Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
File: ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json)
Hash identifier: /kNwEbaF4qpsT13GnQdILA+yqai48936a4KUt1xpEik=
Subject key identifier: 38:EC:26:1A:CE:7C:53:C6:EA:89:47:4E:11:80:3F:50:A5:FE:A9:8F
Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93
Certificate serial: 019D9D08596CED8E6621970CE981B64F4651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
Manifest number: 01B5
Signing time: Fri 17 Apr 2026 20:01:03 +0000
Manifest this update: Fri 17 Apr 2026 20:01:03 +0000
Manifest next update: Sat 18 Apr 2026 20:01:03 +0000
Files and hashes: 1: 8ndDa5rRng5A6n53ieZF5n0zI7s.roa (hash: KtGt0NdlDvyNnvEnoJfeg2xWBfVSAuPvOu/PVmj7YGM=)
2: LYW2fplHFaYQiPqvAdr_sKehM90.roa (hash: 8MK6zJkVz5x6OyzTFZpsWSxtzB4SrLx4cMMtXCGfh10=)
3: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: QAQnWkYE37LuL0lenYmDJkFmMRY+NhJunOs6u1wzmZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:59:6c:ed:8e:66:21:97:0c:e9:81:b6:4f:46:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93
Validity
Not Before: Apr 17 20:01:03 2026 GMT
Not After : Apr 18 20:01:03 2026 GMT
Subject: CN=38ec261ace7c53c6ea89474e11803f50a5fea98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:be:09:01:b8:5c:96:db:de:db:af:43:26:
4e:d3:36:7d:c8:bc:66:38:14:53:1b:14:91:41:e1:
6a:42:9e:d4:68:c4:21:32:a3:7d:35:c6:f0:b7:eb:
c7:a4:3d:75:d0:bb:f1:f3:94:8d:68:38:8e:de:fa:
43:17:7d:20:c5:49:3f:e4:53:03:8e:df:e3:ec:7f:
31:ac:b1:d9:ae:a1:14:db:76:03:29:d4:5a:1a:03:
d8:73:49:ca:95:e4:d5:8b:b9:82:e2:8b:cb:36:6c:
f1:86:f4:d2:73:69:55:ae:fc:66:1a:68:e1:b9:a7:
fd:d8:b2:dc:7c:c5:9c:1c:81:ec:92:cc:4e:be:7b:
f8:6c:4f:09:44:a9:43:f6:89:47:16:57:94:c1:d3:
2d:22:83:63:6d:ea:e4:0b:e2:c8:79:b5:48:18:92:
d3:e0:86:1c:34:8a:53:68:ff:4b:89:57:05:ac:5c:
90:56:a3:6f:ea:ba:a4:9f:48:aa:13:b4:fc:0e:4a:
04:a8:72:a3:bb:34:60:2e:ca:08:c1:a2:17:21:0e:
99:68:5b:75:b8:1e:2a:31:5d:c4:e7:02:3f:f5:2d:
d9:f4:2e:1d:2e:78:e7:0c:b7:2d:be:51:10:58:a7:
5f:5a:83:a7:f9:25:18:58:76:42:d7:44:51:a3:48:
25:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EC:26:1A:CE:7C:53:C6:EA:89:47:4E:11:80:3F:50:A5:FE:A9:8F
X509v3 Authority Key Identifier:
keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:61:3e:0a:55:76:34:e6:df:c4:99:b4:58:8f:b7:ab:b1:fb:
60:0c:c3:58:c7:6c:0e:06:4d:86:6d:02:a5:8b:f5:42:3f:84:
46:17:78:91:1c:07:4a:50:f0:43:45:e3:cb:9b:45:18:de:e0:
84:73:b3:30:ca:31:af:2d:c4:82:da:37:e4:29:6d:a5:65:a2:
bc:79:8e:d3:a0:e0:b7:64:c7:b3:a3:91:9f:8a:83:8c:2a:04:
7d:a6:87:cf:a2:35:37:3f:16:ac:d6:14:91:cf:0b:8a:f4:9f:
3f:38:c0:18:9a:39:f2:2e:73:af:11:7d:8c:72:a7:1b:57:40:
77:ad:a0:a0:0a:be:84:5e:71:cc:50:94:1e:97:ed:be:9a:96:
91:11:6f:c4:c5:1d:36:c6:10:5f:d1:16:81:88:3c:9b:98:ec:
a7:33:33:6f:44:81:4e:6a:93:36:b7:9f:b7:8d:7b:99:ad:ad:
c2:25:9a:45:b2:0c:8e:06:f0:43:0b:cb:8d:ac:2b:9c:a7:11:
c0:a4:f4:1a:a6:a3:63:ad:e9:e5:68:b5:c4:ae:39:60:ee:d4:
cb:37:5d:22:a0:9d:67:47:3f:f9:43:6a:ff:ca:39:f1:39:63:
c1:3a:c3:04:3d:53:8d:48:ef:7a:3a:1f:98:96:14:95:94:0b:
4c:87:ae:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:38:15 2026 by rpki-client