Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File: zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier: gL+z8RqdqZ3qnRdsPf2PUjB2CyILsEn2Kmujc1vKAqM=
Subject key identifier: 71:3F:66:7D:F2:2D:2B:7F:93:98:2E:0F:29:F1:E6:18:AE:81:B3:BC
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer: /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial: 019D9A07254AA0E315985E76ADF9C2BCE8E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 06:00:52 +0000
Manifest this update: Fri 17 Apr 2026 06:00:52 +0000
Manifest next update: Sat 18 Apr 2026 06:00:52 +0000
Files and hashes: 1: Jn62z3mXSy1gXL7OU0u8UHUvETk.roa (hash: kRvtxB45lBHtSWkwsN/FFj92E84r6pWGnn92gwu5MRk=)
2: ZZTFmfbdMQ6snkjprGV8Heyn37E.roa (hash: lKKyBMRX1vPM6siDs8lqYfEIzSGcaMWz+LcZio2IfVk=)
3: ni888ovsC-BTLPerI4QeQ0fgZFE.roa (hash: 7VDMLDKY6Y0XMf/x1rrlPpTjJxlLSO2U8m99nvv5wFc=)
4: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: 4jcheyTOMfE40p5y58cbQHj9u6W0XiMR/6kkYREhFpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:25:4a:a0:e3:15:98:5e:76:ad:f9:c2:bc:e8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
Validity
Not Before: Apr 17 06:00:52 2026 GMT
Not After : Apr 18 06:00:52 2026 GMT
Subject: CN=713f667df22d2b7f93982e0f29f1e618ae81b3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:18:d7:bc:d5:cd:6f:79:99:f0:77:8c:86:
dc:df:e8:7b:50:7d:a2:70:4c:49:78:49:c6:e6:aa:
af:86:48:9d:74:00:88:ae:52:2c:38:97:13:7d:9d:
9c:43:80:38:9d:16:33:ff:d2:20:e0:b3:69:ce:b7:
2e:3c:d9:d9:73:3d:4b:4e:85:59:0d:55:a9:07:7e:
83:40:42:b2:3a:03:47:cc:d6:3a:0b:fa:d2:b2:a4:
0c:b9:bf:96:97:21:7d:79:47:5d:d0:6d:12:e4:17:
a0:d0:fb:c9:a7:ef:66:3c:f2:b7:bf:52:71:7c:2b:
f9:ec:5f:0f:9d:af:b9:87:f6:3d:98:03:ec:32:09:
3c:6f:16:92:18:90:ce:7b:ae:5a:a5:c6:9d:3f:a6:
16:bc:b6:59:3f:de:54:87:97:05:ed:79:a0:14:c4:
03:7c:8c:29:3c:f4:9d:f4:10:5c:6f:5f:b2:ff:7b:
7a:b5:3f:e1:90:a3:a5:0e:25:f6:2f:6b:38:4d:64:
5a:36:77:d2:35:f3:63:30:6b:86:d4:ea:73:fa:fc:
24:04:de:36:cb:60:30:b4:6a:5e:fe:a0:04:2c:22:
19:eb:27:43:76:75:d6:33:5e:bd:36:d7:4c:c1:83:
48:c6:90:df:2b:66:7e:c0:52:23:8e:9e:37:b0:b4:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3F:66:7D:F2:2D:2B:7F:93:98:2E:0F:29:F1:E6:18:AE:81:B3:BC
X509v3 Authority Key Identifier:
keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:31:66:d0:08:ee:c7:4d:1d:bd:e6:32:ad:a2:f0:a9:48:f3:
b0:07:0d:04:cc:9b:8a:ad:3d:6c:6b:e2:d6:0d:1b:b2:3b:23:
2b:a5:7b:dc:2c:a0:49:77:99:77:32:fe:ca:64:b9:17:b5:43:
8e:7b:1c:5a:39:58:c2:27:68:51:b3:c7:f1:2f:84:c0:3b:c3:
43:50:52:6d:fa:ca:aa:d4:db:c6:8c:90:48:89:b1:51:37:00:
69:b6:e4:a8:e8:06:dc:58:27:2b:a1:35:22:e4:19:68:ff:48:
0d:e8:69:1d:c1:79:77:b2:92:74:99:7c:e4:ce:d5:a7:7f:80:
3b:d8:76:8f:81:7d:ff:14:eb:e6:f6:ec:0d:13:9c:e3:28:31:
c4:7e:6d:d0:41:8e:9b:1c:c1:3e:9c:f0:dd:4a:7f:ff:74:ae:
74:e8:ec:86:0e:1d:50:13:8c:1e:2f:ec:49:4f:fa:6e:89:bb:
c2:bb:c5:b7:ed:34:45:1a:7d:ac:06:e3:31:09:e3:d1:bf:e3:
b1:e7:55:aa:ae:15:fa:54:67:0f:a2:2e:fe:69:2c:fb:62:2f:
9f:30:00:02:f3:1c:46:b4:e3:30:9e:ba:f5:dc:ff:63:92:69:
d3:fb:ef:4e:38:b0:f9:6b:0c:4c:af:17:36:69:7f:60:28:5e:
b6:c8:7c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:29 2026 by rpki-client