Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
File: zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json)
Hash identifier: GTploFb2+d7sIGbMaqSEbaM5lldth1oeme18VPrBwVY=
Subject key identifier: 8A:5B:85:5D:10:7B:1B:87:59:D0:3B:69:51:20:1E:1B:A3:A4:DE:3F
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial: 019D99D05C87753966269A6BDFE9DDD930DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
Manifest number: 0EB8
Signing time: Fri 17 Apr 2026 05:01:02 +0000
Manifest this update: Fri 17 Apr 2026 05:01:02 +0000
Manifest next update: Sat 18 Apr 2026 05:01:02 +0000
Files and hashes: 1: Rk6U7RO4py6S9WklbeaSGCJKXHU.roa (hash: HzF7QsaRDlON7L9Y+E6XwRt1hlrnQ4o9Z6yQvpu9Qcg=)
2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: AhBMa4MZpgo9obCwV1OOncntRZpTaCoz/bq9LAmwSbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:5c:87:75:39:66:26:9a:6b:df:e9:dd:d9:30:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Validity
Not Before: Apr 17 05:01:02 2026 GMT
Not After : Apr 18 05:01:02 2026 GMT
Subject: CN=8a5b855d107b1b8759d03b6951201e1ba3a4de3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:b6:ba:0f:32:c7:10:b9:7d:69:20:15:5d:
5c:65:43:38:55:a4:96:12:f2:7e:37:29:62:02:c9:
69:1e:33:b6:19:2c:8f:c3:5b:48:c3:39:c1:5a:09:
6b:73:f1:20:3c:34:0a:db:b8:6b:ba:a2:45:4f:9f:
23:3a:c2:49:6e:33:86:f6:d3:cd:c0:05:b7:e0:f2:
a1:79:d6:59:81:1f:91:d3:01:c3:c3:80:17:55:1d:
4a:81:eb:a6:f1:39:02:d0:92:3c:fe:a9:c2:54:61:
cf:f0:df:c0:fc:b0:a7:48:2b:56:78:26:8d:49:47:
21:58:5f:58:e3:5f:9e:98:39:c6:d0:ee:99:c2:ab:
77:b8:d1:c8:13:e4:30:e9:67:a2:64:06:13:2b:e3:
c6:79:51:86:06:74:46:a4:b6:69:5d:a4:3d:16:8a:
93:9a:49:07:99:01:fd:32:b6:ef:8a:f6:ed:bf:d5:
e0:cc:59:48:a1:85:c3:29:15:36:94:eb:c9:a0:da:
63:0d:00:22:a7:b5:78:7a:ee:b1:16:3d:61:82:c0:
30:91:62:d4:a1:9f:fb:4c:15:71:04:33:1b:3d:ab:
f1:69:6d:34:36:b8:94:2e:09:b0:5c:b4:d5:92:ec:
fd:1d:8e:e3:0a:2e:41:c1:bb:10:97:82:a7:98:54:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5B:85:5D:10:7B:1B:87:59:D0:3B:69:51:20:1E:1B:A3:A4:DE:3F
X509v3 Authority Key Identifier:
keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3e:95:8f:2b:5f:e2:8c:e5:c7:3a:02:03:af:5d:0a:80:43:
ec:7f:48:bd:90:23:26:bf:77:ae:8e:9e:be:f8:b0:bc:e5:9e:
9b:ed:41:29:c0:eb:ae:73:22:39:f2:42:8d:13:d7:92:62:af:
af:4a:f2:b1:75:b4:47:6d:70:e0:55:00:b0:90:dd:e5:8b:4e:
78:e4:2c:0b:48:bd:d3:33:a4:ec:bb:cb:ca:71:d3:b3:49:7f:
37:5a:24:fd:29:6e:47:8e:71:fa:43:14:72:a5:a1:38:9f:08:
eb:9e:0d:5b:47:7e:41:c7:1c:b3:38:dd:73:17:09:ed:d3:ae:
bb:7d:c4:10:48:b6:33:1d:5d:a6:af:27:96:39:6f:f1:c6:51:
0d:23:6e:26:5f:1f:40:4e:8a:78:c2:3c:af:de:d0:a4:8c:76:
d1:a3:6c:0a:ca:b1:fd:a8:94:ea:40:03:87:bb:cd:d1:bc:1e:
85:3b:13:60:16:32:64:42:dc:56:45:73:bb:c7:df:af:0a:d8:
ad:04:74:8d:2a:4e:a9:86:5c:71:79:6b:69:3f:15:15:3a:64:
6e:e5:7b:d3:1d:92:e0:ee:3e:4d:4d:a9:dd:de:43:8e:cc:ba:
e2:6d:ed:2c:42:27:19:bd:b4:db:4f:b6:a9:ea:75:b7:20:f4:
1a:c7:f0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:34 2026 by rpki-client