Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: iICi1aM2gdzqmHU2MGkJd0Zp9hKcNdn6kiH2TLxHIKc=
Subject key identifier: 90:11:CD:AE:7B:1E:E5:C0:A5:D7:6D:A1:9D:32:86:DC:CE:DD:82:A9
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 019DCC3D0B971E31B1A733A3D87E8B5EB270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 0882
Signing time: Mon 27 Apr 2026 00:00:45 +0000
Manifest this update: Mon 27 Apr 2026 00:00:45 +0000
Manifest next update: Tue 28 Apr 2026 00:00:45 +0000
Files and hashes: 1: W37sGJ1Z1wl4UUbIKXQMtHltG0E.roa (hash: hXtR6w7vecs+GA3es0V1qVgIw93rkqQSf8/pd9Bww6I=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: y6T8DB31n9IyBdWYZMRLKoIAjDp2l7bVypDIWGhvc2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:0b:97:1e:31:b1:a7:33:a3:d8:7e:8b:5e:b2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Apr 27 00:00:45 2026 GMT
Not After : Apr 28 00:00:45 2026 GMT
Subject: CN=9011cdae7b1ee5c0a5d76da19d3286dccedd82a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d4:23:9d:1f:df:29:6f:aa:07:89:e9:36:6f:
e6:fa:48:fe:dd:69:46:b3:8a:18:7b:a4:36:f0:fd:
12:bd:6f:f3:5e:d2:5f:bb:90:d0:40:1f:4f:3f:8d:
d7:e8:93:c5:2a:02:c1:f3:98:57:fa:ac:f5:05:d7:
84:b6:7c:0d:48:53:7f:6f:80:3f:3c:be:e6:f4:ee:
3b:bf:f1:1f:9d:6e:b2:0c:28:b8:f2:f0:ba:74:48:
8d:0d:df:cd:f4:4c:15:02:cc:9b:0f:b9:c6:92:1b:
af:73:ca:1a:14:e4:26:11:21:2a:33:0c:42:78:fc:
d3:b2:c5:30:55:72:52:ff:7f:e1:51:b3:d6:96:13:
ee:e4:5c:c1:35:f1:00:9a:39:fe:11:0c:9b:fb:40:
f0:32:e3:d7:6e:62:c9:cf:00:3f:89:4c:43:c9:1d:
29:e8:1b:14:c7:c9:5f:96:31:d8:aa:15:1b:87:9a:
00:ea:62:f0:d7:83:c4:92:c7:fc:04:f1:38:cf:cb:
96:53:f4:38:f5:3a:50:30:2e:50:44:b5:2b:1d:f5:
ec:83:8c:b3:04:17:6d:d5:63:07:65:92:78:78:20:
04:2e:be:53:79:52:84:b7:c0:57:07:78:91:e2:f6:
3d:89:91:85:b2:59:2e:7c:29:61:8a:08:74:e7:dc:
00:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:11:CD:AE:7B:1E:E5:C0:A5:D7:6D:A1:9D:32:86:DC:CE:DD:82:A9
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3f:6a:89:7c:4a:c2:ad:b0:44:e4:c5:2d:31:a2:d4:62:68:
85:26:5f:69:bf:f6:b0:5c:74:f7:dc:bb:62:68:f9:d3:08:f6:
6d:23:d9:2e:8d:b8:18:65:6b:32:df:0b:27:8d:6b:a1:e2:2c:
6e:84:5b:99:ad:bd:f6:e2:de:38:6f:ae:07:12:14:37:49:db:
86:d0:6c:49:92:04:0f:ec:f1:4e:98:93:d8:96:b8:83:43:72:
15:47:c7:36:51:e0:dc:7e:d1:26:c0:82:e5:10:dd:76:37:10:
57:52:f5:4e:6f:62:34:4f:be:ec:32:6e:ea:df:97:6b:fe:99:
90:37:c3:93:48:12:84:ce:f0:83:b2:9d:14:46:71:1c:f1:ca:
8d:a9:4a:28:1a:49:ec:09:c4:b1:4e:ff:dc:1c:96:ff:76:3a:
cf:33:0c:26:3f:b9:75:70:8a:d7:c7:02:15:79:74:82:2c:61:
d7:53:56:0d:83:b9:ea:61:85:2a:64:e6:81:94:06:e7:99:22:
c2:52:a0:98:34:24:81:83:3c:99:d8:83:e0:64:14:b4:20:2c:
b2:d5:d3:91:d4:41:cb:9b:7e:e7:5a:f7:c0:6f:71:7e:fd:fe:
fe:9f:5f:03:f3:ca:27:70:ca:42:4e:25:d5:66:1c:fe:92:fa:
ba:db:17:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:44:17 2026 by rpki-client