:37:c5:eb:37:9d:89:84:ee:3f:a2:64:b6:87:f6:22:
83:08:5b:21:72:9c:4d:e7:d7:bf:87:b1:a7:42:ff:88:d2:26:
3d:aa:a0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:38 2026 by rpki-client