Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
File: ZKDbECcDCCx8pVSrtbInYAGNVj8.mft (raw, json)
Hash identifier: ysPlOySKkAdOJYYMOKPq7RWM8nDiiR1L6EfXHBp9HMM=
Subject key identifier: DF:3E:40:F3:86:BA:E3:F0:99:35:41:08:DC:BC:3D:F7:62:B9:FD:6C
Authority key identifier: 64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
Certificate issuer: /CN=64a0db102703082c7ca554abb5b22760018d563f
Certificate serial: 019D9850787BD164E0B898861A63F7B9B83B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 22:01:43 +0000
Manifest this update: Thu 16 Apr 2026 22:01:43 +0000
Manifest next update: Fri 17 Apr 2026 22:01:43 +0000
Files and hashes: 1: 3yADdDDzcZW_FNyfLRFjmJYJIcY.roa (hash: vhBQD1/rqueuWkSga6Bimchj7hsJoyusDZ80Vt3wI/g=)
2: ZKDbECcDCCx8pVSrtbInYAGNVj8.crl (hash: d30N+mNW5ZVasIx7n8hHa0pxSvKpU8ZLCzeqjWhTwqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:78:7b:d1:64:e0:b8:98:86:1a:63:f7:b9:b8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a0db102703082c7ca554abb5b22760018d563f
Validity
Not Before: Apr 16 22:01:43 2026 GMT
Not After : Apr 17 22:01:43 2026 GMT
Subject: CN=df3e40f386bae3f099354108dcbc3df762b9fd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:32:c7:8d:fb:e7:4f:87:58:ee:39:77:e1:
59:cb:0d:81:7b:6d:b7:4e:a0:cf:c2:2d:5a:f3:ef:
76:85:47:84:34:9a:dd:29:49:3d:28:16:43:d9:38:
90:b9:38:e7:c3:21:fe:99:c8:5f:54:0c:e6:9e:71:
ea:c8:9b:42:3c:b0:9d:04:c0:42:8c:20:f0:a6:e4:
97:88:81:aa:49:0b:6d:21:06:40:6e:c5:9f:cd:09:
47:dd:a5:f7:5d:e0:af:7b:13:da:90:3f:0d:d7:82:
4e:ec:78:85:d1:2f:81:6c:b5:40:30:37:1e:e6:d6:
3f:49:16:ef:f6:2e:1c:ff:83:2f:27:fb:93:60:ee:
f7:3d:e4:59:23:ea:ea:69:7c:bc:7a:2a:53:f5:89:
88:a7:5f:49:8f:2b:2d:1b:07:1c:f6:5c:75:fc:75:
5a:44:75:9b:5d:a6:cb:11:a8:b4:9d:92:c9:44:ea:
74:00:06:4f:45:4f:4b:98:34:d7:e2:9a:0d:c3:76:
04:aa:28:bd:07:7e:44:ba:d2:86:89:d5:2e:be:de:
1f:83:a0:02:c8:1e:87:74:75:50:a9:97:f1:56:d1:
49:42:9f:a7:6f:d4:e1:99:93:e2:25:f9:7b:97:e2:
8a:92:d6:8f:7c:4a:13:a9:10:72:b1:31:15:5d:49:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:40:F3:86:BA:E3:F0:99:35:41:08:DC:BC:3D:F7:62:B9:FD:6C
X509v3 Authority Key Identifier:
keyid:64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:07:cc:e4:2c:ba:b0:84:c5:28:6c:e9:e7:85:c0:6a:89:02:
f5:52:20:09:cf:94:98:90:e6:5e:a6:9b:2c:c4:42:ee:be:3f:
66:ff:ad:f8:ce:43:72:d2:d2:73:ac:f3:e9:80:33:c0:7b:5b:
8d:0b:5e:d1:fb:2f:ff:3a:40:f1:c2:f6:18:51:bc:c3:70:d9:
23:9b:80:eb:87:4e:4a:0d:7d:07:97:a7:21:e3:d7:45:a0:e5:
b3:17:db:6e:5f:05:0e:83:84:c3:ec:b9:84:d8:22:e6:5e:8e:
29:a2:3e:13:68:43:ef:81:67:fa:0e:a8:de:d4:72:e5:b6:c3:
1b:42:ca:f3:87:3d:6e:ba:99:c9:28:87:7f:29:32:d1:d9:47:
2c:ab:59:1e:2c:8b:e0:a2:79:6e:97:a1:ca:5e:af:f5:04:f2:
55:48:2c:a6:07:a3:89:e9:ff:b8:eb:9d:5e:1d:76:30:de:7d:
cb:63:3e:bd:c7:4c:ea:2a:67:ab:3c:b4:cb:e6:9b:41:e1:e2:
ba:4f:42:0a:b2:71:fb:5a:2e:9d:2d:cb:0a:48:5a:07:ae:9c:
0a:ad:37:1a:76:2c:68:5f:ad:1a:4d:79:db:05:42:b0:f4:a2:
63:4e:b5:95:78:c4:fc:3f:2f:a6:3a:0f:73:c6:f0:19:ef:d5:
02:e9:98:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:58 2026 by rpki-client