Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
File: ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft (raw, json)
Hash identifier: rsjCiT7oWWTVmAgdbbxkk4Wc/+TWOiK21i49SPDh6l8=
Subject key identifier: AB:03:F0:37:A0:C1:A9:21:E7:75:D0:1A:6B:6B:82:8D:12:20:9E:5D
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Certificate issuer: /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial: 019D996290014F2EBC562EB0D351F732094A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
Manifest number: 1405
Signing time: Fri 17 Apr 2026 03:01:06 +0000
Manifest this update: Fri 17 Apr 2026 03:01:06 +0000
Manifest next update: Sat 18 Apr 2026 03:01:06 +0000
Files and hashes: 1: ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl (hash: W94ewXsvk7OSHa6N0VTlFTXsyYYEN+PNiZH6yl08Rv0=)
2: j7jUPHVWAdTQhKi59WB4Ng94oXI.roa (hash: 7naIK2I6whcQD7j7iach8+i3Y6ADAHh3rGPZHWfL1Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:90:01:4f:2e:bc:56:2e:b0:d3:51:f7:32:09:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Validity
Not Before: Apr 17 03:01:06 2026 GMT
Not After : Apr 18 03:01:06 2026 GMT
Subject: CN=ab03f037a0c1a921e775d01a6b6b828d12209e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:7c:8b:e3:02:c5:84:db:39:eb:72:0f:3a:
8c:4f:6a:50:7b:25:c5:d6:36:54:24:ed:4e:f5:a3:
4d:2c:ed:42:83:f5:7f:20:c7:14:a8:81:e6:51:67:
4f:b9:57:7e:32:8d:d6:9e:f4:9b:b4:73:a2:6a:d8:
e3:97:98:42:ed:bf:ec:e7:e8:48:64:ea:8b:fb:fd:
ae:b1:72:17:b7:7b:7a:97:11:ac:3c:f9:4b:0b:69:
b3:ea:6e:a0:8b:ce:3d:2d:c2:b1:f2:b7:eb:9c:3b:
ec:fd:13:aa:32:c1:40:44:a0:91:0d:b5:81:5a:21:
c3:c9:53:c3:03:c9:cc:55:b7:84:67:cf:00:d8:cd:
b6:18:80:4d:03:06:55:e1:7e:9a:5b:d2:7a:04:46:
07:57:2b:05:b3:b6:38:1a:d9:f1:c2:65:65:70:e4:
42:71:f6:4e:2d:c3:62:c0:63:9a:34:b8:17:53:3d:
31:68:5c:a1:14:e6:fe:37:92:6f:74:b1:87:bd:09:
ee:3b:d7:dd:d8:82:05:39:a4:66:7b:a4:8b:41:18:
61:6b:29:36:9e:8b:18:1e:1d:94:e7:c7:7b:e1:34:
ca:a8:b0:d2:e3:8f:3d:17:82:0c:98:ce:10:91:90:
b4:d1:47:9d:38:46:b6:6c:52:a1:03:16:03:0e:6e:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:03:F0:37:A0:C1:A9:21:E7:75:D0:1A:6B:6B:82:8D:12:20:9E:5D
X509v3 Authority Key Identifier:
keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1b:61:d0:8f:10:5c:aa:63:18:dc:f8:ca:dc:28:2c:44:93:
06:6c:8b:c3:96:6e:30:f6:1c:00:68:cb:73:04:eb:81:a3:58:
02:03:d3:84:b4:51:8b:c7:90:26:9f:74:50:99:5c:ee:a3:4c:
48:e7:77:89:80:b4:1f:27:5c:ed:0b:88:69:48:8f:0e:ba:57:
68:e5:b7:cf:e3:d0:ba:87:9a:91:60:6d:1b:1a:c1:01:08:85:
09:b7:36:e7:98:3b:08:f8:d9:d3:e7:00:f4:b0:80:a5:41:62:
06:db:a6:1a:a6:b0:34:ed:1b:45:9e:1a:b8:1c:53:ac:cd:43:
5f:dd:56:89:31:a2:f0:31:94:b6:29:22:04:22:e2:12:f2:4e:
8c:e3:be:0c:af:b4:4b:8d:5d:6e:51:a6:b8:5c:04:d4:18:ef:
85:f6:8d:f3:44:ed:bc:01:e2:86:7e:a7:84:35:fc:56:81:8d:
33:d7:f5:1d:0c:b4:fc:8c:b3:ee:14:90:fb:4f:46:4c:5d:e0:
99:b1:79:69:86:56:04:d2:d7:2e:d2:c4:d7:d3:11:09:53:ba:
24:3b:5e:46:22:0c:08:80:15:8b:14:79:7a:90:c3:30:61:fa:
2b:83:48:ca:2c:ba:5c:48:92:77:8a:91:9a:97:39:dd:0f:e0:
69:48:80:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:12 2026 by rpki-client