Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: Tjj60CROTB7pqJcZS0aOug23xYN1jL4w9rLvc1Ny+BE=
Subject key identifier: 99:F1:46:94:86:62:1A:2E:78:49:D8:9F:DC:5C:E5:68:78:66:09:EE
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 019D9A06F0FADF73015A8FB203CE4E2141BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 0868
Signing time: Fri 17 Apr 2026 06:00:39 +0000
Manifest this update: Fri 17 Apr 2026 06:00:39 +0000
Manifest next update: Sat 18 Apr 2026 06:00:39 +0000
Files and hashes: 1: W37sGJ1Z1wl4UUbIKXQMtHltG0E.roa (hash: hXtR6w7vecs+GA3es0V1qVgIw93rkqQSf8/pd9Bww6I=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: fj7OjzoFT7BbfTu9tUHu2FBVVuISpWENYTPHEbIhrEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:f0:fa:df:73:01:5a:8f:b2:03:ce:4e:21:41:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Apr 17 06:00:39 2026 GMT
Not After : Apr 18 06:00:39 2026 GMT
Subject: CN=99f1469486621a2e7849d89fdc5ce568786609ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:03:cc:85:54:8b:41:3d:b1:a7:d2:c2:a7:
a4:ad:27:9f:3f:b4:f6:4a:43:70:c6:d6:d3:48:e7:
da:cf:d9:d5:ab:01:c4:5d:4f:ea:92:bd:6c:9c:26:
de:f1:b5:14:ce:8e:56:3e:6b:f0:4a:fb:fe:35:da:
02:c7:81:28:8f:aa:5c:f1:34:d4:20:c7:60:75:5c:
c6:9f:ea:e6:c4:42:6b:2f:26:87:77:bb:ec:82:d4:
87:43:50:4c:5f:f0:9b:a9:f1:f6:77:85:30:62:17:
52:5d:32:37:54:ef:c2:09:9b:9e:f1:4c:31:ac:4c:
9b:e0:5b:6a:9c:8b:9b:62:39:a9:e1:11:10:a0:b7:
48:3f:d8:df:18:d4:00:da:6a:48:b7:07:d2:54:0f:
af:aa:9f:e7:54:9d:de:ad:7c:a5:19:78:61:1d:f3:
9c:ae:57:4d:4e:8a:cf:19:f2:ec:fc:36:7b:78:bf:
95:94:3a:ca:5c:43:49:e2:81:ad:b6:31:32:7f:86:
73:91:8e:a3:55:eb:b8:a9:89:e7:a9:b5:53:ff:f3:
3b:4e:fc:88:cf:66:f8:63:df:87:71:66:51:06:f6:
c2:c8:e6:88:8b:86:2c:66:8d:34:91:eb:23:00:a2:
9f:c5:2d:97:f4:d9:e1:b4:c9:12:6a:c8:3c:29:77:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F1:46:94:86:62:1A:2E:78:49:D8:9F:DC:5C:E5:68:78:66:09:EE
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:07:df:f3:8f:d9:82:7a:2f:1c:96:e8:45:5a:9e:55:23:4e:
bb:4f:da:60:75:c0:c8:26:ab:89:35:2d:54:96:c0:bd:fa:0b:
36:55:5b:19:af:0d:5f:29:87:72:95:0f:20:f7:5f:b0:9c:61:
f9:62:21:9a:c2:8c:ad:33:b7:72:d9:71:7c:65:97:88:1c:6d:
a3:0e:6c:b8:a3:71:c6:e5:7d:74:d6:2f:8a:80:39:3d:f6:42:
e9:e3:90:7b:fa:c1:a4:3a:d7:5a:71:f0:b5:11:fa:81:e6:2d:
d5:17:ee:8a:e2:94:09:5f:d4:ae:c2:6b:2d:98:85:c2:d2:f3:
fb:f0:59:bf:e1:d0:5c:43:82:db:30:a4:54:49:00:60:52:0e:
cd:d1:13:87:e7:44:9f:87:e0:3f:d8:35:eb:4e:42:81:cb:9b:
41:df:6e:28:0b:e8:03:46:87:95:12:bd:55:5a:37:0c:c8:6b:
5c:5e:28:43:b5:e7:db:20:4c:2f:6b:fe:5c:d1:5d:67:69:ce:
c4:94:03:6e:fc:59:f7:1e:5e:4a:d9:91:af:97:cb:8d:77:cb:
77:f9:b2:59:f0:ca:ab:88:55:63:d2:db:be:fc:9f:8b:28:31:
54:53:47:84:91:8e:8c:5d:f7:64:0b:b1:cd:e9:f2:a7:81:cc:
26:4a:d7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:41 2026 by rpki-client