Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: yi/wF4RtFsdecbacGfN2CiZAwQWQN7KGK2DXMUDE/qc=
Subject key identifier: 33:4A:F0:B9:C9:3B:E8:65:6A:6C:F9:FB:F8:FA:8A:C9:82:18:0B:19
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 019D9C632ECB4E64320B9F6F2C9CEFD91CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 17:00:38 +0000
Manifest this update: Fri 17 Apr 2026 17:00:38 +0000
Manifest next update: Sat 18 Apr 2026 17:00:38 +0000
Files and hashes: 1: lz_wShBEMScRLpNIlFJG1rBoiF4.roa (hash: d/v05QGqY1AL+DPGS5unWRu61oq5dQYWqSy/Y4KvwgA=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: desH1lH0x7cDx6dkxbmf4+7MJfupX+K313zSwgdqofQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:2e:cb:4e:64:32:0b:9f:6f:2c:9c:ef:d9:1c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Apr 17 17:00:38 2026 GMT
Not After : Apr 18 17:00:38 2026 GMT
Subject: CN=334af0b9c93be8656a6cf9fbf8fa8ac982180b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c5:c0:fe:25:dc:aa:d6:ed:ce:c8:51:8e:50:
80:67:0f:62:18:28:55:dd:da:25:2b:fe:75:1b:54:
2e:11:d1:70:4a:4d:20:09:b4:cd:bd:9c:54:65:bd:
00:69:fd:c3:6f:68:00:c6:84:5c:74:3a:b9:99:e7:
96:70:5e:a4:e0:39:e8:56:68:c6:4d:9f:28:da:6d:
33:39:9f:d5:ff:ef:b9:0c:cf:7a:f0:6d:6d:c4:68:
1f:f8:84:4a:1e:52:41:07:20:0a:47:b3:79:f0:08:
5d:8c:28:06:be:53:75:4b:ef:71:d1:e8:4f:8e:7c:
ff:a1:5e:2d:be:63:59:16:ae:9e:ed:5f:f8:47:3f:
3c:f7:bc:3b:61:f3:24:d4:11:54:2c:c6:ae:99:84:
1b:94:1e:58:d7:74:32:73:d4:5b:57:35:a2:80:7c:
b0:50:58:de:c5:59:14:da:bd:6c:b0:8b:c2:e7:d1:
a2:83:b0:80:28:45:13:ba:49:78:d4:1c:ae:16:d4:
41:a4:46:61:c4:2c:c6:b8:30:7d:c5:db:26:97:d5:
7e:89:be:b1:2e:1f:e3:8c:86:8c:1e:d1:ad:df:1f:
df:06:b7:25:d4:48:bb:bb:c9:8d:7b:55:21:fc:cb:
0b:0c:95:0a:4d:64:5b:c1:21:16:07:e1:53:b5:83:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4A:F0:B9:C9:3B:E8:65:6A:6C:F9:FB:F8:FA:8A:C9:82:18:0B:19
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:89:ad:1b:d9:01:d6:e6:43:e5:83:e9:a6:e2:e8:d9:38:85:
cd:89:3e:6a:4b:f3:d6:10:dc:e4:68:15:ee:8e:f9:5b:47:b5:
f2:d1:76:16:5d:66:c6:07:08:2c:39:f9:a4:80:92:1c:10:33:
65:0d:a7:e6:12:80:72:1f:9a:e2:0a:cb:2e:8a:4d:89:5e:cc:
fa:7e:6c:c1:a1:e8:60:ae:d9:c8:93:bd:83:db:ed:00:57:81:
6b:65:9b:1c:90:8b:0a:39:13:c8:0d:a5:00:7b:6d:5a:9c:f3:
2c:72:24:1e:74:5c:55:6f:e9:4f:5b:ae:2e:49:c5:ec:42:45:
7f:e8:a2:8e:0c:26:9a:62:d3:42:34:02:77:28:0f:0d:61:30:
11:ff:c3:ec:52:49:53:74:73:5f:10:d5:4f:64:e1:52:6c:03:
0d:0f:5e:9c:0a:90:de:d2:a7:ac:16:71:92:ca:30:85:9f:a9:
9b:62:b0:88:bd:cc:6b:7a:77:9e:02:b5:af:6a:2f:0b:08:ab:
dd:40:14:bb:48:0e:e0:ea:16:0b:fa:6a:71:18:fa:6e:50:f6:
73:7d:b2:c9:11:6b:ca:c1:26:17:67:91:2d:50:b4:a4:b0:d0:
b2:0a:68:5e:41:23:27:a6:89:f6:ee:32:62:33:f3:01:d0:c3:
3b:32:f8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:35 2026 by rpki-client