Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier: rz3qxsyILKb/XkMmkaLTZhPQEjnxJ7ET43UNzi6PKQI=
Subject key identifier: 0C:4A:AF:3E:A8:6B:11:DE:69:76:2A:44:4F:C7:79:6D:34:D5:1B:44
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 019DA3E67DAC48E4BEA865F19518B1E25F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number: 14D1
Signing time: Sun 19 Apr 2026 04:01:24 +0000
Manifest this update: Sun 19 Apr 2026 04:01:24 +0000
Manifest next update: Mon 20 Apr 2026 04:01:24 +0000
Files and hashes: 1: CCg7ZzvUdqSwi3wrsZm9eByU8vc.roa (hash: HBpENohXTL9696cy+vQSR5gQjTAWhSwEwHzFSm9x6Tg=)
2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: 6rMHACqVQKnvBi6HfP9C3X52buxVNtnnJDE9WvU8QMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:7d:ac:48:e4:be:a8:65:f1:95:18:b1:e2:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: Apr 19 04:01:24 2026 GMT
Not After : Apr 20 04:01:24 2026 GMT
Subject: CN=0c4aaf3ea86b11de69762a444fc7796d34d51b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:4f:e7:d9:fe:d8:d6:e7:d6:c2:2d:d9:0c:
53:9d:50:82:8c:1c:18:5f:16:e9:f8:03:3c:70:26:
7c:9c:4b:23:89:70:44:1d:87:14:73:34:a7:db:14:
8f:d2:29:06:fc:5d:17:12:da:e5:0e:51:52:48:62:
5f:b8:52:ea:68:00:ea:2b:ce:14:2e:8e:23:22:48:
97:ee:b6:fa:a9:12:e2:85:8e:b8:a4:2e:63:9c:53:
63:f1:46:b7:82:4d:2f:ca:05:30:68:09:ed:42:60:
3e:19:c5:79:17:61:f4:c0:5b:be:8c:20:41:3d:ba:
15:71:c8:6a:c1:7d:c3:f3:4f:11:a5:7d:de:d5:20:
3d:4d:bb:f2:04:54:ed:9c:94:86:8a:30:89:bd:e5:
57:5f:91:8b:d3:73:5d:98:e5:c0:28:be:29:e3:62:
54:9e:68:2a:61:c6:e3:9f:cd:12:39:46:36:3c:03:
8e:a1:bd:ee:aa:85:36:b7:de:34:0b:30:09:bf:52:
c0:28:e3:57:eb:d3:00:92:8d:70:ed:dc:9a:56:07:
72:c2:7a:fa:3a:4f:c4:fa:09:89:16:e7:b0:3f:59:
a7:ea:a9:2e:c6:e4:4d:24:7b:ce:14:83:38:55:b5:
74:5e:ab:19:96:8f:2b:a4:e8:2e:45:ba:64:9d:f6:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4A:AF:3E:A8:6B:11:DE:69:76:2A:44:4F:C7:79:6D:34:D5:1B:44
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:da:e7:94:5f:14:49:b3:3f:a9:3c:d2:ae:70:ac:4e:fc:8e:
2c:2c:95:bc:bf:f0:40:1d:f0:06:18:35:0a:f6:7d:6e:86:ec:
0c:e8:32:3c:80:d7:28:11:33:81:9d:a1:f2:fc:b2:a3:a2:bf:
54:76:54:54:22:d4:8d:82:70:03:64:23:26:c7:ea:d8:39:9d:
4e:2c:10:29:35:31:82:d6:c4:5c:bc:a8:76:b6:ff:fc:62:73:
7d:e9:99:05:f4:84:07:1b:41:38:e9:80:6d:7e:f7:b3:6b:10:
47:da:74:13:15:ad:5f:bd:22:da:76:d8:db:cc:c3:12:df:79:
62:dc:13:78:90:28:62:01:3f:9a:14:1c:66:1f:df:a1:0a:85:
09:71:92:39:9d:ec:35:d2:ed:d1:66:fa:c2:3f:f8:07:c5:0e:
66:e7:d8:07:fb:15:8c:6e:7c:3d:36:ab:8e:0d:0f:2e:44:80:
e2:ef:e0:e3:62:d8:01:1d:65:dd:3e:05:14:31:d1:96:26:8d:
cd:e1:7f:b6:33:63:44:36:37:e2:93:e7:96:e2:fa:ec:eb:43:
91:cc:ab:20:04:1c:7c:76:99:32:05:b5:7c:ed:b3:ba:07:50:
aa:e6:a2:9a:23:a4:0b:95:3c:c1:10:68:b6:78:f8:68:8e:9e:
be:c0:8c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:39 2026 by rpki-client