Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: UA86CxBq7tPSjkbtGHofcgWmVWwMmGqK6fjXcw2UgcA=
Subject key identifier: F3:44:4C:59:CF:6A:EB:31:65:92:D2:5A:98:0B:03:72:C7:06:83:06
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019D99D0789A104E8E5F6C6C7D2127893C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 190D
Signing time: Fri 17 Apr 2026 05:01:09 +0000
Manifest this update: Fri 17 Apr 2026 05:01:09 +0000
Manifest next update: Sat 18 Apr 2026 05:01:09 +0000
Files and hashes: 1: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (hash: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0=)
2: tw9opvf0Dc5mqTovtjfu2Csg6vo.roa (hash: /sxGcP7rnMogpd9PU079PAunh+PKIDCxrO0qaczcWVs=)
3: utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (hash: GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=)
4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: U5pHFDOYBIV0uOUPPOMRXxXc2FUNEWB/X8LhGzfwXys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:78:9a:10:4e:8e:5f:6c:6c:7d:21:27:89:3c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Apr 17 05:01:09 2026 GMT
Not After : Apr 18 05:01:09 2026 GMT
Subject: CN=f3444c59cf6aeb316592d25a980b0372c7068306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:ea:dd:e8:6b:ad:71:f7:f7:0a:fa:b9:ea:
8d:65:e5:9f:ce:ea:6a:eb:3c:37:89:be:61:53:50:
e5:c4:dd:b4:ec:d0:ba:72:71:0f:d0:7a:62:f0:9b:
67:6c:8f:7d:ba:1b:5a:76:31:25:dd:50:75:0c:2b:
af:6b:89:6f:04:f9:49:f2:d6:ff:db:8f:48:03:6e:
5b:aa:78:ad:8b:bf:f1:33:6c:d7:83:4d:67:2c:7c:
c5:8b:a4:77:12:f3:3c:c4:ea:a7:5e:8c:85:00:b7:
84:8d:7a:36:90:4a:8f:8f:ca:ec:77:f1:05:89:9c:
80:9f:ee:5c:e6:dc:e2:8c:39:ea:32:e4:ba:2e:ce:
ad:0d:13:b1:07:49:8c:de:9a:79:88:39:d0:8d:98:
40:28:48:d9:d5:03:60:ed:3b:76:bd:bd:1b:76:7d:
d7:c0:92:72:b5:6e:c0:0e:b6:ad:9a:f3:72:3c:35:
b0:61:77:15:6c:36:c5:3a:80:d8:72:d1:70:f3:2b:
f5:4c:bd:d3:2f:58:cd:f1:db:8c:72:e6:e6:0a:7d:
bd:c5:50:4b:17:99:23:2a:98:cf:b0:20:de:b7:1c:
c2:b1:2a:38:5b:89:ba:db:71:79:20:ef:03:c8:2f:
f6:be:a3:7a:99:de:5e:49:0c:3f:0a:91:d0:52:f4:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:44:4C:59:CF:6A:EB:31:65:92:D2:5A:98:0B:03:72:C7:06:83:06
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9a:d6:cf:46:9c:cf:b9:33:ef:0d:55:cd:60:22:14:c5:ff:
c4:ce:53:77:d6:2e:09:95:0c:df:08:56:e1:bf:f2:17:58:e4:
03:34:58:3c:ac:7f:b2:d9:d7:6d:dc:67:7a:c8:dd:18:41:49:
f3:5e:6c:ae:35:11:53:32:67:40:15:c0:24:e4:f9:5e:14:9f:
57:84:85:09:ab:88:bb:79:87:26:47:5c:df:16:3b:78:13:97:
5d:2a:76:f3:17:e6:a8:1f:56:75:02:81:1a:26:9b:4e:a3:b9:
38:20:07:8d:f8:15:a4:40:75:30:0f:dc:62:9a:f6:cc:81:45:
82:b6:c7:4d:7c:1c:ff:96:ff:89:db:bd:a0:f6:56:eb:30:f6:
ff:16:5a:97:45:e8:01:de:a8:86:8a:b8:40:40:d5:f6:63:45:
44:80:14:fe:15:5e:ef:39:8e:d9:b1:e8:b8:d0:83:a8:3d:cb:
47:fc:2c:d6:12:23:b0:aa:5a:a4:45:31:84:5a:7b:1a:9a:6f:
d9:ae:7a:e2:16:c7:a1:a4:f2:5f:53:be:e2:c3:2d:c9:02:84:
c6:9f:6e:cd:7d:9a:06:7b:2e:8e:ec:f8:2c:52:9e:d9:cf:13:
5e:94:af:7d:76:92:79:bb:65:92:b5:37:ab:b6:14:9a:3f:8f:
7f:11:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:54 2026 by rpki-client