Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: /fW39NZK2BawXahjpzyLrWABeAGaNillWwGqqK2KWsg=
Subject key identifier: 30:17:FB:89:25:01:E7:90:A7:4D:C3:1B:6E:A5:3C:59:0D:AA:DE:D2
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 019DA3E6D0FB9E0B52B0D74CCFB350FD107A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 0752
Signing time: Sun 19 Apr 2026 04:01:46 +0000
Manifest this update: Sun 19 Apr 2026 04:01:46 +0000
Manifest next update: Mon 20 Apr 2026 04:01:46 +0000
Files and hashes: 1: PtaIwv6j_fRPhVi8J0-7j605lCI.roa (hash: TLTnNugB01FAGr+O6mM1yQs38FDf/1kqzR1LqqRn5tM=)
2: iLYecyNvPLJpQj3efxZOTIWXApk.roa (hash: swdILG30N67hGnJzm85h/2MvOrOT4xu46fpnQjTo9Z8=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: j69sUm8fAhdZIukcGnif5lyw17qp6q92xKe1rse8BWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:d0:fb:9e:0b:52:b0:d7:4c:cf:b3:50:fd:10:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Apr 19 04:01:46 2026 GMT
Not After : Apr 20 04:01:46 2026 GMT
Subject: CN=3017fb892501e790a74dc31b6ea53c590daaded2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f9:3f:0c:6c:94:84:81:45:34:97:4c:e8:75:
38:af:58:cd:cf:3b:47:bd:49:31:69:d7:24:76:6f:
a5:07:f2:59:8a:d5:4a:2c:ac:96:dd:ef:e5:8d:ec:
e2:74:ca:fb:f8:d0:4e:2f:18:99:9e:97:39:b7:ff:
5c:ea:ce:82:f7:13:a5:93:39:1d:20:1c:11:12:b7:
53:3f:80:3c:49:e8:3d:53:a5:46:5c:d4:60:54:b1:
cc:13:1e:02:f0:23:3a:ee:45:1a:96:49:73:5b:66:
91:ac:4f:9d:5f:41:98:23:d7:83:d5:5e:5b:f8:2b:
62:82:98:ac:03:85:b0:e0:5a:6d:ff:20:51:0c:9f:
f5:f4:b0:96:51:43:f8:e4:fb:14:08:eb:7d:9b:39:
2f:27:7f:91:d1:28:d9:6b:38:4e:d2:89:b4:1d:d2:
6e:94:46:fd:11:48:6d:e9:0c:fb:ca:ee:06:cc:a8:
45:68:cf:2c:72:ab:8d:a0:91:a8:cd:07:b9:a0:4c:
0b:50:06:55:05:ad:25:cb:13:71:9c:41:03:6c:17:
7e:ca:f8:2d:0e:81:9e:76:35:00:56:10:71:ec:64:
44:bd:20:a6:0b:65:ab:1d:3c:33:fb:42:fc:60:bf:
46:ce:4b:b0:9a:42:81:a1:39:62:44:2a:af:c5:8e:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:17:FB:89:25:01:E7:90:A7:4D:C3:1B:6E:A5:3C:59:0D:AA:DE:D2
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:98:86:eb:ff:09:34:7a:38:83:b3:f8:30:97:d8:5c:88:4d:
b5:7e:b4:b9:c8:b6:c4:6c:24:b3:cb:b8:84:65:1f:e0:af:3c:
95:da:40:f1:5e:56:10:dc:0c:e1:55:98:5e:12:23:a0:1a:06:
db:58:a4:36:70:84:31:44:db:d8:45:af:48:9a:fe:ff:9a:61:
0c:7f:cb:77:2e:ef:7f:3c:34:71:8a:7f:50:51:9f:39:dd:10:
15:aa:44:82:ac:11:97:b7:e5:dc:87:0b:23:88:9b:8c:94:73:
fb:04:4e:28:cd:fc:ef:e8:4d:75:b0:ed:00:fe:68:03:1a:95:
6d:aa:53:10:97:1d:68:49:00:e5:f4:47:39:2b:e2:1a:d7:a7:
c7:4e:ab:2e:8e:59:e4:ea:ec:9f:95:71:7a:2f:36:a0:bf:e2:
88:55:77:fa:a9:4a:c7:ac:cd:76:ab:98:6c:a0:44:dc:5d:ea:
62:0f:19:79:6e:00:67:aa:23:50:1c:e9:dc:d7:dd:e7:73:b0:
15:37:27:f2:95:3b:8d:6d:35:a1:41:d5:73:db:e7:30:65:bd:
16:fb:aa:82:0b:d0:08:2c:33:6b:d3:62:43:a7:54:26:db:42:
45:74:6f:92:bc:e3:ae:fd:a7:b4:af:f4:31:ca:8f:91:80:4d:
78:24:19:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:17:57 2026 by rpki-client