Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
File: z0AYX1Us2XUnbANGT1DHpdNRVkw.mft (raw, json)
Hash identifier: xMrx0kgnopUv9uU+Yj6LlH+opLB0tNXhDoJLcMd5EqM=
Subject key identifier: AF:9F:B6:30:DC:08:86:AF:23:B1:65:12:77:AF:C9:15:51:9A:6A:F0
Authority key identifier: CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
Certificate issuer: /CN=cf40185f552cd975276c03464f50c7a5d351564c
Certificate serial: 019D672CCF5D0C3D210F32E602D9C5ED6427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
Manifest number: 01C4
Signing time: Tue 07 Apr 2026 09:01:22 +0000
Manifest this update: Tue 07 Apr 2026 09:01:22 +0000
Manifest next update: Wed 08 Apr 2026 09:01:22 +0000
Files and hashes: 1: laiDZxmXdgJH8Of-yAuGAFD0Nks.roa (hash: 29mbTdf0w60u4m7lifJIKwS951c2LKKJ0JQHfZ51kdg=)
2: wPJ_bWcqiT5Ryc2PrLz-RlxJFfk.roa (hash: WhlDU2CEPgF/HK0/49CMTEtZOnQc9y/7MprKkJl/+MA=)
3: z0AYX1Us2XUnbANGT1DHpdNRVkw.crl (hash: Em4TTGBU2txmzseXDtUhykLURTyweHpElzIgJWgY6js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:2c:cf:5d:0c:3d:21:0f:32:e6:02:d9:c5:ed:64:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40185f552cd975276c03464f50c7a5d351564c
Validity
Not Before: Apr 7 09:01:22 2026 GMT
Not After : Apr 8 09:01:22 2026 GMT
Subject: CN=af9fb630dc0886af23b1651277afc915519a6af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:d2:a3:76:22:66:22:a9:80:b4:63:4e:fa:
9e:c4:29:25:19:d1:65:98:45:7a:6a:8d:bb:af:d3:
9a:db:6c:42:4a:85:5d:ca:dd:69:7e:ac:ec:75:0a:
9b:36:26:20:d9:bb:7b:bc:e1:49:23:0f:6b:e4:19:
e7:15:91:5c:84:a7:88:49:8b:ab:c3:a6:bf:2c:9b:
65:2d:00:32:2b:0c:9d:1f:2b:12:4f:99:2d:47:12:
ca:64:db:f2:5a:31:c6:a1:47:0e:cd:4c:81:d4:42:
83:91:77:b7:1c:c9:d6:58:75:03:4a:5a:9e:97:a5:
5e:d6:24:57:f2:0b:39:9d:63:97:8d:dc:e6:e0:fd:
22:b2:8c:35:89:72:59:75:a7:ce:44:e5:9f:90:f6:
63:56:8e:f8:b7:2d:19:16:15:c9:1a:b6:50:94:0f:
2e:6b:8d:31:23:d7:57:eb:50:c2:23:84:1b:1f:3e:
d3:68:10:87:70:e8:11:ba:83:25:a6:0e:33:7e:4f:
a6:59:47:1f:90:f5:b6:52:10:c2:39:d2:d8:74:9c:
78:2a:bd:f2:23:31:c4:f0:9a:a7:54:c2:d2:c1:b4:
8c:6c:7b:e8:1b:77:2f:46:63:9a:52:6c:72:0d:8a:
f7:f6:c1:61:cb:93:35:4e:78:08:cc:62:bf:51:29:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9F:B6:30:DC:08:86:AF:23:B1:65:12:77:AF:C9:15:51:9A:6A:F0
X509v3 Authority Key Identifier:
keyid:CF:40:18:5F:55:2C:D9:75:27:6C:03:46:4F:50:C7:A5:D3:51:56:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0AYX1Us2XUnbANGT1DHpdNRVkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/1168fa-fbf6-4e07-9ec7-919eefba48b5/1/z0AYX1Us2XUnbANGT1DHpdNRVkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:76:dd:5a:55:98:2e:b0:5c:e2:6f:8e:8f:8f:31:e0:bc:be:
43:eb:3b:9f:45:3f:22:26:bc:86:b0:5e:39:ba:80:36:53:4b:
d1:ba:5a:ed:c3:2b:a1:84:7c:89:c7:a2:fe:4c:99:19:d2:d7:
16:ab:f1:c3:cb:6d:49:07:71:71:9e:a5:aa:39:a9:03:d7:f2:
ba:fb:fc:2a:26:8b:10:6d:8e:73:3a:d0:9a:a3:2c:46:57:b7:
bb:0f:d3:a7:4f:65:93:79:4e:22:98:61:3c:23:e7:ff:f9:8e:
28:9c:1b:e2:2f:47:d0:7e:33:2e:21:38:bd:01:08:72:10:a4:
20:ae:0b:82:4b:a5:60:ed:30:9c:3b:85:a8:5b:6b:a6:46:02:
55:b1:c2:7e:4c:70:e1:a4:18:df:33:4f:f6:dc:67:de:42:8c:
aa:b1:55:e4:63:46:69:37:3d:97:80:e8:18:c7:8e:79:3e:ee:
c0:ac:31:b6:b8:42:b1:ad:e1:24:ba:3c:6b:06:27:d5:bc:fc:
31:78:84:c2:e4:fa:94:03:ea:90:7a:bc:79:65:43:b1:0a:ac:
ff:c4:37:f4:e8:c5:f8:4b:52:31:70:03:07:bc:f3:12:21:48:
da:b5:b7:08:59:bc:f5:d9:d7:e7:62:26:41:3b:24:b6:56:c9:
e8:ab:3e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:05:10 2026 by rpki-client