Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: Aheg7bKkshXFeZ1Zr9bnMNDlWqOYRDcEx68fSWErr9I=
Subject key identifier: 2C:62:6B:C5:3A:F8:3E:3B:4B:72:A4:AF:1D:70:72:1D:90:67:C5:B0
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 019DCE2B4264A51F7969B25C6372570CB58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 1584
Signing time: Mon 27 Apr 2026 09:00:34 +0000
Manifest this update: Mon 27 Apr 2026 09:00:34 +0000
Manifest next update: Tue 28 Apr 2026 09:00:34 +0000
Files and hashes: 1: CmEbUhenhDmMKvHKSkFpe9LG8X0.roa (hash: Jsb+hfYBWXp4dm2lj3dTAoFqYAK6O+6kl4dBC77ANZE=)
2: GtNJ0lmoQ9ZuqCpl3-J4Re7um1k.roa (hash: OD5qNfz5l9josRO/cRdoZZIkXHpha2NNc9udJTgh6/s=)
3: SQ9ZxRxAMd1xoAu9tA2c2yS9YUQ.roa (hash: MYiap9ADnfYQb/YwxbWyM4PVhhzPTbhg8edINlxn310=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: yKKJC38ZJ7mQPNwE/cTO/NdRrN4tigMBZtDVw7Bqirc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:42:64:a5:1f:79:69:b2:5c:63:72:57:0c:b5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Apr 27 09:00:34 2026 GMT
Not After : Apr 28 09:00:34 2026 GMT
Subject: CN=2c626bc53af83e3b4b72a4af1d70721d9067c5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:16:b6:0e:0b:0e:65:96:3d:90:4b:45:c4:
7f:54:fe:53:82:00:75:91:9c:1a:1a:82:78:fd:f9:
cb:32:8c:16:10:db:2d:14:f2:09:18:51:1d:bf:a4:
34:b9:3a:46:73:3f:ce:96:24:67:60:46:c9:05:3e:
c7:1f:63:20:96:f3:a7:9b:cc:41:a1:f8:bc:08:15:
3b:37:4b:20:3c:0b:f7:28:24:bb:89:80:b1:70:03:
72:67:ce:0a:50:a6:ba:cf:fd:3f:f1:33:7d:10:57:
79:0d:c6:54:cf:42:05:01:23:42:10:f0:f3:09:c6:
ae:7e:6d:9e:41:be:c4:74:05:f3:64:a7:80:ee:3a:
b3:9e:e5:eb:62:f4:d3:a6:a5:26:e3:f0:2e:31:86:
f3:41:d1:04:3e:ad:db:b0:dd:33:14:6a:64:c3:79:
8d:2b:24:8f:4a:98:f5:90:10:b5:a5:80:a0:21:9e:
c9:57:a5:66:8f:b6:96:de:8b:6b:6f:da:80:40:61:
13:9d:d7:32:e4:d2:94:db:0c:82:8f:be:a1:fb:d7:
dc:4e:84:db:5f:67:71:a6:32:21:49:fa:cc:11:a6:
ab:8d:2c:0b:1a:03:57:c5:a7:c9:ba:70:73:7b:a1:
64:92:69:74:04:66:81:b1:9f:8a:ee:25:52:7e:54:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:62:6B:C5:3A:F8:3E:3B:4B:72:A4:AF:1D:70:72:1D:90:67:C5:B0
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:18:e3:fb:2e:78:4c:f6:2d:5b:a7:81:7a:c4:a5:83:e5:f8:
61:77:01:94:2e:10:02:dd:73:6a:d2:e1:f7:bb:60:18:5c:c3:
6b:c3:b5:a7:c9:d8:ea:4d:c2:93:4e:ae:96:ce:82:e1:3f:c0:
c0:a5:21:95:95:48:d0:13:98:a3:89:57:42:88:cd:8c:43:43:
fc:fd:52:be:22:1c:76:e4:0f:73:b0:4f:3c:d1:52:ca:e1:52:
86:f0:2a:09:a6:79:4a:b9:54:0b:e4:82:e1:2c:42:52:32:12:
db:10:f8:fc:62:6a:52:5b:86:65:70:b4:32:c3:4e:ce:24:df:
da:3e:fe:5c:1f:21:ac:40:8b:ae:3c:82:36:fc:a1:75:f5:22:
30:ab:e6:ea:86:c9:dd:c2:1c:79:14:cc:6f:ec:a2:cf:cb:0e:
4f:7d:45:29:d9:42:4c:20:3e:a3:18:7a:45:95:02:2f:d8:23:
c4:a2:d5:69:bf:ec:66:49:9b:bf:e6:cf:3d:5b:a6:e3:7c:0e:
09:23:4e:59:58:e9:f6:0f:43:d5:be:3f:29:f5:69:3a:1e:9d:
c6:63:af:af:e0:da:d8:ef:99:55:71:ac:89:79:52:a6:b0:d0:
c9:59:4c:d3:68:2b:31:5d:0e:d7:e0:6e:a3:1d:9b:3a:4a:cf:
b2:bc:a9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:30 2026 by rpki-client