Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
File: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft (raw, json)
Hash identifier: Q+aWaU3eIWfWgiNX743mf2OpyItemiKJMKPy6n6ER+A=
Subject key identifier: DF:04:13:43:8A:A8:EB:68:BC:AC:2D:EA:24:4B:C9:9E:9C:F0:AA:9C
Authority key identifier: 64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
Certificate issuer: /CN=64a7a6cd583814d393bee2635b545574cc75620c
Certificate serial: 019D992B91B92BA75CE033955AD861CA30A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
Manifest number: 14F4
Signing time: Fri 17 Apr 2026 02:01:02 +0000
Manifest this update: Fri 17 Apr 2026 02:01:02 +0000
Manifest next update: Sat 18 Apr 2026 02:01:02 +0000
Files and hashes: 1: EsvahZdQZVhluZsLSr98J_sMDK4.roa (hash: DNS5SQ17LOTRnwWYUw1eb+IWwNLBZu1qV/4r+8SuduY=)
2: ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl (hash: mk/KVwj94wnHWQIvEh/b6IltNCsZeEwpfzlxNM3eBik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:91:b9:2b:a7:5c:e0:33:95:5a:d8:61:ca:30:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7a6cd583814d393bee2635b545574cc75620c
Validity
Not Before: Apr 17 02:01:02 2026 GMT
Not After : Apr 18 02:01:02 2026 GMT
Subject: CN=df0413438aa8eb68bcac2dea244bc99e9cf0aa9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ac:1e:ba:42:31:bd:7e:6f:dc:58:ad:b2:a8:
40:01:80:e8:c7:ce:3c:c9:40:f4:d5:64:29:00:76:
34:49:3b:01:b2:50:e3:33:b9:b8:ca:48:e8:87:00:
ee:79:33:ae:3a:bc:1f:73:b5:9a:e1:f2:0d:53:7f:
a5:a7:68:c0:fd:f7:3f:94:5d:b7:4a:b3:c8:41:7c:
2c:13:51:fb:8c:59:e4:c8:6f:31:99:53:48:c2:fc:
c2:a4:20:45:59:02:cd:0f:81:2d:14:c8:ae:bc:f4:
79:25:bc:ad:24:4f:31:13:af:16:63:ea:cc:af:84:
ad:25:2d:33:e2:f4:d5:3b:18:eb:6d:61:80:98:f7:
eb:15:65:22:c8:10:49:c0:00:6e:be:93:87:b6:2b:
33:36:bb:45:e1:cb:e2:d2:a6:56:5e:d6:69:a1:26:
1d:38:51:0f:62:62:6b:99:22:50:98:04:29:84:c5:
7e:d7:96:35:44:33:2a:eb:52:77:d9:e6:d0:73:04:
56:a2:83:97:ad:46:21:a8:af:00:8b:6a:49:3b:9d:
51:b6:ab:2e:67:8a:f2:05:8b:14:55:0e:f6:56:a2:
0c:e1:55:09:7d:c4:8c:cb:e8:28:27:aa:e5:f8:80:
f1:c7:da:21:57:0c:d6:fd:66:5d:d8:1c:a1:a5:e1:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:04:13:43:8A:A8:EB:68:BC:AC:2D:EA:24:4B:C9:9E:9C:F0:AA:9C
X509v3 Authority Key Identifier:
keyid:64:A7:A6:CD:58:38:14:D3:93:BE:E2:63:5B:54:55:74:CC:75:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8d6f1a-d334-418f-b726-6f5d8a74a0e4/1/ZKemzVg4FNOTvuJjW1RVdMx1Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b1:00:b9:21:de:82:9e:40:81:b9:89:77:d0:47:4e:95:e5:
ae:2e:bb:a0:f3:07:50:fc:15:0a:18:62:75:a2:e3:b1:90:73:
62:59:c4:77:cf:2b:dc:05:ca:89:4a:e8:f3:e7:51:de:fc:7b:
01:7d:e8:c1:41:cb:12:ea:0d:5c:18:bf:6a:f0:07:70:81:91:
5e:63:21:0e:b6:59:1c:af:0e:79:43:57:69:f2:3d:17:0a:db:
de:b7:80:0f:79:e5:cc:37:3e:d7:d9:7d:3b:dd:e1:16:b5:ac:
30:ca:78:3b:af:67:f2:4e:5d:95:39:7a:31:4e:6f:e7:eb:2c:
64:6e:fa:ed:1c:a6:95:56:9c:62:c7:9a:0b:a4:08:1e:05:1f:
10:bb:a7:04:90:f8:bd:2d:42:9b:24:2e:ee:ec:e1:59:a7:d0:
bd:db:db:68:b5:ae:d5:c2:c7:98:9c:88:90:ff:6b:ca:75:bc:
c2:c9:db:4e:11:4e:65:dd:06:63:30:14:c8:76:72:27:a1:69:
a7:5c:09:28:66:1a:d7:26:a3:a0:90:a2:2b:2f:cc:46:08:0f:
c7:a4:3f:31:5e:a0:71:39:66:99:41:12:3f:62:b4:ff:46:c9:
ec:a7:60:fd:a8:2e:77:b3:c9:d6:0c:55:e1:9c:1e:ac:09:33:
56:9c:be:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:13 2026 by rpki-client