Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: nZ9rQEJ8SILVjM47wKHZr/GnJtDXc57ju4CjgmSAwf8=
Subject key identifier: 99:F7:89:36:4C:47:14:4C:F8:11:54:AB:21:C6:CF:CD:56:6A:03:F4
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 019DA8D5DC190BF799A40468957846F07130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 15E6
Signing time: Mon 20 Apr 2026 03:01:20 +0000
Manifest this update: Mon 20 Apr 2026 03:01:20 +0000
Manifest next update: Tue 21 Apr 2026 03:01:20 +0000
Files and hashes: 1: 3dDFlJIiwev5JNzj0uspF-q-hAM.roa (hash: 2MPQXp2XuzXpOvR5MvmUSNMeQLpCxYJhhEk2RjVnZhI=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: 4JMamGppZbFc1opl6e3YmAENXt4RPfqeFELmyBMHc0s=)
3: tXb-ZOETTYTckpb9Qysc1kmvy6I.roa (hash: ecwsDlNutKSR5EQe4HHz/G8gZ+2PHPrWaHUQyPF5OHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:d5:dc:19:0b:f7:99:a4:04:68:95:78:46:f0:71:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Apr 20 03:01:20 2026 GMT
Not After : Apr 21 03:01:20 2026 GMT
Subject: CN=99f789364c47144cf81154ab21c6cfcd566a03f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:30:77:88:b6:fc:4c:76:eb:38:4a:29:8d:d7:
49:b0:10:6d:2b:54:bd:87:4a:55:e4:4d:a4:a8:0f:
1c:31:4d:6c:09:a2:ec:c5:61:bc:11:f8:60:d8:f5:
b8:87:ec:eb:f2:6a:11:cf:07:bd:9b:a2:71:ba:23:
fa:aa:00:9c:68:65:2a:50:20:23:88:85:ee:80:fa:
83:fb:ab:97:9c:9d:ba:32:64:4c:b5:f4:79:13:5e:
5f:b6:e4:07:10:d4:aa:ef:cf:88:0d:5c:c9:8e:11:
e6:eb:7a:7b:24:9d:7d:b2:d0:be:61:62:e7:d6:28:
0b:5e:4c:80:26:76:3e:aa:8f:cf:28:90:15:42:74:
48:69:8f:bf:5e:38:b6:80:bd:a5:e4:e4:89:bb:53:
f5:ca:54:ef:a7:73:99:29:54:d8:f8:73:2d:8c:55:
5b:77:6c:a9:15:55:00:47:86:05:55:fb:4a:42:e1:
0a:39:e8:cb:76:f1:c1:ec:c5:f0:c8:7a:40:07:74:
2a:25:ec:8a:cd:b2:03:5a:04:a8:99:45:2c:03:9d:
91:be:0e:76:6d:c6:c6:4f:52:d6:03:7a:fb:97:fe:
c3:9f:69:90:b9:f2:d8:49:20:60:13:8a:d4:11:eb:
d6:e9:3c:00:9f:fd:11:e3:8b:82:89:96:20:cc:3b:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F7:89:36:4C:47:14:4C:F8:11:54:AB:21:C6:CF:CD:56:6A:03:F4
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cb:da:78:f9:fc:37:41:63:a6:08:e0:bf:f9:e1:7e:f9:19:
8f:88:d5:c3:8a:17:40:f8:d0:74:bf:4a:dc:88:14:74:b6:d8:
9c:2b:d3:f1:a1:df:cc:d7:d2:9a:35:a2:81:59:95:c5:95:1b:
6b:10:8b:d4:80:6d:9a:d9:41:e7:67:ed:93:7a:da:0f:83:cd:
2a:e6:b4:49:65:2a:29:b9:e8:e2:fb:93:b3:67:45:3a:19:a5:
52:a6:4a:ff:da:70:6d:6c:1e:79:61:bc:40:b3:bd:9b:60:a2:
c8:5a:c3:dd:20:9a:18:eb:d3:f6:2e:db:1a:25:56:d5:d9:d7:
7c:c7:49:28:76:13:71:fc:66:4b:16:d6:12:e5:35:64:2a:ef:
0e:88:51:a4:f6:24:33:4c:77:29:38:bd:48:13:10:6b:c0:68:
73:59:f7:95:94:41:84:3a:76:90:83:4d:2e:a3:98:23:eb:fe:
cd:c3:62:e9:4b:b9:17:f9:e8:16:7b:ba:67:50:e9:c4:da:fd:
10:7e:36:f9:22:22:02:53:11:18:19:3e:18:a3:1c:1f:7f:6d:
28:28:bf:c1:16:5f:1e:30:0d:ad:40:3f:ea:c1:43:d9:6e:6b:
48:b1:c1:64:7f:c0:0f:ba:56:2c:ff:c3:b3:5d:0a:3c:9e:6e:
e2:a4:52:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 09:50:02 2026 by rpki-client