Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: YPNLXJa/6t15Lb4v/Y7inUFo53cV40smZtMoy0HAWjk=
Subject key identifier: FE:D3:A9:E2:A6:AA:55:79:32:74:5B:D7:45:85:03:34:33:53:C0:78
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 019DD0877F5DA93A389CC8EE86094EBE9470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 1193
Signing time: Mon 27 Apr 2026 20:00:34 +0000
Manifest this update: Mon 27 Apr 2026 20:00:34 +0000
Manifest next update: Tue 28 Apr 2026 20:00:34 +0000
Files and hashes: 1: 4MqnD80Bm4Q9Vwi3gClRgRwhb2o.roa (hash: x1GbrEL07BjOEaho/RiiT61nbrPNpOtoeGwW3Ksg7ps=)
2: QVoMIPeCUFrk5bxFsPoRfsrvGSw.roa (hash: eQ5qNmayw3NJjRPGsMleqFUXeNcmfxmEvvPybtQSVss=)
3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: FgUid0Y8hjbWNfhCIwLb/kO77c6N4m539Sa7OWVwvcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:7f:5d:a9:3a:38:9c:c8:ee:86:09:4e:be:94:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Apr 27 20:00:34 2026 GMT
Not After : Apr 28 20:00:34 2026 GMT
Subject: CN=fed3a9e2a6aa557932745bd7458503343353c078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:37:c9:65:17:ee:bb:85:d7:49:51:c9:c1:
30:a9:a1:18:5e:db:83:cb:b9:a1:26:74:34:51:a4:
fe:70:14:af:89:bb:0b:61:3d:cb:7c:f9:7e:5a:11:
d7:06:1c:9c:b9:d2:8d:6e:4e:35:c4:ef:be:86:bf:
1d:79:2f:ba:1e:f0:66:0a:e5:66:cd:2f:b8:26:17:
6f:f0:c2:15:54:ac:07:3a:64:be:c5:fa:d6:7d:8d:
0e:a6:09:f7:00:b6:7a:88:ca:dd:76:34:3a:ec:4b:
5f:9e:40:03:bd:94:b2:c3:e9:52:a9:ca:c0:0b:c8:
ab:e6:29:86:21:54:9f:e5:65:65:9d:95:54:b3:07:
14:df:23:64:69:41:03:d7:d2:38:12:e9:88:e4:0e:
39:11:a9:8a:cf:16:b7:f3:2a:92:5b:bc:86:43:3a:
91:97:ee:6c:58:94:b4:e3:aa:06:32:c2:fb:cc:d8:
0e:09:93:ba:ac:42:8f:ac:af:fe:71:38:b5:21:50:
11:72:02:6a:98:c4:b7:f5:04:d7:d5:7d:5f:a1:66:
63:b1:ea:14:56:47:24:6c:5c:e2:94:ed:84:79:37:
ff:4a:09:c9:e1:d1:95:da:94:fd:d3:92:a4:14:d0:
61:89:46:f7:41:5e:77:b8:1e:00:f9:87:6d:b1:c8:
1f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D3:A9:E2:A6:AA:55:79:32:74:5B:D7:45:85:03:34:33:53:C0:78
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:db:55:ec:e6:c1:ce:f8:dc:b9:33:27:38:dd:ba:25:62:e5:
63:5f:76:0e:18:aa:c3:62:c5:c5:dd:14:cf:be:fa:e0:83:67:
d8:2d:8a:06:76:b3:0c:5f:67:f2:14:62:4a:be:1a:cc:ff:22:
a5:b7:bf:d9:0b:39:76:f7:3d:95:07:c2:c6:f3:fe:fa:14:10:
2b:3c:49:1b:8d:46:01:54:48:8c:18:95:65:fe:ba:e8:e4:db:
dc:16:58:4d:c5:fa:56:06:1c:74:36:ad:26:ac:2c:93:53:d5:
56:61:06:2a:a4:ce:4a:4c:b5:22:99:04:de:e5:07:49:6e:41:
78:93:42:e9:8f:9b:a5:07:7a:44:f1:00:03:37:56:39:ce:bc:
bf:6d:f9:46:3c:fb:17:87:a9:a7:52:50:67:cf:0c:9d:30:87:
0b:8f:b7:d0:77:85:47:4f:61:0a:fe:60:19:0e:dc:0f:3c:96:
85:6b:30:76:44:fd:25:8b:f1:62:f6:2f:b1:f5:61:fb:7c:20:
7e:b4:3a:c3:b7:bd:74:91:cb:c2:04:09:c7:52:55:b8:57:fa:
31:a4:92:ac:02:6e:e5:21:4f:53:50:2b:de:b9:40:94:87:f3:
dc:03:33:4c:86:0d:13:7c:1b:40:cc:30:93:3b:7d:e0:e9:04:
a1:66:c4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 05:46:18 2026 by rpki-client