Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
File: Zs01lGjIuqmPw8ou8tkFg6aeABY.mft (raw, json)
Hash identifier: Z6UywSyGQHvC4f65RWyEEGeScjlVzQ21nd2mooQWgEE=
Subject key identifier: D3:5B:A4:9A:EC:4E:23:DE:AB:39:48:A0:E1:26:6D:65:45:C6:DC:41
Authority key identifier: 66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
Certificate issuer: /CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Certificate serial: 019DD087F5217531EA84BF8A694F7DA20468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
Manifest number: 0161
Signing time: Mon 27 Apr 2026 20:01:04 +0000
Manifest this update: Mon 27 Apr 2026 20:01:04 +0000
Manifest next update: Tue 28 Apr 2026 20:01:04 +0000
Files and hashes: 1: Zs01lGjIuqmPw8ou8tkFg6aeABY.crl (hash: eJpgPwML4BgT+fSrNhD4Oc5n0/Yw/zbFml4hG0OTeu4=)
2: rqJldLN-S-H8DV7_BXB9c6fFRDg.roa (hash: 8ct3OMMYCUQEAyF1g7DbkXYuvpJT+cTHy+wjPP6qYuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:f5:21:75:31:ea:84:bf:8a:69:4f:7d:a2:04:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66cd359468c8baa98fc3ca2ef2d90583a69e0016
Validity
Not Before: Apr 27 20:01:04 2026 GMT
Not After : Apr 28 20:01:04 2026 GMT
Subject: CN=d35ba49aec4e23deab3948a0e1266d6545c6dc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:37:1e:de:45:89:13:39:4c:a6:5a:71:6b:
45:9d:ea:05:f0:76:33:cd:03:ca:8e:92:0d:d4:b3:
51:2e:bf:fe:d2:86:c4:3a:77:72:3c:f1:d4:a6:52:
c5:ad:5f:96:16:09:4d:f1:18:1a:7e:30:78:2c:5e:
16:6e:e2:cf:b1:81:04:4e:12:ae:b3:5e:76:25:ac:
34:c6:c6:bf:b7:b4:27:1b:f1:e1:63:04:68:0c:82:
f6:98:53:47:16:ec:fa:28:b9:f6:63:f7:24:fa:f9:
7c:ab:65:12:4f:c1:af:2e:e8:19:b5:26:33:fa:6e:
4a:97:cb:99:65:5b:7d:d4:5a:12:43:33:cb:df:ef:
a5:ba:8d:f1:23:01:7b:82:9f:38:ad:09:54:62:73:
a9:c1:26:b5:dc:c3:90:2d:58:a3:b8:e7:e7:78:52:
74:ef:b0:82:a5:60:9b:f6:4e:97:1d:ba:db:cf:f7:
f1:c5:79:50:41:63:8f:1f:03:4a:0e:ab:d6:a4:b9:
a6:95:68:b4:70:83:0e:c8:0b:77:4e:bd:28:d3:09:
da:be:43:42:20:20:c0:14:5b:1b:ff:b3:c3:ca:1c:
4c:6d:f3:de:63:69:1e:fe:15:cd:dc:20:5e:a3:c5:
99:57:99:22:4e:e6:c6:37:02:b7:78:9e:33:46:3e:
27:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5B:A4:9A:EC:4E:23:DE:AB:39:48:A0:E1:26:6D:65:45:C6:DC:41
X509v3 Authority Key Identifier:
keyid:66:CD:35:94:68:C8:BA:A9:8F:C3:CA:2E:F2:D9:05:83:A6:9E:00:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zs01lGjIuqmPw8ou8tkFg6aeABY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7370c4-e4cd-4db3-9b86-e359ae0a6838/1/Zs01lGjIuqmPw8ou8tkFg6aeABY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f7:d7:d7:ec:29:02:00:b9:20:06:ca:1a:dd:ab:48:c4:eb:
12:dd:c6:f5:20:6c:68:cf:e1:7e:45:f3:f0:ea:d5:19:3a:1a:
46:af:74:49:b6:24:d5:dc:55:73:97:50:5f:92:01:7d:b4:2c:
c1:4d:41:3e:58:1b:81:fc:5a:66:1f:fd:c1:fe:f2:30:44:ae:
85:5a:e8:3c:c1:23:f7:3c:e8:4c:4c:3f:2a:19:60:4e:fd:61:
3e:5c:06:07:e1:6f:d0:a4:16:36:3f:69:c6:9f:c9:d7:e0:e2:
50:65:f6:2b:bd:4a:66:93:03:d5:b9:d1:ed:ef:c9:0d:d7:67:
a7:ab:f4:bc:21:7a:65:03:af:4b:85:c1:ed:d0:6a:ea:20:51:
78:c1:e2:26:11:c9:b6:07:c4:61:f8:1f:38:22:f9:5c:93:4d:
4e:c8:57:4a:de:36:07:98:e0:4c:52:c2:83:b0:2e:39:e7:49:
bc:92:c1:0d:14:98:10:37:fe:25:59:b3:a4:63:c0:15:f4:f9:
06:0d:90:f0:94:69:69:29:55:1d:54:4d:f8:2a:ac:39:81:49:
2b:c2:21:9b:25:4f:2f:7f:07:f1:db:6b:61:3e:8d:c7:a0:91:
a4:88:cf:4b:b2:22:82:98:0f:6f:25:0a:a8:a1:33:e2:ea:30:
3e:9d:17:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:52:53 2026 by rpki-client