Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json)
Hash identifier: s4asTZ+Moa0s8aWj+CAowRMxiMVx7sR5qIxpT/KkIHI=
Subject key identifier: 53:AA:46:1F:4B:CD:D0:C1:DC:0A:EC:8C:67:43:99:77:82:15:16:83
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial: 019D9A06FA5D0B9AAE04CD757FE310CE5F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
Manifest number: 15D1
Signing time: Fri 17 Apr 2026 06:00:41 +0000
Manifest this update: Fri 17 Apr 2026 06:00:41 +0000
Manifest next update: Sat 18 Apr 2026 06:00:41 +0000
Files and hashes: 1: Dq-r-Yg7y34zz0AqTh3QSsCtI0M.roa (hash: BCMsstp2glA617fVzScsLywH8yZ2gjhq0JFm8FjVqK0=)
2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: XxRsaozWCrzRxw3DTnXj2iR03CsxCDRCFRsbiJlZ140=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:fa:5d:0b:9a:ae:04:cd:75:7f:e3:10:ce:5f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
Validity
Not Before: Apr 17 06:00:41 2026 GMT
Not After : Apr 18 06:00:41 2026 GMT
Subject: CN=53aa461f4bcdd0c1dc0aec8c6743997782151683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:a7:31:78:f6:36:9d:3d:e9:f4:5a:4a:11:
fd:c1:e4:fd:95:c6:8e:3e:2f:dd:0d:da:e0:c6:15:
8e:83:46:e4:1e:aa:c7:c6:12:9f:bc:22:97:e8:72:
8e:0d:97:c6:3d:1d:8e:34:e1:52:a6:bf:34:a7:38:
b5:02:de:92:5d:0c:b8:5e:3f:70:34:c0:74:d3:c4:
1d:93:3e:8a:5a:3e:5e:81:52:8a:5b:50:61:db:12:
29:90:5d:ca:e3:92:18:46:85:48:7b:e8:47:b6:89:
e7:5a:78:33:9e:ef:05:6c:0f:38:07:03:07:c2:34:
d9:d3:2c:ba:25:ee:b5:99:f6:0f:71:af:17:43:5d:
6a:50:8f:84:02:a6:5b:65:32:ed:2b:f5:0b:90:c0:
7c:25:a0:70:75:e1:06:49:be:ee:8b:aa:b7:6c:03:
42:4d:92:75:81:16:98:a9:8c:9d:76:50:ab:f7:41:
af:9e:12:27:1c:f5:c9:24:f4:cc:0a:55:d9:4a:77:
68:65:be:59:99:a9:49:25:5c:ca:ba:2f:8f:26:87:
29:a3:90:40:89:df:d8:64:54:e8:f3:5b:c8:40:b0:
d8:21:c4:72:0d:6a:29:fc:df:24:b1:2f:d9:94:54:
90:a6:4e:92:bd:c9:6b:62:25:c3:e0:65:25:f8:b1:
81:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AA:46:1F:4B:CD:D0:C1:DC:0A:EC:8C:67:43:99:77:82:15:16:83
X509v3 Authority Key Identifier:
keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f0:62:df:aa:d4:f3:ce:0a:49:ba:dd:43:7f:75:43:62:30:
c8:e9:7d:ab:03:8f:0a:4d:8d:93:d0:50:4b:30:70:3f:94:aa:
86:a3:c0:c3:08:c2:8a:6a:52:fc:61:65:57:f8:1d:5e:56:8c:
b5:ca:80:81:ae:11:6f:ba:24:14:ad:8d:39:16:36:46:a2:81:
18:f7:b9:c6:5b:46:e3:d3:de:91:75:de:a5:0d:67:6d:cf:f9:
ed:45:f9:57:02:88:5d:e9:aa:ef:ab:89:c5:f2:8c:b3:7e:cf:
1e:a6:fb:c2:21:34:1b:c2:d8:19:c6:b7:e5:36:20:ba:05:d3:
8c:95:bc:53:d4:7d:98:a6:0d:4a:03:d3:26:0c:2e:86:18:9a:
03:78:70:18:8d:02:09:62:5e:ef:f2:dc:be:a5:21:7e:a7:7a:
6f:1b:03:31:4d:5d:0f:27:c7:9b:7a:f2:d9:91:fe:08:69:26:
d8:3b:d6:99:cc:64:05:34:9d:57:13:07:4d:b9:5d:72:54:3b:
61:d8:8f:9a:39:3f:c9:0b:18:93:d2:48:f5:c1:71:a6:92:e1:
d9:99:1e:c1:61:f4:11:cc:ae:c9:78:89:ed:f4:16:00:e9:0d:
f8:6f:76:8f:91:c6:4c:cb:a5:a7:24:d2:91:77:39:41:52:6b:
19:6c:44:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:47:28 2026 by rpki-client