Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
File: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json)
Hash identifier: RpehvUDv5lMfCaT4dX2LCvNbscc9lZWEoOTHTCksu7g=
Subject key identifier: 3E:BB:F5:25:0A:FA:EA:2E:76:7C:0C:90:97:A4:33:07:3F:AB:EE:0C
Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
Certificate issuer: /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Certificate serial: 019D9998EB9DF24CB8CDA358EE0C5B7C5572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
Manifest number: 123F
Signing time: Fri 17 Apr 2026 04:00:28 +0000
Manifest this update: Fri 17 Apr 2026 04:00:28 +0000
Manifest next update: Sat 18 Apr 2026 04:00:28 +0000
Files and hashes: 1: 2Lj6KAHa7H9f4SxUIEO7Uz1pweY.roa (hash: gFIOx1qhwOYwQbgborzlAfR9qq8vv6N65dglePA77l4=)
2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: NUvCbZ18s3ZzdVyakRqYzt2ECbTfEB/9LxYiMHU0tJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:eb:9d:f2:4c:b8:cd:a3:58:ee:0c:5b:7c:55:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Validity
Not Before: Apr 17 04:00:28 2026 GMT
Not After : Apr 18 04:00:28 2026 GMT
Subject: CN=3ebbf5250afaea2e767c0c9097a433073fabee0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7a:ee:3b:26:54:a1:5c:5b:6a:96:9e:a9:16:
3a:3a:44:96:07:8b:84:b6:2a:54:b4:9f:ce:ba:98:
e0:d7:62:8c:5a:8b:37:33:28:93:a7:29:b9:92:94:
72:64:2c:97:cf:02:e8:a9:80:4c:e7:80:de:a4:d3:
d4:08:18:d1:ce:df:24:5a:80:18:43:02:29:e9:79:
35:d4:76:bc:cb:e1:1a:be:26:05:10:8c:ae:6a:d7:
57:a0:b4:2b:1d:32:9e:67:7f:28:0e:0e:8d:8b:49:
ab:d4:8b:b5:a5:9f:01:ab:3e:92:4f:15:56:13:95:
97:d0:c8:60:9a:50:9d:26:12:05:28:a1:c3:92:10:
12:04:e4:9d:46:0c:63:47:63:e8:06:a8:22:fc:c5:
32:46:be:69:f9:c5:59:b3:4a:dc:f4:24:a5:bf:8d:
bd:36:23:99:1d:fd:81:fd:98:26:b9:10:46:fc:cb:
40:49:29:2f:37:39:48:f3:ca:fa:5f:01:27:8a:57:
7a:e0:3e:e1:af:d0:72:12:51:4e:c1:62:a8:14:b4:
7e:d6:bc:52:7f:da:44:51:e2:03:59:bf:21:ee:3f:
08:4e:8b:b9:d2:01:de:08:8b:c0:49:e2:81:db:b9:
34:56:0f:93:38:34:ce:85:29:65:74:bb:5b:ea:f2:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BB:F5:25:0A:FA:EA:2E:76:7C:0C:90:97:A4:33:07:3F:AB:EE:0C
X509v3 Authority Key Identifier:
keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dc:76:a9:d5:2b:12:a5:44:49:df:1f:e9:3f:7b:7f:19:f4:
da:56:69:ec:32:52:6b:fb:67:5e:df:08:3f:c3:e4:ca:26:5e:
86:f1:00:1b:63:c9:bf:af:92:ad:8e:67:67:89:d0:ee:85:a0:
69:44:f2:26:e9:91:bf:9d:57:89:86:22:aa:a6:f9:e1:30:06:
2e:21:ca:52:20:2b:4a:a1:c2:5b:09:4e:7a:f2:64:63:14:91:
7d:85:1c:e3:1f:82:66:cf:7a:23:09:09:a2:65:1c:6a:96:93:
8e:97:5b:8a:57:af:ca:ca:ab:0f:b2:fa:c8:7b:32:58:21:13:
ff:83:ae:5e:dd:37:89:c6:f1:8a:9f:38:98:c1:89:90:18:6d:
3a:1c:01:f1:0c:1b:e6:dc:1e:9e:32:79:56:e1:d1:a0:bb:45:
a5:ed:70:55:70:0b:eb:7c:52:ab:48:80:bf:32:ff:04:68:9a:
b5:a0:de:61:df:7a:a4:b5:e8:94:1e:73:ab:7f:46:a6:2e:90:
b5:99:c3:f2:d2:89:cf:a2:60:d0:c6:7f:88:da:4f:c3:d9:55:
5a:7f:0a:24:09:3f:c2:18:81:e2:25:6a:f5:91:d1:c2:0d:d4:
c9:e3:22:c4:09:be:34:62:67:2c:22:fa:24:99:af:f9:8f:43:
5d:2b:59:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:06 2026 by rpki-client