Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
File: ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft (raw, json)
Hash identifier: LerL1mvziy6+XJ6qNfS8aQVGj+I0YlLD9WzVNCFQCpA=
Subject key identifier: 1D:AE:01:3F:43:23:E6:12:05:6F:05:95:9B:22:32:B7:48:45:99:F8
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial: 019D97E229A98FB9D09C9EE13E9CA6DED593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
Manifest number: 0B4E
Signing time: Thu 16 Apr 2026 20:01:14 +0000
Manifest this update: Thu 16 Apr 2026 20:01:14 +0000
Manifest next update: Fri 17 Apr 2026 20:01:14 +0000
Files and hashes: 1: TuuctTXsnDfzjdp1XhJCuSQCZBE.roa (hash: lL87XCaQxmWdIfEo3Mlnj0oxnulHe23ylI5Y0lZ+hHA=)
2: ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl (hash: n8rNdhNax9gcXEB5/w88HWSJUNqUyhqNXvnHkB6Ut5M=)
3: k5dogf-BFW_dvSXrkiHgEtagTVo.roa (hash: JTI2nYP0LahJQKoGJLojDrE8fYXChxKujAnQaXvPJgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:29:a9:8f:b9:d0:9c:9e:e1:3e:9c:a6:de:d5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Validity
Not Before: Apr 16 20:01:14 2026 GMT
Not After : Apr 17 20:01:14 2026 GMT
Subject: CN=1dae013f4323e612056f05959b2232b7484599f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:c7:ad:3d:47:ac:e6:d7:46:d3:f7:20:da:
92:d5:ef:a6:91:ce:8d:08:ed:27:a7:41:17:7f:41:
2b:88:6b:76:1a:34:71:24:60:29:72:86:fc:52:d2:
5b:bb:66:5f:51:f0:1e:aa:7e:a7:cd:e3:c7:98:50:
c6:82:29:f8:87:c4:af:29:80:98:0f:bf:eb:8d:99:
39:37:e3:0b:2f:9c:e7:d6:e6:0d:df:3f:c4:40:52:
13:5d:9a:ab:7a:b8:36:5e:5c:f0:a3:12:48:c7:1d:
7a:24:54:98:df:5c:a5:48:5e:94:b5:d7:c6:a2:80:
08:0f:05:b3:f0:e5:77:d1:d7:1b:9e:98:06:ae:db:
03:e7:16:f6:44:8c:23:ff:4d:04:0a:dc:92:c2:00:
13:1c:b6:0a:1f:fd:6a:35:8a:45:80:73:57:ba:42:
3d:33:57:46:c8:07:e6:c5:b4:0f:5f:c7:b3:b9:ee:
89:b7:19:4b:46:62:41:ab:83:b3:db:26:40:9f:67:
1d:e5:6b:a4:0d:b3:2f:fc:cb:ef:b0:f7:fd:96:be:
66:f2:f3:7a:e0:33:fd:d4:58:41:99:0f:7a:66:1f:
1b:14:d2:07:93:ae:55:df:27:a9:3b:60:8d:8b:93:
09:c0:1b:ae:0e:f1:d8:9d:4c:e0:45:aa:9b:4b:3b:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AE:01:3F:43:23:E6:12:05:6F:05:95:9B:22:32:B7:48:45:99:F8
X509v3 Authority Key Identifier:
keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:92:87:2c:5a:a1:e4:dc:ca:b9:03:79:cf:fc:dd:8f:85:97:
89:3f:2d:5e:c5:a6:cd:61:5b:cf:ca:79:74:31:5f:0a:a0:19:
3c:a3:b5:2a:40:a0:c3:6e:84:0a:8a:a3:cd:f5:eb:9f:d8:e9:
f9:a1:11:8e:bf:68:8c:6d:31:26:5d:cb:82:5a:25:23:e3:3b:
36:97:ef:ab:03:08:9a:31:98:d8:38:1f:89:3f:f9:bf:07:09:
3f:95:88:4e:13:82:dd:04:ef:6e:43:be:ef:f6:b0:6c:bd:fd:
c7:a8:58:3d:3f:23:85:6c:bc:4a:2e:36:f2:a5:75:da:a1:1b:
7a:37:88:e9:8a:54:9b:74:5c:92:79:4a:a9:a8:fd:4a:e0:dd:
14:ca:22:27:10:27:67:ff:43:11:98:f1:53:59:41:38:62:1c:
eb:42:d3:d4:35:ac:2b:35:75:be:ad:75:17:77:46:fa:c4:17:
6d:ee:5e:3c:dc:29:fe:f4:4c:86:19:17:f8:05:a3:15:49:63:
41:8e:ce:a8:90:a3:60:c4:dd:d2:1d:b5:21:ca:6f:7c:21:68:
90:50:66:57:59:48:a5:1b:6c:b8:82:c6:f0:51:40:41:38:21:
01:a2:35:23:f1:c0:ba:c7:d8:8b:a0:fb:b1:54:cc:e0:4f:05:
6e:a4:b9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:19 2026 by rpki-client