Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: Zns5P1oKECW9v9/1B/2sWftbqusAFZjmgcjZ/luCQtE=
Subject key identifier: AF:9A:57:58:6D:2D:D8:1B:98:41:DF:DF:C7:04:F0:78:D0:A6:E9:CC
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 019D98BE1CFA829140FC7D9A5160889C9C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 06E3
Signing time: Fri 17 Apr 2026 00:01:29 +0000
Manifest this update: Fri 17 Apr 2026 00:01:29 +0000
Manifest next update: Sat 18 Apr 2026 00:01:29 +0000
Files and hashes: 1: DQ01J-Cq4hUemzI_hsxFb8NofP8.asa (hash: fcPlXypjGU8YaSASqBijwf7gz4frCYBc1/uFvytFDWw=)
2: sQDcvzwfINZL1YKhOjuNrTumwws.roa (hash: 1SADRpnWZPKf4KWSJGPvG1rU1NGMXTSVZgSGEdq16/Q=)
3: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: UFF/bHyWoShsfC1e4DvokhUVIrtv5VYaYY/JXB+68bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:be:1c:fa:82:91:40:fc:7d:9a:51:60:88:9c:9c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Apr 17 00:01:29 2026 GMT
Not After : Apr 18 00:01:29 2026 GMT
Subject: CN=af9a57586d2dd81b9841dfdfc704f078d0a6e9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:e2:7f:ba:40:ec:12:48:db:e6:f0:26:ec:
5d:93:12:df:27:85:f6:62:11:74:55:6f:f1:7d:1d:
8e:31:0d:01:e8:e4:10:7d:55:25:a6:40:13:11:f0:
ed:e8:09:b2:1a:bd:91:20:4d:e0:73:99:15:72:d4:
b5:19:f6:df:6a:47:67:fb:39:34:f2:ac:ea:22:2a:
bb:5e:b1:a6:b7:fa:2d:8d:a0:97:45:73:89:9a:ff:
47:95:44:ca:a9:f5:56:8f:12:c1:fb:08:35:59:07:
96:90:32:0a:81:00:c1:6e:2e:18:43:30:f9:1f:fe:
3b:a5:e5:a8:4a:b9:38:2b:46:15:e0:e1:45:ad:47:
72:aa:ac:80:20:50:44:ef:57:f0:39:53:f0:87:6b:
aa:ba:d2:19:7a:db:90:aa:f7:41:83:61:97:55:cd:
d4:18:18:07:79:a2:62:86:5e:43:92:6f:1e:58:f2:
ee:3f:8d:aa:f6:69:3e:64:33:3a:97:ee:08:ef:ff:
7a:54:fe:8c:2a:ca:89:10:08:78:2d:b9:98:a0:cb:
e5:3b:59:b7:71:ff:bc:ef:38:dd:8e:65:b3:f1:a5:
ff:fd:4f:f4:70:f6:c5:82:ac:e4:d6:b8:cd:2d:2d:
dc:22:bc:96:87:e2:4d:52:85:65:c6:b2:53:bd:e5:
4e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9A:57:58:6D:2D:D8:1B:98:41:DF:DF:C7:04:F0:78:D0:A6:E9:CC
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8d:13:13:5f:de:35:c5:9c:a8:75:1a:63:38:6f:2a:07:e5:
53:41:eb:6c:22:e4:bf:af:75:42:6e:76:41:8c:5b:51:89:dd:
33:3d:42:7a:b0:45:5c:30:58:50:ea:4c:75:06:c2:74:dd:c2:
88:4f:d9:d2:f3:52:b1:8f:52:9d:73:2b:17:16:2f:03:cc:f6:
2e:ce:72:9d:f5:d8:ee:08:43:5d:34:c0:2c:8f:59:c6:45:2b:
92:66:3d:d1:31:fa:df:2c:3c:cf:59:9f:b7:66:83:94:27:d4:
3a:e8:91:3f:91:e2:29:94:d8:73:77:29:13:20:d7:8e:77:11:
4b:f4:35:cc:fd:2f:ac:11:cb:23:0e:28:fd:2e:71:93:9b:21:
9c:b8:2d:b4:58:89:a6:a3:86:54:f3:98:f4:5b:6b:c3:d9:eb:
4f:ff:82:5a:e3:8d:c2:5b:a7:50:1a:50:db:b3:3f:0c:e8:83:
6f:55:18:e6:16:39:de:f4:90:e2:1d:aa:56:1a:e7:b5:d2:bf:
22:a9:72:e9:61:a7:d7:31:4d:1a:2e:1d:1b:49:98:cf:8d:38:
b0:e0:e5:74:3b:16:4e:6a:f4:01:83:66:8c:0a:02:58:48:2a:
48:3a:c5:4d:6f:e3:f0:2d:f1:ea:44:d3:6f:86:93:39:0a:26:
72:09:25:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:05 2026 by rpki-client