Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
File: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json)
Hash identifier: 0oOKfOGycrM9GoPsPoGHmGLTuD0APs4HtilThd8+2No=
Subject key identifier: F6:E9:CF:85:0A:35:AF:56:C0:43:FF:6E:D2:A3:CD:0F:0C:5F:48:9B
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Certificate issuer: /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial: 019D84C9D685C84F1CBC82F20D78CE26BFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
Manifest number: 18B9
Signing time: Mon 13 Apr 2026 03:01:53 +0000
Manifest this update: Mon 13 Apr 2026 03:01:53 +0000
Manifest next update: Tue 14 Apr 2026 03:01:53 +0000
Files and hashes: 1: 6xuNTY_iWkHPPmX8ImnPUwpIICw.roa (hash: rki5JF3Dn8KF0wiQ0pOA5KuyYBjrNPOOlyoFXsz/Nw4=)
2: Obp19AVz-eUE_n6Z1_9dJ4EGDeM.roa (hash: /UOlw8R9RHBXRNf2pHB5ILY2/31tspmHrZEY8rczLws=)
3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: Df8DQf3WH9yjUCRavV4r7Nm9QqSKo7fPNNhxU2SEFks=)
4: l6fGw5x0kwKbWm6qlO4Cb8mnozw.roa (hash: qIO5x+8uTr9xwt8GJiCJP0qK55Dhutv/sFwU3VkQhb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:84:c9:d6:85:c8:4f:1c:bc:82:f2:0d:78:ce:26:bf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Validity
Not Before: Apr 13 03:01:53 2026 GMT
Not After : Apr 14 03:01:53 2026 GMT
Subject: CN=f6e9cf850a35af56c043ff6ed2a3cd0f0c5f489b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:c7:b7:24:53:1c:9c:7a:c4:a2:ca:05:d9:
bc:11:b7:f9:da:f9:01:2d:d5:79:45:eb:e9:2b:9a:
5a:ad:b2:60:52:95:47:0d:34:52:ea:82:d4:50:4d:
7d:b8:8a:87:c0:e0:2b:1c:e6:79:cc:c3:55:00:83:
26:22:0f:53:60:c2:f4:02:38:83:05:7c:d9:36:a0:
5d:45:e6:a3:ef:f8:20:ff:f7:7c:fe:bb:aa:02:27:
51:03:41:ba:b3:fb:91:e6:79:6c:f3:fa:8d:02:b9:
14:9e:04:29:d1:3a:c5:1f:06:70:ea:6c:4e:16:a6:
f9:fc:ea:00:c7:32:1e:31:18:e2:d0:fe:e1:7c:71:
ef:97:3a:c0:92:fd:33:2f:2e:f9:1e:38:8a:de:e6:
1f:5e:c1:92:2a:c0:01:2d:c0:4e:5b:24:48:91:6e:
4e:ca:f1:1a:09:b5:54:47:db:7b:2b:bb:d2:9d:6f:
55:55:67:71:ff:9c:7b:12:d0:05:10:07:23:97:54:
86:7c:20:bd:eb:43:1e:ea:ad:b1:f6:36:14:7d:05:
02:69:a0:9f:89:b3:29:03:50:94:b2:39:a5:06:92:
65:37:e4:d4:12:8f:64:0d:4d:f3:0b:dd:3b:07:23:
fc:a3:32:3e:41:a4:c6:15:22:1d:01:03:76:95:ee:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E9:CF:85:0A:35:AF:56:C0:43:FF:6E:D2:A3:CD:0F:0C:5F:48:9B
X509v3 Authority Key Identifier:
keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:35:f5:c7:d4:1b:66:72:3e:7c:14:53:41:c2:96:26:69:62:
fe:42:60:a9:4e:1b:e9:d1:70:07:2b:2a:95:2d:2e:7f:84:3d:
40:a4:e6:a2:3e:29:96:18:d7:4e:e3:3e:da:36:07:f5:56:e0:
56:75:a1:b6:19:a2:14:51:78:bd:e3:4d:fa:2a:b2:a3:cf:8a:
51:77:bb:c5:f3:97:46:ce:df:a5:bf:f1:ba:2c:a2:3a:5a:5e:
21:67:ae:ed:bc:02:5e:b7:b6:c2:bc:cb:67:5d:31:c0:91:fb:
cf:12:dc:b0:5e:16:e8:30:67:2e:10:c0:64:20:33:39:3a:c3:
03:05:77:0d:87:9a:05:5f:08:f6:5d:b8:cf:ac:02:98:07:55:
68:c4:7a:15:6d:47:a8:0e:5e:1b:3a:fd:fc:32:35:03:15:e4:
72:77:99:49:f1:95:81:2b:38:c3:00:1f:96:c0:df:68:1b:8f:
ce:40:45:9f:e7:e7:b0:61:35:6a:94:c8:5f:32:ef:6c:86:54:
af:1d:9c:fd:60:a2:67:9f:4d:72:65:b0:18:46:e3:27:0f:99:
7f:7d:75:fa:2d:a1:14:78:06:1d:13:78:e3:b9:bf:96:5e:f5:
ac:bd:eb:e5:7e:ed:98:af:2b:11:2d:20:87:3f:bd:ba:2d:2a:
00:93:c0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 08:07:34 2026 by rpki-client