Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: LYTN233oaaoEQVTdKH6mtufx2dbw8iD7x2l2cjWidVg=
Subject key identifier: 4B:01:51:BB:D8:45:B1:A9:BC:94:0E:C5:37:68:E4:8F:3D:4D:21:08
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 019DD087ADA66FA7B6B64FB58F12F14EE67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 20:00:45 +0000
Manifest this update: Mon 27 Apr 2026 20:00:45 +0000
Manifest next update: Tue 28 Apr 2026 20:00:45 +0000
Files and hashes: 1: B9HNNW3Bz7oID9G3-lfUfNqxyrY.roa (hash: tzCu3LyuSxup7J333i9m+mIRLj60qx1pJbahNRpyJGA=)
2: MUOyRWPN46PNKkdduP0g7nQfNok.roa (hash: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: LOzgTywVc9CaYwhWCk377hkvMT6dOgJg0/d1I+aajIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:ad:a6:6f:a7:b6:b6:4f:b5:8f:12:f1:4e:e6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Apr 27 20:00:45 2026 GMT
Not After : Apr 28 20:00:45 2026 GMT
Subject: CN=4b0151bbd845b1a9bc940ec53768e48f3d4d2108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:85:5d:af:6e:07:ca:6d:ae:9e:5e:82:73:
95:99:6c:f5:4f:4b:b9:3a:6b:2d:fe:fa:43:26:fd:
7c:37:84:cc:c3:d4:dc:7d:b4:a6:40:00:36:37:ff:
cf:af:66:80:4f:d1:cb:5b:dc:eb:45:b7:e3:10:40:
ca:03:21:7d:65:90:85:ff:9a:09:cb:03:72:97:83:
f5:9d:83:2a:c6:3c:93:93:24:0a:d8:6a:92:fe:f6:
16:11:29:35:b2:fb:b3:81:eb:9e:61:54:e5:10:b4:
d4:df:dd:17:6e:95:37:23:ec:43:22:bf:97:46:0d:
80:14:8a:27:fe:c7:07:5d:65:a4:0b:29:43:13:4c:
87:bd:28:ff:e7:26:f7:32:fe:cc:10:2e:0b:e8:5b:
43:f8:07:ca:99:f5:6b:cf:9b:e8:6f:51:26:35:b0:
be:86:0e:40:94:e2:22:ce:d3:7c:30:ad:f5:f9:e2:
28:2e:5e:d2:86:3e:d0:8b:44:45:aa:19:d9:3b:8a:
e6:28:8c:f2:d0:24:1b:db:7c:e0:7d:0d:31:e0:fa:
b5:d9:1d:8e:35:82:cf:16:0d:4c:44:1a:2d:9e:7b:
3c:0d:31:64:5a:95:c9:10:0e:a8:73:b3:b1:58:b6:
0d:fb:4e:3c:52:0e:f5:a4:7b:a1:cf:c7:58:9e:bd:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:01:51:BB:D8:45:B1:A9:BC:94:0E:C5:37:68:E4:8F:3D:4D:21:08
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:85:b1:93:44:39:56:28:70:05:16:e9:5a:4d:fa:9f:ca:39:
3e:08:ca:5e:e0:a3:2e:bb:90:25:87:9f:59:4c:87:58:53:56:
a1:21:59:c3:46:b7:78:24:57:6b:66:00:9a:70:10:67:3c:b2:
a1:f8:56:b7:ac:00:ff:43:c3:05:f8:0f:2b:77:c4:60:6d:39:
c0:9c:5a:28:1b:3a:95:d6:20:ad:cf:b6:50:dd:f8:4d:3a:d6:
41:ac:b0:7a:e7:ab:55:ad:68:58:a9:f4:42:71:52:18:93:c3:
79:5b:c5:b1:8b:38:c6:11:f9:61:53:a0:cd:ff:8b:4b:81:fd:
02:a1:ea:fb:3b:f9:3c:cf:6d:f7:6b:b9:16:f0:f5:6d:99:c2:
15:9e:b2:15:a3:e3:78:dc:c8:b2:78:07:a4:43:d3:8f:69:d3:
19:8f:54:58:75:7a:38:cf:9e:52:4c:23:af:f3:c4:6b:86:7a:
6c:c1:1b:0d:79:a0:9f:4e:a5:54:f3:8f:36:09:6b:48:36:42:
c3:50:48:89:ed:4c:1e:1a:bf:56:c2:0c:dd:03:e6:8c:1b:5e:
19:83:21:f2:97:8f:e3:e9:0a:56:6a:ca:94:aa:e3:35:b3:45:
25:df:95:9f:95:48:ab:6a:ba:15:73:69:7c:5c:d4:3b:e3:90:
34:61:98:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:23 2026 by rpki-client