Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
File: zUNP2FkiOudujXhkipNylejs15o.mft (raw, json)
Hash identifier: mMW1sezwep5TMF1nxbG2WB79G+IRHAHGARrhkCA4YkQ=
Subject key identifier: CB:D6:52:B0:46:CD:E9:52:9D:4D:D1:0F:8C:6F:70:1A:2D:E6:CE:78
Authority key identifier: CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
Certificate issuer: /CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Certificate serial: 019DA2D30CD0F96ED8190F8D4D0A8081A872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
Manifest number: 0874
Signing time: Sat 18 Apr 2026 23:00:33 +0000
Manifest this update: Sat 18 Apr 2026 23:00:33 +0000
Manifest next update: Sun 19 Apr 2026 23:00:33 +0000
Files and hashes: 1: uDy0uboGuQ8F6QOEny3tapvn0PQ.roa (hash: 3MCli/TbeRr8V0MnXhO1yofF6LpNILL0P0q1Ula5Od8=)
2: zUNP2FkiOudujXhkipNylejs15o.crl (hash: BWMcVv/L2T70HPXyY6zWtt0admsCInPJBiQFea7Ftro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:0c:d0:f9:6e:d8:19:0f:8d:4d:0a:80:81:a8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Validity
Not Before: Apr 18 23:00:33 2026 GMT
Not After : Apr 19 23:00:33 2026 GMT
Subject: CN=cbd652b046cde9529d4dd10f8c6f701a2de6ce78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:35:95:cc:c9:58:76:38:92:2d:1e:eb:2e:
7b:85:02:8c:36:af:24:16:fb:2e:e3:03:1f:b5:a8:
06:b4:5d:52:26:b9:65:a1:e8:de:38:7b:26:bc:e3:
ed:82:d7:83:66:07:14:4a:d1:df:38:e0:49:9f:79:
a7:5b:4d:06:22:82:42:fa:96:5a:8a:ea:1a:ec:d1:
49:7e:1b:0b:f4:90:cd:e6:39:59:1c:bf:78:1b:50:
f8:6b:74:36:eb:fe:ed:45:b2:e9:a2:bc:d6:49:b4:
a7:08:1b:c8:b2:c6:b1:39:9b:b6:45:fe:46:30:48:
ba:d4:2b:ea:77:eb:9c:4b:e7:98:2f:bf:04:0a:b1:
6f:77:a9:f7:0b:25:1e:19:5b:5f:7b:db:29:63:cb:
68:ce:32:6f:ed:61:5d:4c:c0:39:28:40:2c:19:a8:
6b:5b:f4:55:38:69:1f:a4:4e:1f:1e:6a:7e:ad:cd:
66:d0:47:9b:a7:52:86:d3:a9:66:7b:6f:be:43:f5:
fd:33:c8:26:75:3e:ec:08:3a:24:2a:53:4f:68:dc:
d6:89:e0:64:75:c6:08:ac:31:f3:77:a3:41:f1:61:
f9:02:e4:c2:73:0e:fc:ae:fe:30:26:6c:e7:3d:2c:
8e:6a:2c:7c:1e:af:43:ac:20:78:e4:f1:2e:43:13:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D6:52:B0:46:CD:E9:52:9D:4D:D1:0F:8C:6F:70:1A:2D:E6:CE:78
X509v3 Authority Key Identifier:
keyid:CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6f:0f:e6:c7:f6:08:54:87:13:88:fa:36:7e:ac:09:c3:6f:
62:f1:10:33:b5:66:9b:dd:81:04:d5:88:45:c2:32:c5:f0:b2:
2b:71:95:bd:9b:24:90:d4:61:20:a1:67:62:28:b4:8b:03:08:
5c:18:de:17:07:bc:73:73:e7:64:4a:69:63:d8:86:95:6d:66:
62:89:13:97:e4:73:dd:75:66:e5:c2:76:88:60:43:80:32:41:
1f:07:18:18:ce:8d:13:2f:0a:df:75:64:65:01:36:20:b6:b8:
91:8f:44:53:80:7c:03:57:28:6b:8c:49:8f:8d:c9:9f:ee:7a:
a2:c8:0f:c4:da:3a:da:26:e2:1d:bb:70:f4:17:08:49:c6:f5:
f7:4d:bb:78:6a:d9:96:3b:3b:54:15:4f:37:b5:5d:f3:a5:94:
a2:2a:b8:bb:96:a9:0b:df:d1:22:57:35:25:a6:17:98:bd:20:
85:b1:88:e8:bd:00:4e:e3:27:83:6d:08:4c:63:74:97:7f:eb:
8d:09:59:47:63:85:87:68:20:ee:47:16:8b:da:b2:e4:9f:d6:
16:ce:8d:35:01:fd:67:06:85:bc:c8:2f:54:39:03:be:03:ee:
1c:b1:7e:5b:f0:2b:c4:05:a4:41:c6:d7:c2:83:d1:a4:ad:f0:
1a:fe:2a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:16:07 2026 by rpki-client