Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
File: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft (raw, json)
Hash identifier: LWA+e0jPFAYkU8pbucpnXQgU9QoFTezBUw8o75Ju0G4=
Subject key identifier: 17:D4:18:7C:81:98:C1:26:8A:64:B2:A6:74:61:BB:19:69:B6:F2:49
Authority key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
Certificate issuer: /CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Certificate serial: 019D9A3E5B3D3BD49AC69FB831CDD872646D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
Manifest number: 0445
Signing time: Fri 17 Apr 2026 07:01:10 +0000
Manifest this update: Fri 17 Apr 2026 07:01:10 +0000
Manifest next update: Sat 18 Apr 2026 07:01:10 +0000
Files and hashes: 1: NS4bJSf8JtisPPo4E4AUvgYiJkI.roa (hash: kNAqy7sfsX/DzrejY1IHLtdhRNkU/dXjQEKN71zDd5M=)
2: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl (hash: I4n0Pixtzqa9BT2FaYvhcH1GkAIkTUBizXLmOLbdub0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:5b:3d:3b:d4:9a:c6:9f:b8:31:cd:d8:72:64:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Validity
Not Before: Apr 17 07:01:10 2026 GMT
Not After : Apr 18 07:01:10 2026 GMT
Subject: CN=17d4187c8198c1268a64b2a67461bb1969b6f249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:c0:9e:68:76:e6:75:4c:d1:5b:60:e8:43:
32:91:a8:90:54:99:a3:d2:82:80:66:48:e5:eb:c3:
f6:ef:f9:f7:ca:ca:c7:e6:b3:20:4a:10:34:e0:e6:
c4:85:41:ff:90:da:fd:0f:a9:d0:ab:53:2f:f6:61:
25:82:a2:38:ed:f4:fc:5e:a6:d8:fe:f9:cd:24:ae:
26:6b:fd:ab:28:88:25:2c:41:20:e7:b2:8c:41:c2:
22:2f:9c:22:6c:7d:3e:a1:48:13:8a:8f:c4:18:e2:
3e:07:a5:49:00:cb:c2:48:4d:dc:e9:82:b5:e7:00:
f9:e9:d7:1a:87:e7:a3:d1:0c:98:c4:2e:4a:fe:6e:
85:ee:89:71:8a:08:fb:bf:4a:d5:23:9a:16:ab:65:
97:8b:ee:52:f2:1d:61:3c:68:36:a9:17:4b:1a:b3:
cb:42:a0:31:b0:23:d5:83:d4:24:ec:17:96:4b:dd:
6c:3e:94:27:e1:d9:02:79:ec:c4:57:33:53:84:9d:
d2:d0:ee:14:94:63:0e:58:9b:29:cf:e8:ae:f2:6b:
cd:5f:c5:65:95:d5:cf:7e:db:8c:95:fd:65:91:48:
1d:a6:64:0c:e7:dd:a1:ae:71:d7:4d:3c:54:ba:13:
c5:f2:7a:81:c4:c4:c6:8f:db:ad:a2:45:a8:68:fd:
17:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D4:18:7C:81:98:C1:26:8A:64:B2:A6:74:61:BB:19:69:B6:F2:49
X509v3 Authority Key Identifier:
keyid:64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c6:d6:f7:ff:9e:f0:e9:6b:ad:64:8d:7d:88:34:01:4b:79:
ac:6f:5f:27:26:60:4d:2d:90:d8:b1:bd:41:b2:00:3a:5b:e3:
27:46:f2:2d:60:7d:07:3a:07:f2:06:8b:79:f7:20:52:82:9a:
d0:53:4d:2c:1c:c2:51:40:37:d7:c1:e8:68:d0:79:e4:1f:7e:
9c:f9:08:87:57:72:0d:b9:57:01:45:7e:30:10:73:fb:9c:ef:
36:0e:5a:9f:5b:51:fa:13:d4:35:10:c5:2d:c5:a1:29:62:66:
b3:e2:df:93:3d:d8:12:0e:d6:4d:94:cc:68:dc:6b:23:26:be:
4f:e0:d0:75:ec:05:9d:f6:f5:e9:b1:2d:b4:5a:be:72:ce:30:
f4:a6:28:8b:77:04:3a:e1:7d:bf:5b:74:52:16:8a:49:d3:27:
92:c6:a2:1f:8f:43:fc:40:28:1c:96:89:60:f1:78:3f:58:e1:
d9:7f:78:69:67:0e:69:78:98:64:71:9d:3c:83:d0:f8:78:0f:
ec:94:17:6a:0f:bb:ea:f5:0d:41:42:2c:20:4c:17:6b:0d:52:
37:eb:f4:18:d5:2d:2b:3b:3c:74:e5:80:b3:19:82:c8:30:a7:
c0:62:68:a2:66:5e:07:ff:0f:96:f9:c0:ee:d9:31:39:6b:1d:
5e:b2:a3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:19:48 2026 by rpki-client