Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
File: zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft (raw, json)
Hash identifier: Zje21Q56oQAzVtFJ0CFWUr05gjs7kfiq07//poY5bJU=
Subject key identifier: CA:B6:72:A7:E7:6D:3A:2C:A4:A9:FA:4E:4F:DD:B8:FB:E5:8B:22:7A
Authority key identifier: CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
Certificate issuer: /CN=ce10101388b7ce378707993a0576aa3ddd95a979
Certificate serial: 019DA3414468BB4A74F3FE494F1F8ACA1FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
Manifest number: 66
Signing time: Sun 19 Apr 2026 01:00:56 +0000
Manifest this update: Sun 19 Apr 2026 01:00:56 +0000
Manifest next update: Mon 20 Apr 2026 01:00:56 +0000
Files and hashes: 1: i9y06XpGQ7gr-mdfp0S7uUFwlS4.roa (hash: /g2Zo7QZ+s2u4dfNouu8ACPFZIuHW58Outw73PTsBo0=)
2: zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl (hash: bJVf/1SLmjrO0WGWEbpa7Jo7sfnE0eSoc2aEyMg34FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:44:68:bb:4a:74:f3:fe:49:4f:1f:8a:ca:1f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10101388b7ce378707993a0576aa3ddd95a979
Validity
Not Before: Apr 19 01:00:56 2026 GMT
Not After : Apr 20 01:00:56 2026 GMT
Subject: CN=cab672a7e76d3a2ca4a9fa4e4fddb8fbe58b227a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:68:1f:bb:8a:ed:04:a7:46:70:b9:76:d1:
d9:93:c3:b7:6e:d2:24:de:ae:1e:4a:09:d9:7a:bc:
08:50:60:22:ff:a8:80:19:e1:fe:ea:54:9b:74:f6:
67:9c:48:75:91:30:20:2e:0a:1e:d4:ae:05:bd:9a:
c8:fe:f0:e1:ae:a5:02:11:d2:79:0e:98:5a:2f:6b:
9d:7d:dd:57:76:92:2e:fd:94:6e:d4:8e:3e:3c:0c:
bc:7b:9b:fe:fb:5f:9c:2d:0b:f8:29:75:04:4e:4a:
0c:f9:a8:28:24:e9:b4:74:e4:0c:eb:4d:91:27:e8:
60:e6:4e:fd:9b:bb:37:9e:78:d5:2b:2d:9a:93:9a:
c5:59:fd:64:0f:f2:67:22:ba:40:f0:5b:30:87:fc:
2f:3b:47:6d:4c:8f:90:56:c6:52:ea:35:fd:07:fe:
d1:0c:40:db:74:f5:61:b9:12:f7:93:f2:1e:91:ba:
43:70:6b:cb:94:60:fb:e9:36:22:25:5a:8a:39:46:
16:bb:9f:79:00:8a:05:7e:0b:ba:8a:c1:12:48:b9:
f7:34:36:fd:cf:23:54:ed:c7:46:bc:76:20:86:00:
e1:b7:61:66:e6:7d:8f:09:5e:d7:bc:b6:c7:c0:85:
1b:7e:5b:52:74:69:8b:a7:82:a6:8b:df:92:8e:c4:
4f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B6:72:A7:E7:6D:3A:2C:A4:A9:FA:4E:4F:DD:B8:FB:E5:8B:22:7A
X509v3 Authority Key Identifier:
keyid:CE:10:10:13:88:B7:CE:37:87:07:99:3A:05:76:AA:3D:DD:95:A9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhAQE4i3zjeHB5k6BXaqPd2VqXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0c56b-67ef-4007-905f-da3c267a2528/1/zhAQE4i3zjeHB5k6BXaqPd2VqXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:66:d1:2a:b2:cd:1e:61:20:01:9b:27:45:2c:47:28:55:ea:
06:f0:ef:ed:02:68:b0:f9:c6:7c:41:db:c5:1e:35:f0:5b:52:
4c:29:8a:5f:d6:65:4d:4b:f4:d5:5f:50:67:33:b9:c4:f8:4d:
e6:88:71:82:de:54:9b:48:a9:09:02:8c:b3:fc:63:43:bd:df:
65:c2:ca:5b:aa:9d:43:a1:a1:06:b0:8b:61:90:a3:17:b1:48:
07:3f:79:f2:d8:44:5a:8d:77:6c:e1:24:89:36:27:c3:c9:3e:
af:5a:fb:76:05:ac:97:3f:b0:af:89:61:b6:e9:b7:cd:7e:51:
a3:4e:48:38:7e:ec:20:c2:36:2c:0d:57:0e:ee:5a:24:35:2f:
b7:91:b8:c6:0c:00:c7:e2:60:b2:67:0b:a2:c6:d1:48:31:af:
39:13:55:bc:e3:44:cb:67:ac:6d:b4:f3:d0:71:32:97:8a:06:
c4:a1:10:11:d7:de:a2:ad:80:dc:a7:ba:cd:c5:a3:b7:a6:5a:
4a:48:ea:20:3e:96:69:c1:c8:50:28:5e:31:a2:7e:08:bc:eb:
5b:05:a2:a8:09:ba:7d:d4:78:ed:ce:bc:b0:22:1a:9c:01:7e:
8d:e5:77:65:23:b7:d6:d0:2d:8e:db:19:d6:af:41:44:48:6e:
12:57:1f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:13:09 2026 by rpki-client