Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: P0c23KPiVGoIauybkvgxSbhFGM4YyESJinieb1NwoS4=
Subject key identifier: 2D:E9:3C:20:04:DC:22:62:37:17:37:34:74:A9:61:9B:45:62:AD:18
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 019D97AB408DD7051377CF6E2D0C115BA7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 0843
Signing time: Thu 16 Apr 2026 19:01:15 +0000
Manifest this update: Thu 16 Apr 2026 19:01:15 +0000
Manifest next update: Fri 17 Apr 2026 19:01:15 +0000
Files and hashes: 1: Utc_slWR8yHDk290AryGYchTlYA.roa (hash: NUCfh9s0WjqwyOFskJUWEakWr/HjDtF3kDLbwsne7Ro=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: NrI+BEKANSAV1wY5kNHmCl4Tt3qpOTYO+HWezpw6ZUk=)
3: zynEh3pPdQY3KJQVgvhOsaYxciw.roa (hash: rOMrg3wVXzNicfVb9K/t1LGxhcGrIWejZTOsjk80vqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:40:8d:d7:05:13:77:cf:6e:2d:0c:11:5b:a7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Apr 16 19:01:15 2026 GMT
Not After : Apr 17 19:01:15 2026 GMT
Subject: CN=2de93c2004dc22623717373474a9619b4562ad18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:08:67:16:8c:70:94:ff:b4:04:fd:4b:b2:
72:78:9f:54:79:3c:63:69:85:ca:3f:ac:ef:a3:d3:
43:72:cd:4a:9b:47:d7:ab:7d:cd:b1:8c:c1:fc:09:
2a:e3:88:f8:e0:5b:b9:4b:3a:bf:e1:01:73:e3:df:
83:68:8f:39:73:4b:cb:a5:f4:b9:37:e6:b0:43:9b:
56:ee:37:b3:6d:42:25:a8:f3:67:2a:73:17:02:74:
f4:7b:d4:36:f9:d4:73:85:63:62:9a:d2:5c:24:88:
b7:ab:90:6b:f2:8f:54:70:6f:6b:c0:41:96:a0:f1:
ab:a4:33:d3:d8:15:c1:99:77:ae:12:ad:e1:d9:9b:
96:5e:2f:51:fb:3a:a9:5a:51:a8:63:b5:79:3c:d2:
7a:6b:57:70:17:a2:81:45:68:81:36:d3:2f:1e:35:
13:be:05:04:50:b4:e7:68:78:df:48:fe:e0:d7:05:
60:13:9b:ff:ad:bf:9c:02:a9:4b:69:bb:8f:3a:6a:
f0:d6:8e:fc:f1:12:5a:a0:e2:f1:15:53:56:d6:86:
93:ea:80:7a:60:88:df:6b:1d:14:99:4c:e0:09:f3:
81:66:4b:1c:b9:47:f4:a4:0b:98:8b:d4:81:4c:aa:
32:c2:7e:ee:54:83:e2:a6:3f:c8:ca:80:b7:f8:54:
aa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E9:3C:20:04:DC:22:62:37:17:37:34:74:A9:61:9B:45:62:AD:18
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e0:a4:d4:05:1f:4c:51:3a:70:25:7b:9a:6c:94:b1:0b:3a:
af:6a:a2:c7:9e:bd:d8:93:62:12:c9:e5:ba:ac:9a:69:06:5b:
be:84:6c:13:a7:f4:ba:d9:25:ef:1c:72:6c:04:ba:f2:4f:0c:
b3:f8:4b:90:db:ab:a5:f4:08:57:c6:5c:72:14:39:49:26:f9:
26:e6:a2:62:6f:b1:44:29:f0:7d:4f:7f:39:7a:17:92:a9:a3:
c7:d6:77:ab:81:24:34:d8:9f:83:02:52:ca:96:c8:77:d4:a9:
a8:9b:43:a4:dd:5d:c5:b0:86:ee:d8:0b:f2:c6:9d:80:13:32:
df:08:c6:6b:0e:d2:26:6d:77:c5:4b:58:dc:10:d8:04:36:10:
60:34:25:c5:43:71:5d:fe:da:37:ab:03:da:e9:90:38:40:53:
da:92:0a:44:41:4f:3c:77:02:96:9d:2f:5b:70:18:72:9d:40:
0d:f7:b1:b3:5c:90:c9:ca:32:e8:c6:0b:bf:9b:65:70:bf:78:
47:c6:34:d6:e3:99:6a:aa:c1:cf:6d:3a:76:b4:fd:73:9a:33:
10:75:52:2e:ec:4d:a5:b1:c3:a2:9d:8e:88:7f:5e:57:39:02:
8a:87:9d:9c:c9:b2:8f:de:41:e3:ce:98:d7:71:98:8e:b0:17:
b3:2a:59:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:54 2026 by rpki-client