Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
File: Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft (raw, json)
Hash identifier: r46GENkAkFimTObPyVKhhZemblx+1FtxfQUewbOUjMc=
Subject key identifier: B0:68:F1:5A:F2:01:74:35:DA:BC:AF:BB:0E:DD:8D:46:65:86:E8:06
Authority key identifier: 66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
Certificate issuer: /CN=667d377dd4c830c246cb48a934699699e4b37741
Certificate serial: 019DCF0761CA6DDD4B066A2C1D23DB37B454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
Manifest number: 1153
Signing time: Mon 27 Apr 2026 13:01:00 +0000
Manifest this update: Mon 27 Apr 2026 13:01:00 +0000
Manifest next update: Tue 28 Apr 2026 13:01:00 +0000
Files and hashes: 1: OBJV77jZUl3CbDy5pjbemSFl4bU.roa (hash: nyePwRtRsoc5nokCJ5lCXsIn1r/OFhC2XRyD9kM7e2I=)
2: Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl (hash: byb7gAecYpRU7K8I6f8qZIVcAUtTvPC+v1ouQNDKyxY=)
3: llV-T5OHByUu8L74VWUv92cAzng.roa (hash: 9tBLuUshvL8XHJW+P3MzIrJyocKmZrwAHXHerORBago=)
4: zyXINCcnojqkQKE3guahN5uv38Y.roa (hash: DPlxLsCN1p1iaWTJ2LBLl11mIB17PTIscCM/Yrq2G9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:61:ca:6d:dd:4b:06:6a:2c:1d:23:db:37:b4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667d377dd4c830c246cb48a934699699e4b37741
Validity
Not Before: Apr 27 13:01:00 2026 GMT
Not After : Apr 28 13:01:00 2026 GMT
Subject: CN=b068f15af2017435dabcafbb0edd8d466586e806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:e4:66:e7:05:aa:cd:88:ce:b9:84:59:f2:
d8:2a:69:2d:b3:fd:76:df:23:99:42:96:81:ab:ce:
03:54:f4:d9:ae:2e:18:8a:76:00:37:be:83:a7:09:
d1:75:fe:db:86:d2:4d:de:eb:a7:04:ab:d1:27:4c:
ed:da:b5:94:ff:50:87:23:57:d5:f6:85:89:64:91:
53:a9:3d:f3:9b:81:42:ee:b9:39:66:67:0a:3f:71:
ba:22:d7:d0:cd:5c:ca:13:14:be:e4:1f:f5:01:2d:
62:a1:70:31:91:af:a3:b9:97:fd:5c:9d:3e:1d:82:
e2:5c:43:80:c8:b9:16:cc:15:8d:26:89:07:65:6d:
ce:60:8b:8f:2f:df:0b:7b:4a:2e:37:9f:70:ff:b4:
51:8c:a7:57:10:34:cd:64:7b:ab:ef:42:9c:9f:8a:
95:95:af:1b:f3:3e:58:f6:21:43:1c:93:c9:2f:ac:
3e:ce:87:e5:d2:6f:5f:f3:5f:15:ca:73:2b:63:fb:
3d:b8:4c:fe:71:35:72:45:84:e1:52:99:00:07:8a:
7c:81:d3:2a:7e:a8:a1:b6:4b:be:40:7d:ee:12:06:
74:0c:15:37:e1:57:04:57:7b:cc:b5:4c:09:d1:46:
0c:9d:da:bb:82:6b:3b:60:35:49:0d:04:43:82:c7:
61:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:68:F1:5A:F2:01:74:35:DA:BC:AF:BB:0E:DD:8D:46:65:86:E8:06
X509v3 Authority Key Identifier:
keyid:66:7D:37:7D:D4:C8:30:C2:46:CB:48:A9:34:69:96:99:E4:B3:77:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zn03fdTIMMJGy0ipNGmWmeSzd0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6812e-96a4-48b4-ab61-121ff46018f3/1/Zn03fdTIMMJGy0ipNGmWmeSzd0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:43:90:38:78:7f:6e:ac:d5:12:39:99:e6:7b:57:ec:2d:53:
dd:55:38:06:b1:a2:f5:c6:cf:67:43:57:ad:7b:31:db:1a:b0:
34:43:c8:f0:52:a4:bc:0f:d3:ab:cf:35:ae:7c:21:df:06:49:
dd:a5:99:69:e1:ae:10:4b:4d:68:28:10:b2:19:d5:06:6f:b3:
2d:b3:6a:92:aa:a6:c4:be:3c:0f:52:23:24:f1:82:e9:7b:2f:
21:aa:51:9b:38:e1:b2:f4:55:84:85:7f:07:6a:71:be:be:b8:
cb:93:70:c2:5c:a3:15:14:6c:54:a0:d0:85:73:47:97:ff:5b:
50:39:32:07:1c:84:16:0e:53:6a:71:d5:b2:c9:2c:43:de:ff:
8b:6f:dd:71:d1:d4:0e:8a:de:30:55:d0:ac:51:80:2d:a8:c8:
52:3c:18:96:58:da:9c:bc:e9:34:d5:c6:8e:d2:7c:a3:da:3c:
48:5b:05:9d:01:b1:fa:9e:5a:5b:70:06:9e:95:4b:9a:10:82:
4b:32:ea:6a:67:95:1b:f0:01:fe:7f:96:d5:b9:54:6d:66:07:
e2:37:61:ef:eb:bf:1e:31:c1:bd:9e:89:81:f9:f7:25:b1:01:
b2:13:44:1c:1d:6c:db:b0:c7:60:08:84:8c:89:e4:09:96:1b:
a3:56:2f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:15:54 2026 by rpki-client