Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
File: ZRUuTmwkXAP-zfpIv5E5bL7-168.mft (raw, json)
Hash identifier: ts4+aH8QnApNDNCIOtO6xGPXVuyTZWB9+/0zqaXFRPU=
Subject key identifier: 7C:7C:C0:9C:50:BE:E1:2A:39:54:5D:B4:73:C2:9E:6B:11:53:4F:37
Authority key identifier: 65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
Certificate issuer: /CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Certificate serial: 019DB3222CEAA114E2D50731AAF053174683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
Manifest number: 99
Signing time: Wed 22 Apr 2026 03:00:54 +0000
Manifest this update: Wed 22 Apr 2026 03:00:54 +0000
Manifest next update: Thu 23 Apr 2026 03:00:54 +0000
Files and hashes: 1: ZRUuTmwkXAP-zfpIv5E5bL7-168.crl (hash: R8eUK4Ep6gM1m3/H9MaLHsRW8xIhMccB/SiQnuyU+XM=)
2: zNqty2MMMtiYifN34tRpIOVX9sQ.roa (hash: yLB5f8Ek8IZkDyn4YFbsPyCUS3Yue+tSUM0kBMSr3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:22:2c:ea:a1:14:e2:d5:07:31:aa:f0:53:17:46:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65152e4e6c245c03fecdfa48bf91396cbefed7af
Validity
Not Before: Apr 22 03:00:54 2026 GMT
Not After : Apr 23 03:00:54 2026 GMT
Subject: CN=7c7cc09c50bee12a39545db473c29e6b11534f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:60:cc:81:ee:07:80:e3:d9:d3:8e:22:a1:
e7:0d:1b:c1:cf:79:42:e9:06:27:fb:e4:7e:d4:4f:
3e:67:2e:69:d5:b5:b0:4f:a9:f1:25:6f:e5:24:66:
76:56:8e:26:c5:8e:d7:5f:83:d5:10:41:be:e5:e5:
a9:c7:58:7c:e7:61:04:16:b3:04:7b:25:82:53:14:
14:2a:b1:95:94:d6:60:64:19:53:91:01:c1:65:6b:
cd:30:fc:f0:c8:be:31:64:fc:0d:fc:c6:60:35:52:
7b:85:3c:17:53:2c:a6:c5:5c:af:08:ec:ca:31:c2:
c2:cb:68:4a:84:6e:b4:63:8f:3c:3f:40:65:90:c9:
d2:41:aa:ff:79:29:09:4e:8c:73:f6:44:9c:c0:4a:
49:5b:17:4b:4f:37:4b:1e:0e:c4:e9:5f:98:1a:0f:
91:89:d6:bf:34:af:95:16:d9:64:f8:06:ad:3a:20:
82:8c:4a:d0:f6:e6:4b:5e:d7:98:73:37:a8:d0:5e:
21:9f:11:27:23:0a:3e:43:14:18:32:83:36:44:94:
ea:5a:11:2a:a4:89:6f:ff:7a:30:7e:a6:95:25:d2:
9a:e0:88:85:5c:49:c6:17:23:61:72:6e:5a:87:f6:
0b:8f:4f:14:6e:e1:9e:6b:5d:04:6d:85:30:32:ea:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7C:C0:9C:50:BE:E1:2A:39:54:5D:B4:73:C2:9E:6B:11:53:4F:37
X509v3 Authority Key Identifier:
keyid:65:15:2E:4E:6C:24:5C:03:FE:CD:FA:48:BF:91:39:6C:BE:FE:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRUuTmwkXAP-zfpIv5E5bL7-168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a725e2-e715-4fd2-81ec-ea42d6c159f3/1/ZRUuTmwkXAP-zfpIv5E5bL7-168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c8:bf:fa:b0:22:30:66:9d:58:bf:e6:f7:a9:20:06:50:6f:
10:fd:3c:fa:bf:a6:19:bc:59:e6:eb:a1:2f:db:e2:08:d6:41:
c5:14:0d:08:6a:ba:d6:58:e7:df:bf:ee:1f:18:de:75:54:7e:
71:eb:83:96:82:e8:4b:19:8c:23:f3:f7:f4:05:16:25:7c:d0:
18:6d:a5:c4:e6:44:93:40:7d:f5:17:84:4e:8f:d3:57:81:29:
b8:5b:4c:96:ed:14:a8:ed:a4:5b:d1:15:c7:02:3c:f1:3a:e1:
6d:37:5f:16:bf:29:9d:94:de:a3:6c:2e:b8:57:0c:3d:a9:9a:
14:3e:ef:62:e1:79:77:c5:44:28:07:db:1b:7f:b6:25:41:f8:
b7:6e:36:4d:5e:62:f2:2a:8a:41:f2:11:57:c1:d5:34:9d:d3:
4e:81:4c:4c:b8:14:2d:43:4e:d9:0d:dc:2e:17:af:1d:a9:db:
6d:50:57:82:22:ea:3c:50:ac:fd:a8:05:ef:d5:ef:5d:63:b9:
fd:04:0b:40:03:9a:56:f6:fc:7b:01:c1:66:8a:e8:b0:61:c6:
19:2a:47:bb:49:fa:d3:57:83:97:1b:b4:d1:82:35:22:03:7d:
da:5f:df:e2:15:7a:18:d0:bc:b1:2d:47:cd:54:72:e7:0e:9c:
66:40:7f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:30:50 2026 by rpki-client