Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: bVYPGNlH21CcYHxgkeP9j9VB4ApVbjpl+ZhqQhPXAp0=
Subject key identifier: 99:0B:00:B5:D4:E7:4B:09:AC:6D:EA:93:B4:77:5A:DD:81:33:76:B6
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 019DB3FD8000511D1CCD626DF6FD7D30AB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 0305
Signing time: Wed 22 Apr 2026 07:00:28 +0000
Manifest this update: Wed 22 Apr 2026 07:00:28 +0000
Manifest next update: Thu 23 Apr 2026 07:00:28 +0000
Files and hashes: 1: WKKdAS92LVILbjnTiiXNrRI_064.asa (hash: WU7xtDYPq+tmZfgD8wJKGXUqlisupARfwtckbBQ0ds0=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: NJc/jXWWw6tgg6z0wKmi0pAR+Q5pZ/pYx0VOBW98Ot4=)
3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:fd:80:00:51:1d:1c:cd:62:6d:f6:fd:7d:30:ab:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Apr 22 07:00:28 2026 GMT
Not After : Apr 23 07:00:28 2026 GMT
Subject: CN=990b00b5d4e74b09ac6dea93b4775add813376b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:50:50:55:f0:9f:f8:5d:83:04:aa:46:24:29:
01:3a:84:51:f2:6a:d1:00:75:53:9b:8e:c4:f7:bd:
8a:9f:70:8d:a7:c4:d2:a6:38:05:98:ca:ff:5a:89:
c6:be:f0:64:6c:a6:37:0a:a1:d6:06:1f:70:1d:4a:
df:c8:56:88:6e:f0:2e:56:db:a3:54:fb:47:12:7a:
d4:55:ba:9b:0f:e6:26:71:ab:a6:8e:14:d5:89:ba:
37:a2:9e:70:ff:da:83:73:24:d2:b9:29:5f:95:89:
2c:dc:e6:e5:cd:64:1a:cb:7d:07:a1:96:48:6c:1f:
fc:13:bb:1b:bb:73:c6:07:a6:dc:af:db:0d:f4:b4:
ce:ed:e0:04:ac:7e:86:ec:f1:50:dc:d5:00:f3:31:
d7:ca:27:ff:d6:d4:74:e9:0a:46:c2:27:74:fb:07:
4a:0c:0f:b3:6f:3a:c5:a9:7c:94:e4:f6:2f:98:a2:
08:66:50:a2:82:cb:e2:fe:4e:ef:df:23:1b:d5:19:
99:e5:2d:51:8d:af:82:28:b1:9e:a1:bd:3c:29:d9:
e9:81:7c:f7:df:bb:6b:e2:3a:5e:ea:f0:ba:2c:79:
d3:06:96:5c:da:17:c3:38:4e:49:0e:90:d9:fd:bf:
1a:c9:e8:fd:e0:ec:ab:80:b6:a2:f8:a3:c8:a2:d2:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0B:00:B5:D4:E7:4B:09:AC:6D:EA:93:B4:77:5A:DD:81:33:76:B6
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a4:35:2b:d9:df:1a:cf:e9:87:fa:e9:c0:61:11:d7:6b:ee:
96:c8:c5:c5:cf:33:1e:73:77:81:9e:10:cf:9c:0c:d3:36:7b:
01:e6:60:f9:f6:5f:39:f0:2f:fb:54:66:7a:1f:8f:6a:ea:13:
f6:05:8b:5c:7e:f9:52:61:7d:3d:43:c2:e6:ee:dc:2b:a8:c7:
d4:fd:5f:dc:cf:d0:3f:48:1e:fd:ad:d1:66:05:ea:02:e8:17:
87:6c:01:cc:15:9c:bb:38:80:79:3e:7c:d5:ea:ca:5d:68:5b:
f3:2e:8d:f5:82:94:b8:d0:79:3e:99:17:e7:91:91:20:e8:c9:
a5:a3:7c:75:2c:38:d7:d8:4b:45:9b:7e:d5:4e:28:07:9d:de:
da:9a:04:60:38:ab:54:1d:e9:58:dc:24:3d:78:4d:f4:e5:d3:
5a:3c:34:e7:7d:2c:18:3c:c1:bc:7f:f2:81:94:3b:23:85:79:
61:d1:a9:40:e8:d4:b8:d8:71:0e:f8:33:2c:9c:42:ab:2e:18:
1b:12:05:a1:1b:89:d8:c6:1b:71:98:6e:79:2b:e8:63:7c:2b:
80:a4:d0:6d:64:f1:3c:91:35:cf:8a:cf:f5:44:22:eb:03:4e:
b8:0a:8f:ec:e7:67:e4:ea:c4:e9:6f:a5:e7:32:03:a8:aa:6a:
7f:0e:36:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 10:59:23 2026 by rpki-client