Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: oG3hLGVfddrjcy3qo0TGi5Y25h2gCXhkHBumvb+H/28=
Subject key identifier: E2:E5:1F:37:42:B5:5C:AB:74:29:11:94:09:E8:01:F2:4D:DA:73:C1
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 019D9A3E523CC8FF8B945B5CE583A0EB6EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 07:01:08 +0000
Manifest this update: Fri 17 Apr 2026 07:01:08 +0000
Manifest next update: Sat 18 Apr 2026 07:01:08 +0000
Files and hashes: 1: 1FToxn8IaILCIZFR28ymjf3izQw.roa (hash: n66yLkILpzoSdA5/n4UY3B4CIambhY+CnJWm7sQK/vQ=)
2: DC4AzN_0lOxSBQIYOX8yhhq1bkc.roa (hash: hlLBSZz49suArVA71e6KdvynwmbN3saCnQaMyNCoI1M=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: boGP9ZNlITHJc4uY1LMcR2EfDNU9cUci0s4p/egujMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:52:3c:c8:ff:8b:94:5b:5c:e5:83:a0:eb:6e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Apr 17 07:01:08 2026 GMT
Not After : Apr 18 07:01:08 2026 GMT
Subject: CN=e2e51f3742b55cab7429119409e801f24dda73c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9d:8c:f1:9d:90:fb:4a:92:30:6d:bc:b4:c5:
5e:14:2c:81:82:e2:7d:0c:f3:e5:0e:a2:a6:4b:64:
99:94:b0:9d:27:67:09:14:2e:8d:c7:5d:9e:8a:cf:
24:3f:f8:31:7d:34:50:8f:17:9b:08:0a:09:44:4f:
b9:ca:d8:6f:0f:ce:f4:b4:bd:65:f7:fb:88:da:aa:
cf:64:b3:ed:be:fc:25:28:36:4b:fb:a5:d9:4b:ef:
f4:b2:80:06:ce:d1:e7:f7:ec:e6:22:bb:a9:73:e3:
a1:86:f1:83:cb:a7:c7:68:c5:d7:33:ec:38:21:6d:
79:53:47:d5:9b:dd:b4:32:a9:be:85:d1:33:db:10:
b2:35:ba:ff:07:71:f0:7a:43:2b:42:8d:58:b7:1b:
10:39:1a:a2:9a:74:cd:6d:f5:06:47:7b:91:54:56:
75:50:62:f4:c6:e6:7e:af:86:75:4f:e3:8c:64:52:
f1:6d:21:d9:8d:ac:24:5a:96:0d:cd:e6:cf:7a:22:
7c:49:03:25:20:4e:ba:6a:a6:5f:f5:84:e1:9d:db:
55:e0:a5:6a:89:25:6c:78:1f:9e:6c:41:00:95:d0:
04:98:71:f9:00:10:16:db:36:53:4d:2d:c2:75:36:
ef:22:39:85:e5:1e:29:a5:02:03:e3:b4:19:d6:b4:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E5:1F:37:42:B5:5C:AB:74:29:11:94:09:E8:01:F2:4D:DA:73:C1
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:78:fc:aa:28:0e:14:ee:16:23:ed:52:4d:5e:2c:25:88:b8:
94:56:b5:f2:f9:de:d4:1f:b9:75:02:e3:d0:79:d6:35:4e:90:
32:4d:cb:bb:e8:eb:97:35:60:ae:28:d3:d9:74:ee:6f:53:25:
c4:f6:a6:08:54:78:06:b8:98:05:bc:b1:ed:6b:2d:99:01:a3:
ce:fd:fe:52:8e:a5:74:c0:fc:df:ff:3a:95:cf:f1:48:3f:38:
62:e6:7e:68:76:34:60:15:1e:58:ed:9a:e7:bb:c3:c6:73:e2:
d5:68:78:f9:2e:96:df:74:9a:f8:8d:bd:44:aa:e3:8b:29:29:
67:b1:e8:52:41:16:4f:66:91:da:47:50:09:60:37:0d:90:92:
af:f5:67:62:f5:7a:3f:9a:22:54:02:f9:e4:10:e2:75:92:fe:
02:ff:a1:76:c2:68:d6:eb:ce:8e:b0:69:50:14:58:da:92:2d:
f8:a2:0c:e6:a8:ac:9a:6a:e0:f5:93:1e:d5:36:4f:8e:b6:fd:
19:82:b5:c0:3a:30:ff:90:34:ac:f9:d5:7b:0c:65:22:3d:24:
c3:ea:2d:d0:bc:94:1d:03:1d:6a:c9:b6:54:92:d6:ab:dd:ab:
33:e0:19:c5:a5:88:a1:b5:da:15:18:14:cc:ba:4a:1b:eb:1c:
1e:86:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:17:12 2026 by rpki-client