Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
File: ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft (raw, json)
Hash identifier: 2oCv8xDq5B5/byUDMW5DNizugX3mOdZ0texTUKVgIkw=
Subject key identifier: 50:14:20:00:C1:73:B1:90:B4:D7:7F:54:74:74:8A:98:6B:7E:2E:52
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 019D98F5648DA85A840717FBE88239861C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 01:01:51 +0000
Manifest this update: Fri 17 Apr 2026 01:01:51 +0000
Manifest next update: Sat 18 Apr 2026 01:01:51 +0000
Files and hashes: 1: C8dp2i69GRLoZ571uB2mWbfCLdg.roa (hash: MHYNsBeT4icxCR72ie9j2XP7AldXHV3qsJ+q6TfnhAA=)
2: VvJI38JGDekOxVcMxVaYWILfhDA.roa (hash: 3/mUZ1pVjbS4WtmEOWWhRmWhN8eSr9x/G+kZFLZVFEI=)
3: ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl (hash: +WVQbglUq6OziOEWkfigh8YrZufcGyWJ1XvB7ibOjdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:64:8d:a8:5a:84:07:17:fb:e8:82:39:86:1c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Apr 17 01:01:51 2026 GMT
Not After : Apr 18 01:01:51 2026 GMT
Subject: CN=50142000c173b190b4d77f5474748a986b7e2e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fa:e3:fd:09:84:79:39:94:a4:a9:6a:04:8d:
8b:16:38:ce:f5:9d:c9:24:27:ac:9e:c5:f5:59:4b:
c0:4d:cf:4d:7a:57:e7:30:8f:50:04:f5:c5:14:55:
31:75:cf:a8:d9:f1:ff:51:96:12:57:aa:41:0f:a6:
af:a8:fd:96:26:08:47:4e:a0:a3:62:c9:36:98:b2:
2a:5d:8e:ee:21:76:52:e0:82:22:e2:40:69:c8:68:
18:48:9b:76:15:78:b1:67:24:fb:27:39:1c:b0:1e:
97:82:85:1b:f1:9b:bf:ca:84:c6:74:64:7a:d8:f7:
54:cf:03:09:e7:3e:43:0c:f2:b9:03:46:4a:b2:14:
28:d8:4f:27:8d:35:6e:97:4e:30:06:f8:07:54:76:
60:5a:4a:36:2c:81:a1:14:6e:3d:42:4c:60:18:c3:
57:1e:9e:e0:c2:98:50:84:8a:1c:9d:88:03:81:ea:
61:3e:b8:46:18:00:ac:e9:25:f2:a8:96:7b:f1:f3:
50:8d:2e:a9:62:45:aa:9d:73:4c:3a:10:a1:76:83:
db:d4:73:de:10:d1:d5:01:d6:26:49:c9:14:86:eb:
88:1b:82:05:52:0f:dd:14:ef:c7:9d:21:fc:02:ff:
45:cb:a0:63:56:c3:41:92:e7:d1:50:b3:2c:a5:a1:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:14:20:00:C1:73:B1:90:B4:D7:7F:54:74:74:8A:98:6B:7E:2E:52
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ca:ba:a4:9d:e9:73:b9:dd:c9:f2:cd:6a:8c:6c:3d:b2:0b:
50:d4:88:33:37:4f:e5:45:6b:af:df:dc:f3:e6:44:e1:d4:68:
63:33:59:0e:d6:4a:c4:33:46:c8:1d:38:84:2a:1a:63:ec:1f:
1a:73:9b:eb:bf:44:8c:14:84:d9:c0:72:12:55:bc:f6:67:64:
9f:aa:75:7b:38:0e:22:f8:8a:a0:1d:e1:4f:d9:d5:6f:e8:3e:
0a:a5:b3:b0:44:50:16:0b:4b:bc:b9:f8:39:e6:65:ef:91:fc:
be:dc:f8:72:2b:f7:14:4b:6a:ff:80:e0:cb:92:31:e9:84:42:
19:9e:33:d4:c8:b3:d5:2b:41:fd:e3:de:2d:92:f1:04:75:e6:
46:c6:d9:17:57:39:dd:51:16:69:93:f3:40:82:1b:83:4b:76:
9d:c8:2c:2e:2d:a5:41:41:28:1c:04:09:10:89:ea:b8:85:5c:
b3:8a:89:80:44:96:e5:e4:ed:7a:7c:10:04:54:6e:e0:e0:fc:
be:9c:b4:1e:65:70:45:28:77:50:cd:65:01:59:12:dc:14:06:
68:dd:c5:07:0e:32:3d:9f:ee:c1:48:d5:b0:17:da:50:11:23:
45:7f:e4:7d:1d:18:67:1e:07:3b:8c:c0:08:ce:50:ce:eb:f9:
e7:76:1e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:27 2026 by rpki-client