Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
File: ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft (raw, json)
Hash identifier: rJKHfTBKKSJSTu8rNFdc4nrQiob3bgCcvbULFNGldxw=
Subject key identifier: B7:02:59:21:DD:5F:28:F8:02:97:83:59:3B:8A:46:50:0C:15:80:5D
Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93
Certificate serial: 019DB246FA0FA1CAB5AA7B85B87851F3B8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
Manifest number: 01C0
Signing time: Tue 21 Apr 2026 23:01:29 +0000
Manifest this update: Tue 21 Apr 2026 23:01:29 +0000
Manifest next update: Wed 22 Apr 2026 23:01:29 +0000
Files and hashes: 1: 8ndDa5rRng5A6n53ieZF5n0zI7s.roa (hash: KtGt0NdlDvyNnvEnoJfeg2xWBfVSAuPvOu/PVmj7YGM=)
2: LYW2fplHFaYQiPqvAdr_sKehM90.roa (hash: 8MK6zJkVz5x6OyzTFZpsWSxtzB4SrLx4cMMtXCGfh10=)
3: ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl (hash: 5BrsBHZFfVArCCx4la/SUuXvArO4CVB5RQ+fW6ydY2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:46:fa:0f:a1:ca:b5:aa:7b:85:b8:78:51:f3:b8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93
Validity
Not Before: Apr 21 23:01:29 2026 GMT
Not After : Apr 22 23:01:29 2026 GMT
Subject: CN=b7025921dd5f28f8029783593b8a46500c15805d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:b9:f8:54:62:a8:52:c2:44:96:6a:2f:95:
8a:a2:45:8a:95:54:3d:91:7b:a2:54:e0:4e:53:8a:
33:f8:f6:d1:6c:63:95:1d:8b:1b:6a:c8:34:4c:b3:
86:a0:37:c0:33:7f:99:78:12:1f:ef:9b:20:a1:c4:
72:6d:6e:13:02:56:e0:df:4e:a9:66:a8:8d:fe:92:
a5:33:b5:03:b4:a3:bc:cc:01:16:5b:9b:8d:c5:e1:
e6:22:3c:3f:fb:8c:4e:b5:d4:78:9e:de:9c:64:4b:
66:0e:fd:1e:42:77:74:4a:a1:c8:11:1a:4c:92:bd:
a0:d4:39:b6:d1:e0:4d:f8:64:68:85:67:cf:b3:68:
0d:0b:29:61:21:74:86:5c:82:01:fd:5f:ef:96:b4:
34:e9:ef:66:bd:29:11:46:dc:1f:18:a1:75:71:21:
c2:a1:40:4f:81:fd:a3:70:d8:fd:b5:44:e3:27:8b:
6b:c4:d5:3e:c1:a0:16:a0:a9:3b:6e:21:77:ed:12:
06:ea:f3:14:32:77:aa:48:74:6c:14:d6:ec:ac:bb:
85:b2:32:54:d9:76:ed:4b:35:80:de:cf:de:04:95:
82:22:bd:fd:d5:29:45:30:6b:15:8b:2f:0a:4d:63:
ce:8a:24:92:19:f1:e6:64:89:57:d8:13:93:bf:96:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:02:59:21:DD:5F:28:F8:02:97:83:59:3B:8A:46:50:0C:15:80:5D
X509v3 Authority Key Identifier:
keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:70:4e:fa:a9:a8:1a:4b:bd:3a:e1:65:7b:1b:f9:e4:54:36:
36:ae:0c:eb:df:50:08:ce:34:54:5e:c7:a8:36:1d:84:19:b4:
46:89:7a:ba:21:ad:e1:0a:e2:04:5f:e7:1d:5d:82:c9:69:f5:
3c:fe:a2:93:35:df:f6:26:3a:d7:b7:d8:2d:a5:93:7b:bd:d6:
59:41:3b:12:61:0e:4a:84:55:49:87:bf:5e:8d:67:79:e7:7a:
9c:55:1c:08:0c:21:da:fb:71:b4:a9:64:e3:22:43:f2:a4:92:
f9:dd:98:1a:98:c5:7f:9a:7a:82:67:20:a8:6c:c0:f8:2d:2f:
93:21:54:35:6b:6c:bc:4a:ca:f8:af:79:ae:02:88:ad:3b:49:
ab:32:52:51:e5:e9:62:5a:65:1f:3c:f8:c2:cd:30:47:3f:27:
f1:f6:94:98:a7:35:aa:32:f3:92:73:33:34:8c:3d:d9:fe:d3:
c5:f1:bc:56:73:f5:db:bb:71:42:58:7b:53:3c:1a:f2:cc:54:
81:c4:80:f7:bc:70:01:3d:5b:8b:d7:f2:e6:ea:f5:ac:ec:6b:
6c:7a:53:a6:bf:d4:2b:a8:24:e7:a0:75:52:80:37:c7:81:13:
c9:60:2c:f7:15:89:c4:79:df:48:9a:36:ba:47:00:43:8f:10:
65:46:50:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:16:24 2026 by rpki-client