Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json)
Hash identifier: 1sspKn2rtnjbZieIe4Vn7mVe/8mu28M583LAj4dH+PA=
Subject key identifier: 60:49:B4:C9:16:72:5D:62:6A:84:81:BD:88:BE:30:16:3E:27:98:7B
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial: 019D97AAF1DEE811B5F7E4C8947764A310B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 19:00:55 +0000
Manifest this update: Thu 16 Apr 2026 19:00:55 +0000
Manifest next update: Fri 17 Apr 2026 19:00:55 +0000
Files and hashes: 1: k212pOftYaKL3__dZMrFZE2MH5E.roa (hash: PKolWasV9tkUQ7UVtjo0IH2y7lrM7NWS9+jgOePyuP8=)
2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: gxwwrTr1wGRH1GprjIRljAKA9bizfOACkcKTGNfVFQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:f1:de:e8:11:b5:f7:e4:c8:94:77:64:a3:10:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Validity
Not Before: Apr 16 19:00:55 2026 GMT
Not After : Apr 17 19:00:55 2026 GMT
Subject: CN=6049b4c916725d626a8481bd88be30163e27987b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:7b:01:8e:32:a6:e9:17:76:d4:fe:06:95:
58:62:ad:e8:4f:3a:d0:74:fe:ed:f1:28:51:62:82:
ab:e7:6b:ff:1b:10:49:47:5f:64:a0:40:cb:cc:00:
14:11:60:ec:24:73:36:b6:16:37:1c:19:2f:34:c9:
e0:a7:11:18:c1:a0:71:52:0f:4b:01:57:e0:f1:c3:
68:9c:bb:e0:41:59:9e:68:98:27:ce:da:4b:97:a7:
5c:7a:43:1d:b1:4a:18:fe:61:b5:57:4b:7a:66:02:
a4:a4:59:be:3e:96:b5:0f:d6:8b:01:00:a5:c2:6b:
b2:46:b9:7b:ff:32:64:a8:20:2f:dd:cc:6b:3e:0f:
58:7d:4f:67:52:d5:8d:c9:0c:ec:e3:24:cf:89:ea:
10:5f:c2:0a:b7:ce:e0:41:bd:07:7e:09:e2:df:5e:
d2:ec:3d:11:9f:21:24:a6:1b:7d:83:9c:b1:b9:75:
fe:27:79:00:cb:15:63:c0:20:3e:97:b7:1c:fb:e0:
3e:9f:ca:4c:f5:0d:9d:24:c3:b8:37:17:af:17:d2:
7f:b0:26:5e:d4:97:c3:58:aa:70:3f:17:2a:b8:49:
2c:33:c3:cf:11:2b:f2:f4:ec:09:dd:66:19:f7:9f:
5b:48:ca:30:2c:79:e0:9c:a8:6e:a7:d5:ae:ab:6b:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:49:B4:C9:16:72:5D:62:6A:84:81:BD:88:BE:30:16:3E:27:98:7B
X509v3 Authority Key Identifier:
keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6d:06:c1:27:db:73:5c:ac:f6:ec:bf:0e:04:1d:60:7e:49:
5f:08:ab:40:d1:80:71:a9:84:09:2a:f9:9c:56:33:d7:71:b7:
54:65:94:37:0e:cb:a5:3f:f1:66:40:73:7a:6f:97:06:84:81:
17:35:82:e6:6c:18:4c:f9:6e:44:a0:a9:b0:a3:ce:dd:0e:39:
b7:85:c8:f5:cf:14:57:07:af:ed:73:62:97:93:ed:b1:0c:bf:
94:7e:70:57:37:d2:ff:49:0d:59:94:e7:c0:84:6e:32:61:ba:
4d:c4:8e:9f:dc:b5:9a:94:d2:25:9e:cc:37:44:49:0d:53:12:
63:f0:eb:28:10:39:26:70:0c:5f:38:c0:c2:ba:f3:50:19:72:
bc:d5:df:84:6f:b3:51:2b:a5:17:2b:63:bc:ae:32:2e:b4:a0:
dd:4b:95:a9:86:4f:77:63:17:73:74:28:a9:df:38:aa:56:67:
13:05:19:97:2e:74:af:84:02:5b:d1:25:ba:7b:e7:b4:59:bc:
1b:9c:ce:16:2e:c6:26:77:8d:2e:ee:9e:9b:08:32:67:37:09:
a6:cf:9b:4a:fb:81:07:f6:5f:8a:38:05:ab:58:6e:e0:7a:ac:
bf:75:d7:f3:61:b5:dd:0f:5c:fd:2b:55:69:3c:92:cd:23:f4:
03:a0:88:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:01:41 2026 by rpki-client