Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: J1o70cW4B/9B40HH7EzZB35/944rqq9Z1NxB3gNwvyY=
Subject key identifier: 5B:E9:5D:66:AA:C4:DB:6D:C3:D4:33:DB:61:D5:25:87:68:44:2E:17
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 019D9BBE63F335A58E5A2760E43233326AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 0873
Signing time: Fri 17 Apr 2026 14:00:38 +0000
Manifest this update: Fri 17 Apr 2026 14:00:38 +0000
Manifest next update: Sat 18 Apr 2026 14:00:38 +0000
Files and hashes: 1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: d66g1ME9ppuXHA3/m1l2SghKZNtdBOKGG6hR02pZWto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:63:f3:35:a5:8e:5a:27:60:e4:32:33:32:6a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Apr 17 14:00:38 2026 GMT
Not After : Apr 18 14:00:38 2026 GMT
Subject: CN=5be95d66aac4db6dc3d433db61d5258768442e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:10:e9:5c:cc:9d:f7:4c:ea:3e:e5:65:57:50:
fd:de:b6:be:4f:b1:24:56:f8:00:40:14:3d:8c:54:
e6:33:c3:bd:91:87:0c:2f:81:e1:a3:ba:d8:7a:3a:
fb:91:49:0a:cf:35:af:a4:59:7b:9f:c3:24:25:28:
0f:3f:6c:28:0c:a0:c9:68:07:35:a1:ce:5d:bf:ab:
39:d9:e0:df:f7:ec:d9:0a:6a:f3:8e:43:d8:78:f7:
54:be:cb:61:4d:f9:b0:50:cb:e0:01:49:fb:f6:14:
1d:7a:0b:c7:68:a2:46:bc:2c:de:d8:f4:a6:3a:f9:
50:a7:d1:66:d3:ba:06:43:0a:9a:7f:d1:49:32:ea:
c2:27:f2:16:ac:81:e7:62:c2:06:f9:f2:ac:23:89:
cb:51:aa:44:00:a6:1a:a4:56:61:14:16:0e:7c:53:
79:64:bb:85:02:b4:05:b2:ed:6a:b0:e2:84:d3:90:
0d:dd:3e:81:29:bb:51:14:f2:35:19:c7:26:3f:26:
cf:c9:c5:6a:36:a8:3f:9c:ff:fd:1b:c5:26:54:47:
14:ce:c5:df:d7:af:72:2e:68:7d:da:12:32:e1:4a:
b5:52:a5:8f:55:c5:4f:a6:88:78:61:dc:35:55:9f:
80:5c:b4:10:61:84:f6:31:53:c1:77:2f:3f:a4:6b:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E9:5D:66:AA:C4:DB:6D:C3:D4:33:DB:61:D5:25:87:68:44:2E:17
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:23:6f:03:0f:0c:f8:6e:46:47:d9:ec:3d:21:23:de:ea:28:
3c:58:63:0b:c8:be:6a:ca:75:db:3c:0e:63:60:21:d5:c5:8f:
48:d0:ef:b3:2d:8f:46:1d:bd:77:42:32:79:a4:57:8f:45:4e:
ff:98:ae:4e:dc:94:cd:d7:0c:ab:3c:37:d6:20:0b:53:b5:ed:
42:1b:78:4c:46:6f:b4:ae:95:31:40:b0:f2:76:44:0f:fc:e9:
39:49:47:50:e9:d3:a4:18:85:82:c2:be:d3:8e:65:09:5e:63:
06:83:8f:dc:37:01:1d:96:44:ae:11:65:f6:75:1b:b8:9c:36:
21:dc:d0:99:35:7b:c6:28:a2:c1:3a:8b:03:b5:c4:a5:1c:9d:
ac:e3:c2:d7:b3:c9:e8:6a:4e:5b:c7:8a:b7:b1:53:53:9c:6a:
41:ac:1b:41:dd:a1:d0:a0:be:70:8e:ed:11:ce:cd:10:7a:a7:
ab:ac:a9:ca:7e:43:11:22:19:3a:d0:7c:4f:3d:6c:f0:84:a7:
1d:8a:8b:55:57:79:d2:f0:2b:19:db:4e:35:2d:18:eb:65:87:
33:7f:a6:5d:83:9d:ec:5a:26:ce:db:4d:6b:b9:14:aa:98:30:
a5:17:73:51:76:47:3b:b6:85:79:11:56:16:58:3c:f2:43:0f:
f9:9e:d4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:04:52 2026 by rpki-client