Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier: gRvoeydyx3Zyfyz7/Ax4gjaTDlTvGpRO58SBTm/zn6I=
Subject key identifier: 97:E5:F4:5E:3E:00:6F:E4:23:F4:71:2D:3D:D9:0D:AF:DF:0F:EC:8D
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial: 019DCFE401C4B29A527184A1DA287BB0F115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number: 0819
Signing time: Mon 27 Apr 2026 17:01:59 +0000
Manifest this update: Mon 27 Apr 2026 17:01:59 +0000
Manifest next update: Tue 28 Apr 2026 17:01:59 +0000
Files and hashes: 1: C25elKe2pxAvHopmJZwOBFRueMk.roa (hash: Qq1OVKMJ6dN2Sv+dYbNP/bXX/PATPp6T5W6nqB2fjes=)
2: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: 91nU7+rAvopglGVpbVHsTifw7AqSpxTI4PsFkSLy3jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e4:01:c4:b2:9a:52:71:84:a1:da:28:7b:b0:f1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66689087e787990916878db20d555684c22cd9d5
Validity
Not Before: Apr 27 17:01:59 2026 GMT
Not After : Apr 28 17:01:59 2026 GMT
Subject: CN=97e5f45e3e006fe423f4712d3dd90dafdf0fec8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:cc:ef:0d:08:28:5d:7d:c8:e6:b1:2b:d8:
f3:d4:85:fc:ad:d9:22:bd:9d:f7:d6:3d:0b:54:c5:
30:38:c8:ab:2e:b3:c9:e0:0b:f1:4a:84:cc:c3:46:
a9:9b:f2:ac:88:36:ea:7e:87:ac:a9:8b:88:f2:a7:
8f:2c:46:84:cb:88:40:a9:9e:57:7c:72:84:9e:22:
96:44:b3:ae:10:7d:2c:bb:99:ea:1b:55:3d:d6:ff:
30:3c:f6:62:89:46:6f:77:52:ed:dd:7e:25:58:17:
cd:42:fd:ab:2e:6c:30:2e:9b:13:a4:f9:a7:1c:1a:
fd:af:01:e9:ea:4d:3c:96:3c:e8:4a:4d:63:63:a9:
f1:41:d1:c1:d8:c8:e3:22:0b:9d:da:8b:89:b8:70:
12:5d:61:19:fe:b3:4c:d0:9f:44:e9:27:75:b7:9f:
6f:08:66:15:e0:a5:02:2f:fd:01:62:de:5a:04:e6:
a2:33:b2:4a:a7:fd:ba:2d:a8:6f:7f:a9:f1:47:09:
5d:3a:93:4d:59:ad:33:cb:e5:d0:cc:c1:20:e6:8d:
b5:93:87:dd:93:fa:31:ca:46:85:73:6f:22:b3:4d:
b9:6c:a1:11:83:4e:3e:77:17:2d:af:7e:c5:a6:f1:
d0:ff:05:be:56:83:f4:2e:25:73:90:44:db:6b:d4:
6b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:F4:5E:3E:00:6F:E4:23:F4:71:2D:3D:D9:0D:AF:DF:0F:EC:8D
X509v3 Authority Key Identifier:
keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8a:7d:80:c8:c8:48:66:7b:8b:ea:e2:54:09:2a:ae:f0:b8:
fe:e0:0e:04:5f:e0:7d:8c:d6:47:bc:16:db:6f:fc:70:90:b6:
89:be:e0:5f:7d:a3:99:e1:60:d5:3d:35:11:a5:62:90:ed:cc:
2b:c4:93:70:5c:b6:53:86:70:f9:38:ff:1d:6a:71:d2:34:11:
42:20:b3:4c:f7:d1:05:ac:88:6c:56:20:2f:89:b1:54:8b:12:
08:71:a2:99:b1:50:ef:00:1f:e6:1d:30:c5:6f:35:44:c0:df:
ea:9e:11:6d:d9:d7:51:d6:53:d9:51:5d:16:9e:5d:1c:1d:ab:
9e:31:21:d3:b6:85:bf:18:ad:a3:88:1a:9d:51:03:30:4b:91:
45:32:bc:d5:4b:1a:cc:5e:40:64:9d:ea:01:5f:f3:7d:e7:0d:
ca:5a:3a:ca:7d:26:4b:c7:7b:6e:c3:52:b7:c2:29:91:29:e3:
91:f4:a5:d4:99:f2:a4:21:f4:ee:42:09:7a:e8:45:da:19:65:
52:b0:9d:06:ff:0f:4c:e7:e2:1b:1a:f7:6d:f7:c8:99:30:10:
51:22:8c:b7:a7:f1:2c:f1:82:90:0c:d3:bf:fa:c9:5a:ec:cc:
fb:04:1a:4e:42:fa:8a:1d:c3:75:d1:d3:44:41:8a:f3:89:0a:
0d:f6:29:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:20 2026 by rpki-client