Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
File: ZgPtTHhFQlARbxBetpYdwp4dvGw.mft (raw, json)
Hash identifier: 08oNwE/zDfTHAYTX+rZJWweOR1ERECD2i7ib+mhNAOo=
Subject key identifier: 54:BC:94:B5:47:83:26:52:49:7F:93:79:94:A0:2B:1F:78:D9:91:06
Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
Certificate issuer: /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Certificate serial: 019D9A073940C61FB13BBD39E4B8BCF92EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
Manifest number: 15A8
Signing time: Fri 17 Apr 2026 06:00:57 +0000
Manifest this update: Fri 17 Apr 2026 06:00:57 +0000
Manifest next update: Sat 18 Apr 2026 06:00:57 +0000
Files and hashes: 1: IRS--xaIFyvf4nBEIJqxO1_3ZhE.roa (hash: K/zCH1QmxaSRuaMT9yqorVTWzzo7aNiaeZwocJbG5QI=)
2: ZgPtTHhFQlARbxBetpYdwp4dvGw.crl (hash: WDBHzTTpVGORDYV0SKM/3Fn4UlD6ct+XJwKBvJ3xpzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:39:40:c6:1f:b1:3b:bd:39:e4:b8:bc:f9:2e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Validity
Not Before: Apr 17 06:00:57 2026 GMT
Not After : Apr 18 06:00:57 2026 GMT
Subject: CN=54bc94b547832652497f937994a02b1f78d99106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:cd:03:47:00:5f:ac:e3:a7:54:77:82:b0:
93:fa:85:70:be:df:27:79:b0:cc:85:7a:23:93:86:
a8:66:b5:02:ed:f1:2e:06:bb:5c:38:9a:47:4b:c7:
ca:db:0c:4d:24:99:7f:1f:68:45:20:6d:c4:7b:36:
a4:e1:cb:cd:ad:49:3f:e6:c9:e0:a6:83:2c:7c:1a:
ad:11:5e:84:d2:c2:fc:72:ec:75:6e:0a:60:c3:5f:
94:a6:0f:df:3a:80:8c:7e:b2:bb:3f:f5:d5:66:ec:
4e:b9:7c:cd:b0:40:13:cc:02:cf:22:d1:83:ea:f1:
57:27:59:c3:31:b0:b7:23:b8:c7:4f:be:8d:25:dd:
6f:b3:74:86:ba:84:2b:58:ee:64:84:ed:c2:ba:e0:
ea:2a:85:47:e8:71:66:3e:41:2a:4f:bb:42:a3:b0:
06:1d:6e:7c:42:a5:83:dc:1b:3d:2a:d8:9e:6e:b6:
4f:79:80:ab:18:7e:51:b5:6a:93:ad:eb:f3:4b:fa:
17:0f:19:fc:f5:48:16:68:ae:8d:34:fe:de:4e:99:
1d:07:0a:07:94:ec:bf:71:09:53:26:e8:23:36:a9:
8d:da:90:27:11:21:11:72:16:5b:57:56:df:bd:74:
82:e8:f1:91:d9:fc:da:89:23:12:43:de:65:26:6a:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BC:94:B5:47:83:26:52:49:7F:93:79:94:A0:2B:1F:78:D9:91:06
X509v3 Authority Key Identifier:
keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b0:e7:3a:e2:5c:77:47:d1:52:07:19:52:d3:a4:59:e0:73:
ac:ff:d5:21:42:86:21:5a:c1:82:c5:6e:bd:65:eb:29:60:b7:
ef:cc:39:bf:29:60:d5:67:40:d0:35:12:4d:da:3f:a8:7f:3b:
50:09:fe:51:48:2e:c7:b2:a5:1d:db:26:bc:10:49:00:83:36:
d6:a1:cb:99:b5:e7:94:dd:70:31:a7:cd:b8:66:f6:ff:06:4f:
56:83:6a:4b:c6:40:b5:3d:90:b2:5c:20:09:fa:92:66:d2:d1:
2a:86:d1:90:ee:80:a1:0a:18:39:1e:ec:9d:08:4a:33:87:49:
48:9b:3d:e4:33:d9:8c:44:27:cc:6e:95:a0:67:e7:d2:f0:84:
0f:ef:3a:cb:00:c1:d1:b4:ff:ce:bb:a5:df:6e:b2:a1:31:9b:
3e:04:57:ea:cc:c7:59:7f:ee:6a:f6:e0:7a:0d:66:bd:8d:7d:
ec:b3:10:29:02:86:af:62:c9:95:69:b2:b7:3f:8f:c5:90:03:
cb:0c:ea:f6:a4:7c:db:f9:1c:2f:33:a1:34:6f:ee:99:c7:1b:
5a:43:86:3b:a0:5d:e5:4f:2e:c1:f2:bb:86:a5:50:ea:35:fe:
ac:61:d6:30:66:6e:4f:3b:6e:8f:6f:f7:3c:fa:9e:5a:c4:b3:
d8:83:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:44 2026 by rpki-client