Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier: gh7KQR1LaxuoUW5dlOZP7GskJ04TtQWHbPKkMN33gX8=
Subject key identifier: AF:06:AB:18:8A:33:08:0B:97:F9:83:1C:5F:E7:3A:10:4C:06:2C:A9
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 019DCFE33B6E7CDD1C8844136479472950B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number: 082C
Signing time: Mon 27 Apr 2026 17:01:08 +0000
Manifest this update: Mon 27 Apr 2026 17:01:08 +0000
Manifest next update: Tue 28 Apr 2026 17:01:08 +0000
Files and hashes: 1: 5Vvt0AbvSxWyjAd-ALv69QCsNsk.roa (hash: 5/TeIgyVfAlprXjl0P+4FxuBA+lZL0C59tR8RwJwnQM=)
2: Cr-_Jks4-Nf_6cTAfqEm2bEkrqY.roa (hash: Lfoyt36d2xlYMQKhlmP8HR47UA8DZd6j01qEp/DuwGg=)
3: GElj9icCt-w2mx3YliBHFVCYPPg.roa (hash: PirS1DKcgnSFMhly0KbVf5RAZaqtFd0hZcWS32fEx7s=)
4: RGRGMmzLxpqCQOW-phn3KT39D9s.roa (hash: ZUPL8DNkteQ3PG2vzMcT8okE7rH1FO2YVjvr69odfCY=)
5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: Z6NoGP558xSLs0cRVswNR+upd2HpXKWXOyQamKu3lvE=)
6: _LFVw1RdLCWt-By3DgXS7TEwY-g.asa (hash: 7sp68pc4lJoudoB6GmnBQDPxVv/dJsT1KjSRKMkEvH8=)
7: gTAiJcqXUVhZkR4ZXv2cVDvzjVw.roa (hash: H8wggrXDtCuk8Xa7cBwaDqzCfoO3HXFepBg70R4642M=)
8: m1QjC3UV2Ny4UxXqYlT4s7dYaFg.roa (hash: 6V+rFBPB+VWm7if/CwhSgG0t42lVGrHbuCda8HK7Mzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:3b:6e:7c:dd:1c:88:44:13:64:79:47:29:50:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Apr 27 17:01:08 2026 GMT
Not After : Apr 28 17:01:08 2026 GMT
Subject: CN=af06ab188a33080b97f9831c5fe73a104c062ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:f5:94:a7:a2:b4:6d:99:6f:51:b5:1d:1c:
28:8b:fa:cf:0f:57:5f:72:68:cd:15:be:71:dc:e5:
2b:68:6d:92:b6:32:66:94:bf:ad:32:f8:cb:3a:4a:
72:8b:3f:f9:43:63:78:53:60:c9:95:5b:e2:7a:ca:
1f:c5:bb:37:7b:8a:57:50:2d:49:e4:0d:59:64:2e:
7c:0b:dd:bc:88:e9:7d:05:48:0e:ee:b6:73:ba:30:
ea:16:b7:d2:28:f5:dc:10:15:96:0e:c7:c9:44:5f:
40:f1:63:36:0a:c3:3b:eb:13:ac:27:1b:bd:68:1c:
0e:a0:7e:07:64:1b:2c:33:80:df:a3:a0:27:d2:26:
a6:b2:70:ad:bc:72:f2:eb:cf:7f:88:69:8a:2a:f6:
11:46:2b:8e:a0:16:3a:23:d7:52:fe:17:68:29:17:
41:b4:4e:88:1d:6f:88:8b:42:12:69:62:c2:84:aa:
ce:e4:46:f0:bf:e6:b6:38:d6:f9:bc:fe:13:e3:d7:
56:1f:e8:24:f2:35:cf:54:ce:33:e3:83:54:d3:56:
2c:d4:4d:fe:08:8d:18:ce:85:67:3f:a6:6e:3d:ed:
83:80:fb:d5:15:d9:85:bc:b5:57:e9:d6:f8:6c:1a:
3d:a9:16:66:e1:22:2a:1d:94:b1:d7:0c:f9:91:0e:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:06:AB:18:8A:33:08:0B:97:F9:83:1C:5F:E7:3A:10:4C:06:2C:A9
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8a:51:45:f2:69:57:5d:f9:4b:04:1d:de:65:8e:3c:14:fa:
b0:bd:63:d6:02:f9:f9:03:e6:86:fb:ff:71:6a:ab:a4:1c:5f:
0f:4a:20:b7:3b:04:52:23:09:c2:63:e7:80:70:b0:3d:f2:8c:
05:70:ae:fd:6d:88:e3:95:83:ec:f4:13:2e:95:42:b4:00:e3:
6e:f5:61:d3:e5:bb:a0:be:12:91:7e:4f:6f:e1:2a:7c:25:99:
ef:f1:0c:62:78:c8:1b:2c:9c:e1:6e:f1:38:fd:fe:8d:ba:15:
a0:e2:fb:26:f7:ac:37:7b:63:1e:6a:c2:41:5e:b6:e3:49:05:
4c:78:2c:7a:79:f6:9c:0c:88:07:36:96:37:65:13:83:d8:a0:
09:e6:1c:d7:f9:83:04:a6:e5:e6:90:73:e8:67:e6:3d:56:e9:
b5:83:cf:3b:17:ff:5f:2f:bc:6e:c1:f5:9d:80:29:8d:85:35:
9a:c6:ef:b1:63:b1:1f:6f:12:98:43:b5:dc:a8:bb:b2:c3:85:
08:55:65:9c:ce:61:0d:ed:26:2c:8e:85:d7:6b:5f:a4:26:24:
cf:71:03:c7:25:56:ad:64:2b:55:6a:52:27:5f:7e:ea:4e:44:
7a:69:12:e0:f8:ff:75:eb:89:90:b0:0c:13:9d:fb:71:f8:a5:
f8:f8:36:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:45:56 2026 by rpki-client