Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier: +3Q5PD+bsWRtxqa/mSjqNimU3zwvzY/SR3MoUajl7a0=
Subject key identifier: 13:54:E9:EC:4B:61:98:1D:08:67:41:53:1B:C4:2D:7E:8B:53:F1:54
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 019DB2B446486D8775A3AFFE21BBC198A1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number: 15DC
Signing time: Wed 22 Apr 2026 01:00:52 +0000
Manifest this update: Wed 22 Apr 2026 01:00:52 +0000
Manifest next update: Thu 23 Apr 2026 01:00:52 +0000
Files and hashes: 1: bWCw9QvZ0n-9vSDkgSO_NuyUw34.roa (hash: Nv8e19B6F0Z+GsL3XuEotkyjFs4rEednWhdiNCJb51g=)
2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: +Kkj9VfMYm26MbRVBDAv7/bDmjo9UxGtHU8EfkI66gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:b4:46:48:6d:87:75:a3:af:fe:21:bb:c1:98:a1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: Apr 22 01:00:52 2026 GMT
Not After : Apr 23 01:00:52 2026 GMT
Subject: CN=1354e9ec4b61981d086741531bc42d7e8b53f154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:f6:d1:c2:dc:94:f4:4d:50:25:2c:76:c6:
85:3e:a9:f4:f0:25:c8:c9:18:3f:8b:8a:48:a4:42:
66:2d:0e:c3:20:0e:12:a2:e6:6b:97:00:f0:95:b3:
de:61:5f:0b:fd:b5:81:26:27:76:b9:6a:f4:4e:69:
23:3f:1d:f0:ce:14:d5:b3:5d:bb:af:31:06:53:02:
75:19:c0:76:e2:04:61:ea:b4:34:e7:74:19:9e:fc:
9f:e6:45:e0:e4:09:c4:8a:ba:e5:5e:0e:f0:8e:dc:
3a:95:ae:aa:1c:56:ec:86:b2:c2:d8:68:c9:19:cd:
db:de:b8:43:a2:a3:53:be:77:b1:19:47:70:28:be:
a1:a4:5a:f9:43:bc:7f:91:a8:b3:79:94:af:77:c7:
64:ae:76:7a:78:80:ca:c1:e8:8f:d7:88:90:34:80:
93:9c:59:32:a4:3c:bc:28:3a:78:8a:8f:24:d4:5b:
d0:93:50:f1:d2:a7:44:66:d3:7b:36:ef:f4:76:3d:
38:b0:ce:a0:1e:13:58:c7:ad:20:58:0c:9f:6f:39:
35:5f:7b:3f:10:c7:77:d5:39:5d:ff:76:7e:42:26:
84:fb:bf:91:45:d0:d6:93:f3:02:b1:4e:85:ac:bb:
ea:1a:8d:08:52:2b:64:05:4a:8a:f4:e0:1f:28:6c:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:54:E9:EC:4B:61:98:1D:08:67:41:53:1B:C4:2D:7E:8B:53:F1:54
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8c:cd:11:46:f3:f6:42:e0:ac:96:f9:30:e1:f9:6b:00:06:
cf:4d:93:ac:cf:86:af:d3:07:e4:86:63:99:27:36:c1:c0:ad:
5c:ec:01:94:b9:70:2a:28:2a:75:6d:c9:69:be:6a:09:a5:7b:
36:98:1e:0d:0a:56:82:eb:15:14:8e:3a:90:0f:66:c1:55:0a:
b1:2b:b7:04:d1:d0:f2:3f:55:42:29:66:67:08:e5:ea:5e:1f:
49:0f:7f:e4:02:26:cd:d5:c5:9a:5d:af:9b:7c:87:00:a5:cb:
f4:61:4b:c3:2a:a8:95:1c:1c:c2:48:39:32:e4:dd:45:a8:62:
74:48:83:31:91:1a:cb:09:e8:be:cc:e3:91:9e:7f:a6:67:ff:
77:10:f1:95:a3:62:70:bc:f0:37:19:27:0d:96:a7:35:8a:fb:
90:88:8e:37:22:61:74:a4:69:e8:75:91:55:42:9b:b1:32:e9:
80:68:7c:76:9a:30:ab:a1:e6:41:c0:50:b1:32:17:83:6a:9f:
c5:3c:7e:08:2f:e6:a3:30:fe:74:f8:11:f6:20:d1:a4:40:f3:
d5:5c:8b:64:8a:10:1c:13:f3:4d:16:79:21:0f:f5:46:81:0e:
6b:35:8f:7c:53:62:47:17:9f:e9:f8:02:bb:c9:20:8e:1a:0b:
c0:17:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:09:38 2026 by rpki-client