Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
File: ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft (raw, json)
Hash identifier: OpiV7D4gnCbS2pb8pmuvr4iRzGB5kzyT/F19zshejTo=
Subject key identifier: 17:84:72:EE:EB:DD:E0:02:13:9E:72:0E:1C:8F:27:5E:E8:00:1A:01
Authority key identifier: 65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
Certificate issuer: /CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Certificate serial: 019D9B1969819D4CB8797F3E346F826A3DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
Manifest number: 0378
Signing time: Fri 17 Apr 2026 11:00:26 +0000
Manifest this update: Fri 17 Apr 2026 11:00:26 +0000
Manifest next update: Sat 18 Apr 2026 11:00:26 +0000
Files and hashes: 1: OpiyEA7jLNoth377L3JQZRW22EA.asa (hash: r8ONgzWitytpplKZRKdun1LH8tmOWmyteR7//LNHOZ8=)
2: TBDRW3pZmuh3LqJB0SgJxwzZcn8.asa (hash: hzhoB7Z5vY10r4VrziTI+hp0NwmrNuDhAq362RHDbhc=)
3: ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl (hash: YT5Dn+Jyk057GfHdHXRAfaLMaUu7TKEdBLqgOHGgCN4=)
4: m0PF4BK3O9Y2-d_izx7bC-pV_Es.asa (hash: D09pxW5zPXOvJqHki3xg8YhkV/MNoANsgzWxuDtJUNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:69:81:9d:4c:b8:79:7f:3e:34:6f:82:6a:3d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Validity
Not Before: Apr 17 11:00:26 2026 GMT
Not After : Apr 18 11:00:26 2026 GMT
Subject: CN=178472eeebdde002139e720e1c8f275ee8001a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:2c:bf:7d:67:f4:58:1d:e8:96:a0:34:b9:
9e:68:63:8e:62:89:ed:91:26:cd:39:f5:3b:d3:4b:
e8:77:e5:db:95:bf:95:84:83:1f:d9:e6:bc:35:82:
a4:a7:0c:4b:b3:61:1b:80:0e:58:e1:64:05:76:24:
d3:56:0d:57:ae:cc:25:73:0d:f3:c7:f1:61:29:8f:
b2:f8:0e:0f:f8:e2:ba:9b:6e:c6:26:88:48:23:49:
cf:99:a5:39:4d:f1:37:98:bd:fc:a4:3a:f9:3b:d2:
67:92:a9:8e:0c:78:f1:bb:c6:6c:15:b8:2f:84:9e:
84:6e:59:1b:8a:a1:7d:6f:32:12:91:4f:05:0e:d9:
8e:03:74:c0:df:10:d9:fb:97:3b:1f:53:75:f9:85:
93:71:9a:b5:71:71:f5:9d:24:ea:92:c6:5c:1e:26:
06:4e:dc:ca:c0:62:6b:f3:f1:d3:66:8e:3a:46:b9:
4f:82:94:44:a5:35:2f:1f:6b:18:ab:97:72:49:db:
7f:e1:74:0a:3f:da:29:dc:0f:bb:c7:3a:06:06:35:
b7:c5:fd:10:bc:fd:9e:ae:fd:37:77:ef:fe:71:04:
9e:4c:39:a2:1c:00:81:dd:58:fd:f3:8e:6a:2e:5d:
49:ca:6b:40:91:b3:62:f0:71:af:5a:51:29:0c:f2:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:84:72:EE:EB:DD:E0:02:13:9E:72:0E:1C:8F:27:5E:E8:00:1A:01
X509v3 Authority Key Identifier:
keyid:65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:32:bd:8e:70:c9:95:30:89:28:ee:77:ea:5a:57:26:e3:97:
25:e1:08:b6:2c:55:19:f0:83:14:50:d9:87:45:a4:85:cb:1e:
8a:90:6a:8c:b3:f3:5d:0a:b6:2f:ba:68:7a:52:6b:a8:c7:d5:
a6:ee:84:98:cc:ff:d8:f9:83:7c:ba:9d:f6:65:e6:4f:a4:2c:
f3:08:b7:38:41:1e:99:d8:4b:2c:e2:33:ad:d3:98:02:1a:82:
bc:30:f7:6d:53:58:72:ee:c4:7b:84:4e:30:07:69:68:7e:66:
66:e8:37:b4:a3:09:23:47:28:19:c8:c1:94:e7:8b:16:4d:10:
4c:60:8e:bd:76:8c:dc:c9:43:40:a0:84:ad:21:5a:05:38:ff:
43:da:69:1d:77:66:64:f0:27:2f:3b:52:56:2e:c8:a3:cd:bd:
c3:1f:ab:6c:93:ba:1a:99:d7:3b:d3:c2:61:2d:1d:7b:c8:fa:
43:1a:67:65:76:44:39:3c:77:5b:54:67:49:5f:6a:f6:77:48:
4c:67:eb:87:45:5b:f5:97:31:ec:4a:ab:be:4b:81:c8:c5:51:
11:3d:22:d8:50:4f:8f:c1:20:56:f0:d8:06:d7:9d:3e:b1:f2:
70:d7:16:e5:8a:7f:42:37:d9:dd:ae:16:44:8d:05:31:3f:12:
83:b7:30:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:11 2026 by rpki-client