Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier: 4qpNOZWD7fno+SvwRdrRlsRZZLeM+Zd0jh8oiB3BIcI=
Subject key identifier: 40:6F:CA:FB:9B:86:35:57:60:42:69:D3:A2:BD:67:E0:63:CD:4E:EF
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial: 019DCF07A7F83DE77172469DB245323A88AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 13:01:18 +0000
Manifest this update: Mon 27 Apr 2026 13:01:18 +0000
Manifest next update: Tue 28 Apr 2026 13:01:18 +0000
Files and hashes: 1: RsnrJKwmL8cQaNh398zcQEeUvVY.roa (hash: LNyFYXYZiYI7HKKoks5EZWi0DK28Q+wkZrR9sNh6HOA=)
2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: AerdMzWnhjxD/jxIZpL7Jk9BoNuAE3nqCrOffWEQDOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:a7:f8:3d:e7:71:72:46:9d:b2:45:32:3a:88:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Validity
Not Before: Apr 27 13:01:18 2026 GMT
Not After : Apr 28 13:01:18 2026 GMT
Subject: CN=406fcafb9b863557604269d3a2bd67e063cd4eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:bf:f6:31:da:23:eb:ec:c3:85:e1:69:70:
53:4d:60:c4:b1:06:0b:77:44:f4:3f:a2:fb:6c:c1:
90:bf:15:54:36:95:5c:6a:a4:e7:71:61:a9:d4:10:
fa:41:ce:22:70:5f:69:f0:fe:04:b0:f1:90:0f:4b:
57:25:c5:0a:6b:36:a5:78:77:0f:1a:02:e1:5e:db:
6e:1d:44:cb:6c:81:3a:84:6c:18:e8:38:0e:b1:64:
f6:8e:ea:3f:4d:41:fd:07:f9:57:04:2c:07:7a:cc:
8e:50:06:8c:b5:21:76:40:3e:72:6c:3d:a2:f4:11:
8e:4c:69:13:fa:b3:cd:f6:99:4c:c2:44:27:30:27:
a1:06:ee:d2:84:c5:18:ff:2c:a5:13:5e:1d:b2:32:
67:6a:f1:a9:ee:42:9d:b9:0d:21:6c:b2:61:0e:c1:
ab:84:26:d1:99:a2:f4:47:42:30:de:57:20:88:03:
39:d2:b4:c9:08:31:b5:fd:db:69:c5:68:62:6f:00:
54:d8:27:8f:f2:a5:71:d8:f1:81:f2:16:20:89:86:
85:d7:e4:6a:85:d6:93:93:8e:ee:a6:00:cf:50:e6:
32:ca:fa:a6:44:ce:f2:e2:6f:39:41:94:1f:d9:37:
68:8e:9a:8e:c8:8c:02:17:d6:6e:f2:b3:8e:7c:cf:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6F:CA:FB:9B:86:35:57:60:42:69:D3:A2:BD:67:E0:63:CD:4E:EF
X509v3 Authority Key Identifier:
keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b2:74:16:e5:34:c7:19:77:98:3c:68:ea:ba:13:32:ba:2e:
64:79:f5:c1:9d:ec:bc:ca:d5:19:66:64:75:dc:23:da:8d:07:
3c:78:7b:9b:7f:8a:82:a9:e1:95:13:43:ae:aa:b6:c6:9b:0e:
6d:09:cf:b5:9a:c0:09:dd:aa:50:e4:95:76:5b:bb:17:3d:47:
e7:21:68:c0:d7:f6:64:53:f0:18:c6:9e:f2:4b:b7:69:21:4b:
20:18:3a:8f:c5:62:2f:6a:ee:c1:18:5b:87:a0:b1:09:88:00:
1d:2a:aa:99:e2:4f:8a:5b:9a:62:fd:a1:5a:f7:f2:89:26:00:
3b:78:43:24:40:29:d9:7b:91:af:4a:43:b8:89:ec:63:94:44:
22:2c:a9:4d:f9:f7:d3:6f:2e:0f:ba:b8:28:d5:81:af:d7:c2:
e5:74:84:20:88:bc:f5:6b:05:3f:e6:34:e1:7f:04:ff:ad:55:
31:4d:c8:ae:58:c4:48:c4:17:a4:12:38:fa:0a:2f:19:d8:68:
67:d9:a2:fc:32:02:d0:04:a3:e9:4f:3a:23:87:a6:0e:52:71:
dd:bc:5d:fb:ee:30:52:dc:d8:f4:5d:4c:47:fb:41:68:93:55:
7e:1f:95:91:c5:b7:e4:5a:cd:12:0b:29:17:06:4f:89:69:20:
a2:5d:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:04:20 2026 by rpki-client