Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json)
Hash identifier: ZeAu8EADHZqb48YabIqqJboqqVbIRNawTpgktMreNSg=
Subject key identifier: 5C:23:DE:5F:B0:AF:6B:CC:11:7D:DF:3A:B2:28:04:4A:F3:94:46:ED
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 019D9AAC46F62EAC927C3E0E7A6055B7B4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
Manifest number: 0D93
Signing time: Fri 17 Apr 2026 09:01:14 +0000
Manifest this update: Fri 17 Apr 2026 09:01:14 +0000
Manifest next update: Sat 18 Apr 2026 09:01:14 +0000
Files and hashes: 1: GyI44ywFgDL-tIZOk-8lHYup6C0.roa (hash: G6Has1owART2ONYwMGdXhGXjBMiqm1IjR539vTMUHLc=)
2: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: Sj5MI14gi1B5UJixNjeqpm5ZqQxbVRaeLcVXHbYXbAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:46:f6:2e:ac:92:7c:3e:0e:7a:60:55:b7:b4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Apr 17 09:01:14 2026 GMT
Not After : Apr 18 09:01:14 2026 GMT
Subject: CN=5c23de5fb0af6bcc117ddf3ab228044af39446ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:0e:d2:27:1b:7e:32:d6:96:fe:84:82:39:
33:ff:12:6b:89:8d:f0:32:17:98:69:74:76:b4:5c:
3e:a9:21:89:7f:be:59:a5:dc:6e:0f:e2:c9:2c:dc:
99:44:c0:4a:de:00:e1:3f:f6:96:fe:94:e0:4b:34:
a2:a0:8a:bb:d5:26:c6:93:d7:be:8b:77:7c:33:33:
7d:b2:41:c3:13:50:10:6a:58:74:60:61:c0:df:55:
c1:40:7c:26:b5:92:9a:bf:f3:4f:7f:33:96:31:d6:
44:c8:28:62:dd:92:10:eb:38:25:48:01:64:c7:d3:
cc:87:7c:9d:14:c8:54:d3:9c:82:13:7c:2c:9b:3c:
81:36:27:d9:7c:2a:30:5e:e6:09:a1:a6:6e:f0:aa:
14:f4:01:43:87:f0:5b:d5:0f:6e:bc:72:36:7f:fa:
66:13:d1:d3:c9:6b:9e:eb:c6:66:0c:3c:51:5f:06:
3c:6f:36:51:45:46:78:39:e2:0f:69:d4:4a:0d:01:
5a:d5:9f:9b:ef:c5:af:da:b7:74:fb:1f:6b:a9:8b:
76:49:09:c5:cb:12:be:0b:e6:17:24:3b:e1:c7:73:
ab:0c:cf:73:c5:68:5d:6c:f8:06:94:05:30:d2:69:
02:37:63:01:3e:90:42:b7:a3:d3:61:ea:c9:b2:ac:
ad:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:23:DE:5F:B0:AF:6B:CC:11:7D:DF:3A:B2:28:04:4A:F3:94:46:ED
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a3:62:6d:5f:1b:65:f4:44:56:e0:11:64:34:06:99:68:4b:
31:9f:72:55:de:f3:01:75:d6:d9:6f:17:b1:16:ec:09:70:2e:
f8:c3:bf:8f:bb:63:e1:62:4b:52:3a:25:6a:e0:6f:83:cd:c9:
50:50:d1:e3:9d:fd:1d:3e:a2:82:b8:0f:ad:b4:92:2c:1a:db:
43:5a:fa:af:7f:a0:62:33:62:19:5e:e8:f9:a0:26:c8:86:f4:
df:5c:9c:74:45:13:7e:bc:2d:52:86:d4:db:fc:9a:03:2d:7c:
ad:d1:48:cf:0b:d4:e6:b1:fd:2c:17:e2:a5:4d:2c:b9:06:9b:
3f:44:d8:ed:7c:42:53:b4:a5:83:65:51:4e:06:d8:df:7d:5c:
19:0e:02:fc:73:42:5d:a5:dc:30:b7:c3:c4:7e:cf:aa:eb:6d:
1c:6e:19:bb:6d:88:5d:e6:86:78:6a:22:97:e3:e3:7c:40:52:
12:c6:39:5b:01:9d:9a:b8:da:c8:5c:c8:09:29:7f:4a:ab:7b:
3e:b2:73:73:c3:00:3d:e8:e2:8c:9c:ef:81:27:d4:e8:3b:af:
17:f9:ab:9b:20:da:c6:58:05:13:d6:1c:7c:09:2c:42:d8:0e:
ed:b6:47:95:60:f0:67:50:85:11:20:70:b6:a1:5b:b4:fc:d4:
54:fb:59:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:27 2026 by rpki-client