Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: CmT/sjbE3lDOP8TUzWPqqDgzu0ZAvJO+p3c6EHRqkcM=
Subject key identifier: 59:7C:F0:CA:E1:70:DF:F5:A7:3E:18:28:93:9C:17:EB:36:75:BC:B9
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 019DCE2BDE3FEFD9A8E84E9ADE7BAEA6BF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 18DB
Signing time: Mon 27 Apr 2026 09:01:14 +0000
Manifest this update: Mon 27 Apr 2026 09:01:14 +0000
Manifest next update: Tue 28 Apr 2026 09:01:14 +0000
Files and hashes: 1: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: XZAwMN7sfqzEDjMJ+pykIF6TB7E7kbrZSw3XikhGMfA=)
2: jq3mq-50R-JOu-sxSGPaEm55e08.roa (hash: taGtXrf0l3O9eeA97Wyzm9CoWyPxNXpqgCP99+lV8Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:de:3f:ef:d9:a8:e8:4e:9a:de:7b:ae:a6:bf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Apr 27 09:01:14 2026 GMT
Not After : Apr 28 09:01:14 2026 GMT
Subject: CN=597cf0cae170dff5a73e1828939c17eb3675bcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:d3:16:09:3b:f0:bc:5e:58:55:f3:44:cd:
d2:bb:05:9b:72:bc:57:0f:cf:97:91:98:43:76:6a:
8b:f7:d0:ad:a0:ba:33:17:00:72:1e:d4:6e:c9:59:
af:ad:01:20:3b:c1:62:c6:d1:80:63:27:33:0a:93:
f1:3c:e7:2f:f3:b7:51:bc:da:7c:9a:60:22:8c:2d:
42:9c:b3:c4:c4:8f:8f:e5:8f:72:0b:70:a7:a9:5c:
19:9a:32:31:20:7d:fa:57:33:09:00:f7:ba:e4:b4:
9b:f2:31:1b:e9:92:20:e9:2d:78:e8:19:02:aa:ac:
7b:35:76:96:41:3b:24:93:67:c3:d8:e8:3d:55:46:
c5:f9:6e:0d:45:6d:f8:3b:86:3e:76:8c:32:68:80:
f4:10:50:5b:53:ab:9b:2e:fe:4e:a8:50:64:c2:aa:
1c:7d:1a:39:a0:6e:4e:de:ee:07:7b:58:2e:60:f3:
21:c7:91:f8:36:73:0c:22:a6:a5:91:5b:a0:e8:77:
db:e3:d9:03:3a:12:db:c2:11:d5:f2:65:eb:4f:22:
05:da:75:1e:bd:37:8d:82:d5:01:b8:39:a3:09:05:
5e:ad:f6:81:e3:28:02:b0:34:09:9d:39:57:64:34:
69:db:10:92:5e:08:74:b0:50:d0:15:b6:60:ce:90:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7C:F0:CA:E1:70:DF:F5:A7:3E:18:28:93:9C:17:EB:36:75:BC:B9
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5b:8e:76:30:72:a7:73:e3:ca:e7:00:79:7d:7f:c4:78:8f:
7f:5c:53:f0:2c:6e:90:4c:fa:82:37:7b:2c:ea:45:10:8b:55:
f9:00:dc:a0:31:ce:0c:c2:1e:2d:63:69:57:f4:9f:2a:8d:d6:
59:81:93:4a:5f:e8:2c:5d:ab:af:06:eb:2d:c4:5d:99:2e:ea:
be:87:aa:bb:79:5d:c5:02:8a:04:57:04:9d:8b:60:41:05:0d:
63:47:4a:84:e5:aa:68:f7:91:54:ea:d6:a1:ed:96:2f:5b:d1:
89:ef:65:7a:61:7d:e5:5c:d8:52:67:c2:45:a4:95:1b:9a:9d:
c7:86:03:6b:55:a2:24:54:1a:c7:8f:32:7d:41:80:ce:76:fa:
ac:68:3a:0f:55:88:fe:a3:86:fb:5d:86:f7:99:50:4e:d2:6a:
ec:b2:9c:6c:b1:7d:b4:ef:ed:5d:50:40:d2:5c:80:e1:c7:da:
29:91:e2:97:30:aa:8d:a3:e5:82:19:ef:67:7b:3d:dc:d5:09:
a8:0b:0a:92:d9:e8:76:ec:8c:c5:2f:31:c6:b0:0c:28:e2:1e:
ad:ba:55:d9:6b:ae:2a:04:10:03:08:74:32:6d:77:ce:33:ae:
93:ab:3d:e2:b9:8f:73:9d:c3:bd:51:a4:b8:71:d9:02:1e:0d:
54:22:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:01:59 2026 by rpki-client