Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: 3J5JIH2X385QsdnTBuWmhEdwhJ4fWw2x3c8FbltvmOs=
Subject key identifier: 5E:27:E2:2E:83:9B:27:09:C0:8D:AF:04:3B:C9:52:75:62:58:B5:2E
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 019DCE991ACA1BC42E995A686902CCB86B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 1872
Signing time: Mon 27 Apr 2026 11:00:33 +0000
Manifest this update: Mon 27 Apr 2026 11:00:33 +0000
Manifest next update: Tue 28 Apr 2026 11:00:33 +0000
Files and hashes: 1: mnbpCMhVQRFBI3ISYQo0OAu64Rk.roa (hash: kpDbhBfOi3H13L7NCoXgIwXVigbDMdLQLlKaVJyFWOo=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: CbWzCphEksKy+tRNM/Z/YnvtjLkQFwPvfarGcNLSaok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:1a:ca:1b:c4:2e:99:5a:68:69:02:cc:b8:6b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Apr 27 11:00:33 2026 GMT
Not After : Apr 28 11:00:33 2026 GMT
Subject: CN=5e27e22e839b2709c08daf043bc952756258b52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:ae:25:e1:2a:50:cd:1a:11:d1:49:b3:40:
26:a1:2b:59:5b:e5:ef:6e:00:63:7d:e5:86:04:cc:
0b:eb:d5:ea:ad:68:0b:f2:10:e8:38:9c:3e:be:3a:
54:7f:c1:74:dc:8d:1b:92:38:a2:68:07:c2:2f:f5:
0f:76:2c:ba:d7:fd:be:2b:ac:cb:ce:d9:24:09:d3:
74:f2:12:5a:33:1b:b9:0c:7f:82:f3:8b:7e:f7:76:
b8:b0:b1:8b:4c:cc:d4:77:f7:dc:2f:b3:2b:d9:11:
2c:4a:1a:89:7f:7f:d2:89:04:ee:fa:52:3d:53:99:
f4:80:ac:0c:bd:16:64:be:60:22:e3:32:43:da:92:
b2:91:e8:9a:c2:b6:5b:d1:8c:49:e1:fb:3b:17:4c:
54:7f:6b:3e:9a:a6:c5:8f:06:f5:04:88:3d:f8:dc:
cf:b8:92:2a:e1:bb:87:79:42:f3:f8:45:87:47:20:
96:04:40:25:b4:8e:65:56:67:e5:6a:96:68:de:2e:
28:6a:f1:27:1d:42:9c:75:ea:1d:8d:4f:7a:de:26:
b4:c3:6a:84:1c:c1:28:3f:2c:c8:41:eb:e8:28:3f:
2c:d9:da:8e:f0:fc:d8:c9:92:6f:17:7b:10:ff:09:
e4:b0:b2:bc:e6:f5:b4:ea:af:83:94:6b:15:83:40:
32:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:27:E2:2E:83:9B:27:09:C0:8D:AF:04:3B:C9:52:75:62:58:B5:2E
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a7:26:e6:45:6b:5b:c9:86:3a:07:ce:8e:1a:69:e1:f1:0a:
65:bc:be:07:2a:3e:a1:5b:28:0f:02:45:61:96:a0:de:7e:9a:
78:82:12:4a:dc:02:31:82:89:52:2a:55:33:97:49:8a:fa:15:
5b:b3:d5:51:71:4f:bb:a6:46:f9:ea:53:20:30:8e:90:9f:6f:
c1:c4:13:bd:fd:91:63:45:21:d1:6d:2d:da:37:ce:0c:bf:08:
16:e5:1e:54:4c:c9:a5:50:57:7e:11:95:e7:ad:bf:5a:af:98:
37:5d:19:49:09:aa:82:30:06:81:f3:cd:7a:ca:29:27:f5:e9:
df:2d:fc:6b:8d:47:e7:b5:a4:bf:da:c4:b2:69:66:26:c9:cc:
e2:51:0e:4f:b6:2f:ab:5d:ee:86:d3:4f:c6:4f:f5:6a:9f:e6:
39:6a:12:ce:22:19:a7:7d:32:67:ae:ed:07:1f:a6:4e:39:b6:
fe:9c:f3:b3:09:fc:85:d5:24:86:72:af:5f:e2:e0:23:1b:a4:
eb:12:e9:42:1a:d3:34:66:06:85:23:66:61:54:e9:24:dd:34:
ff:2a:40:57:5d:93:76:0a:73:8f:46:c9:c3:98:74:fd:f4:ff:
35:37:d4:0b:4a:03:37:74:c9:8d:05:78:10:1d:eb:a7:cb:73:
7e:dd:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:49 2026 by rpki-client