Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier: Ep6CLWtGhRtUXyEHheDQHwKATWRK7zVD9nLewEWW+PU=
Subject key identifier: CA:F3:02:E0:62:FA:84:46:18:06:56:F1:56:52:B0:72:EA:4C:A4:6D
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 019D98F4E9EB634B0CF7C6855DD6F690A0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number: 1404
Signing time: Fri 17 Apr 2026 01:01:20 +0000
Manifest this update: Fri 17 Apr 2026 01:01:20 +0000
Manifest next update: Sat 18 Apr 2026 01:01:20 +0000
Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: mGBPe01/1WTzxLGOEuqwfDKfyfuXk0t0XhE1d3Vkq7s=)
2: TJgG5JgLQBCuHjTc6SCRX0Gwecs.roa (hash: sbP+Ctp1kLffFP2dFlRcWQm0kZSgtgHBUAs9I18M36w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e9:eb:63:4b:0c:f7:c6:85:5d:d6:f6:90:a0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: Apr 17 01:01:20 2026 GMT
Not After : Apr 18 01:01:20 2026 GMT
Subject: CN=caf302e062fa8446180656f15652b072ea4ca46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b8:96:73:0f:cc:6e:3d:3e:a6:54:97:0e:40:
d1:f3:f5:c3:78:33:b2:3a:5a:46:7c:74:c6:0f:fa:
bd:2f:72:86:56:a9:10:99:81:0e:73:44:ff:2a:ec:
f7:96:91:6f:2b:b4:91:30:2d:96:65:12:97:f2:d0:
23:dd:6b:13:60:c8:bc:e2:da:65:85:9c:d0:e7:80:
53:d0:48:1c:e1:56:c9:34:75:59:dc:05:93:93:b8:
e6:6b:f7:d5:93:9e:b1:29:f0:c2:c6:97:f8:c4:eb:
aa:66:22:ec:f5:4a:02:73:4b:2f:99:ed:0d:fe:b5:
96:91:60:e8:db:4f:69:79:42:1f:d0:b4:e8:27:07:
56:a2:4a:6a:8b:da:ea:fe:9c:81:52:03:f5:9e:30:
81:f1:73:b5:35:60:d0:4b:c2:78:35:d2:3d:4f:b1:
9f:26:20:5b:92:e4:ca:97:60:ba:f2:82:69:1d:85:
03:e7:81:a5:3a:da:10:c4:ec:ab:41:8e:da:fc:17:
27:de:62:40:9d:d7:0b:83:d3:5d:59:71:24:e4:84:
d6:79:b7:4d:1c:37:9f:0e:01:7a:39:3c:98:81:50:
2f:3a:1b:29:49:73:ec:55:1c:e7:29:2c:c4:0f:46:
83:34:a5:63:e5:32:b8:cf:46:99:1e:5d:4f:de:8b:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F3:02:E0:62:FA:84:46:18:06:56:F1:56:52:B0:72:EA:4C:A4:6D
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2b:26:c2:bb:58:db:c9:4f:76:68:5d:c5:82:9f:02:d9:23:
bc:61:8e:50:95:0a:ea:60:6d:15:ab:d7:2c:f1:c4:ba:2f:c3:
14:0a:1c:70:f1:13:65:e7:20:01:14:f9:33:e4:cc:28:62:aa:
dc:08:a4:0b:cd:2f:98:79:d8:4e:d4:62:c3:ef:1f:65:51:80:
02:b7:35:c8:6c:f8:cd:6b:c0:ab:c3:77:de:e6:a5:14:db:54:
91:fd:92:24:58:63:57:8b:17:91:f1:c3:5f:35:e7:24:16:fa:
63:6c:66:49:ca:18:98:14:bc:76:a6:ae:93:8b:3f:37:3d:f6:
9a:1e:07:eb:7e:26:bf:35:39:c0:1c:bd:5b:ef:85:8b:b5:4f:
07:10:47:dc:9e:54:77:73:c7:bf:0d:6d:e5:f7:04:fb:2d:58:
ee:b7:a7:32:41:47:13:53:54:37:0c:6d:87:9d:af:25:b9:05:
db:2c:e5:1a:96:cb:ab:9d:6a:51:29:89:52:1f:0f:ae:4f:fa:
fc:3d:68:98:5a:79:0d:cf:0d:c3:1f:3c:2a:6c:f0:68:ba:58:
0a:be:db:34:d0:4a:e6:6c:d7:c3:da:7f:a2:30:ca:b4:45:4b:
f0:36:cd:85:96:64:86:e2:25:79:fb:56:50:39:ad:a7:29:fa:
24:00:8a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:44 2026 by rpki-client