
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier: dWW875OFqZN2Xh5Tc3lwOjakRXJ0zFLbf3MUBNDAgVw=
Subject key identifier: 9B:94:C2:1F:71:2E:B6:DC:00:71:AC:E3:21:DA:4A:04:B3:6A:8D:2D
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial: 019D9C9AA5A2CDE2073AD488D610066D7C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number: 1384
Signing time: Fri 17 Apr 2026 18:01:13 +0000
Manifest this update: Fri 17 Apr 2026 18:01:13 +0000
Manifest next update: Sat 18 Apr 2026 18:01:13 +0000
Files and hashes: 1: gX3BQ48KT1SBCIdQ1BTvFv5yWJs.roa (hash: DEwg47W0q/dNOjfYsnuPLnMnC+CGQgRpMPoSjjP+Lr4=)
2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: V4Rh/5nzackIOVW+aLWcn9JhHlEC02jrhcqASeRkXlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:a5:a2:cd:e2:07:3a:d4:88:d6:10:06:6d:7c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Validity
Not Before: Apr 17 18:01:13 2026 GMT
Not After : Apr 18 18:01:13 2026 GMT
Subject: CN=9b94c21f712eb6dc0071ace321da4a04b36a8d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:62:20:7a:97:67:65:fc:81:6f:b9:7e:d2:
4c:70:d7:85:a4:9d:7a:b8:1f:36:93:c1:aa:dd:d4:
3c:0f:da:40:a3:df:72:5a:1e:bf:29:b0:42:f3:ec:
f9:d7:f1:90:67:55:a1:cd:e0:66:bd:70:8d:b4:9c:
71:44:7e:84:cb:70:67:da:a0:1d:4d:9c:dc:85:dc:
e0:b5:76:45:6a:18:0f:9b:18:6d:f8:6c:e4:39:c2:
d0:aa:03:ac:4d:18:4f:13:10:85:7d:ca:aa:8b:43:
33:88:5c:5f:0f:5b:0a:cb:c8:80:1c:a7:28:15:08:
af:b7:15:bc:38:a8:0c:10:20:e0:4a:71:86:43:59:
71:16:64:81:5f:b8:e9:b7:1a:13:79:7f:12:55:e3:
2d:ea:14:c4:1f:be:23:aa:73:ee:9e:f8:12:4a:dd:
d4:19:94:69:ed:6b:7e:03:07:6b:d7:6a:43:45:21:
12:d8:23:24:78:77:7d:f8:5b:25:19:e1:a5:e4:b7:
ec:6f:72:3d:33:cc:85:ff:fe:c6:70:f9:18:1d:2b:
15:2c:46:32:5c:c1:74:15:be:8d:a9:4c:f5:9c:79:
73:1a:c1:3a:6e:c8:69:e6:91:ba:da:02:fa:46:1a:
ff:a6:54:e6:d0:df:6b:4c:61:e8:b8:1e:55:e3:55:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:94:C2:1F:71:2E:B6:DC:00:71:AC:E3:21:DA:4A:04:B3:6A:8D:2D
X509v3 Authority Key Identifier:
keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d1:56:e9:ff:2f:15:6b:7c:c7:8e:8f:68:0c:66:f3:04:13:
7e:f3:fa:3b:16:97:6e:cf:25:a4:bf:e6:c7:5d:ea:9c:af:b2:
4e:80:dc:c3:6b:0c:dc:13:8f:51:49:74:ea:05:7b:d5:cd:5e:
1b:04:dc:87:1d:cc:6f:40:fb:cf:de:53:c3:40:44:c9:0c:ba:
e2:7c:03:a5:a9:fa:54:6e:3e:61:4d:48:73:58:0c:b5:3a:ca:
c8:e0:75:87:eb:77:e6:42:6b:c9:69:c2:ad:3f:67:1b:e6:16:
e3:45:2e:a6:59:b7:19:fb:6f:c7:4b:e7:7c:cb:42:02:b2:fe:
0f:71:95:64:8a:18:96:00:b5:06:f2:8f:e4:24:07:94:87:48:
4f:fe:e5:c6:d5:59:27:e2:43:97:29:5b:32:4b:c6:36:9a:da:
7e:cc:63:8f:bc:07:b2:ce:df:b0:f6:3b:c6:d1:b8:37:46:14:
92:5f:fc:5c:85:60:32:76:ca:77:17:ce:3a:30:df:e9:f6:92:
1f:81:ee:5d:a0:b4:7e:19:e9:04:22:58:c5:cb:bf:da:75:cf:
13:b3:dd:51:ad:fb:85:97:fb:13:65:d2:45:9b:ba:42:0a:ab:
14:de:0f:f3:05:be:04:2f:01:23:79:dc:27:88:3e:f0:8f:e3:
e0:4f:93:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:22:27 2026 by rpki-client