Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
File: Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft (raw, json)
Hash identifier: Yfavch1DAs9a9vEP5seQT1N49CvNr491JAIyxhX5qLM=
Subject key identifier: 37:53:81:C2:6A:C7:25:41:02:2B:B4:84:E0:32:6E:38:A2:15:85:1D
Authority key identifier: 66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
Certificate issuer: /CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Certificate serial: 019D99D04974F1645D2CA07F99C31E44130C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 05:00:57 +0000
Manifest this update: Fri 17 Apr 2026 05:00:57 +0000
Manifest next update: Sat 18 Apr 2026 05:00:57 +0000
Files and hashes: 1: Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl (hash: Kg3a3f3vGDRlWa1LMoxDiVbADYGTahP3nU7BKYPQ9UI=)
2: fSnqZnwOIrhOfhDZkhdGS2yAncE.roa (hash: SVnN30Tg3P99sk9b/ymDGPmYqstKVPGeMKeKX2k4XeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:49:74:f1:64:5d:2c:a0:7f:99:c3:1e:44:13:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661e7174bf9e9ea1b64a92ba65ffcf1e931cce32
Validity
Not Before: Apr 17 05:00:57 2026 GMT
Not After : Apr 18 05:00:57 2026 GMT
Subject: CN=375381c26ac72541022bb484e0326e38a215851d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:b3:3f:ad:3e:4b:cd:bd:d2:bb:c1:50:a6:
40:78:78:67:5d:7f:ac:23:f5:15:bf:57:fd:9a:69:
6c:8c:15:36:ad:de:1d:c2:a0:fe:48:6c:ef:91:36:
81:60:4c:4c:10:bb:24:7d:92:b2:fa:54:9b:2c:42:
b6:ab:50:39:3c:81:60:49:62:b1:56:1a:e1:05:36:
89:09:bf:8b:39:c5:aa:84:df:a9:63:6f:ab:ac:ff:
ba:77:37:17:2b:f3:b7:82:67:a2:84:ae:7d:63:fc:
ee:62:51:52:00:46:ec:0f:7f:94:e3:dd:cd:1d:0a:
b5:0f:2e:0b:d6:de:3e:ac:1b:9d:23:78:65:ec:8f:
96:b1:ef:0c:7f:d6:fc:87:70:41:de:4f:4b:a9:b6:
61:91:22:d0:60:49:d3:13:16:81:48:8f:a9:bd:c2:
24:d7:8b:3c:57:57:2c:eb:91:8c:46:04:65:49:95:
ee:5d:03:61:be:ef:08:9a:41:55:df:ee:4d:3a:c9:
f0:56:42:41:ad:21:b8:26:57:83:09:e0:44:84:62:
1e:6e:4f:e3:8e:b9:7b:61:50:ef:c7:16:ea:2a:36:
9a:ca:52:5b:f6:44:db:b2:79:66:98:f7:00:0b:25:
aa:b5:d7:71:d8:d6:5e:30:a4:35:8f:05:63:74:fd:
41:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:53:81:C2:6A:C7:25:41:02:2B:B4:84:E0:32:6E:38:A2:15:85:1D
X509v3 Authority Key Identifier:
keyid:66:1E:71:74:BF:9E:9E:A1:B6:4A:92:BA:65:FF:CF:1E:93:1C:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh5xdL-enqG2SpK6Zf_PHpMczjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c27389-de12-4d13-9880-6bd844ea86c7/1/Zh5xdL-enqG2SpK6Zf_PHpMczjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ef:22:51:b9:92:cf:86:c4:fc:58:cb:13:a1:73:30:58:0d:
ef:1f:e3:fa:7b:a5:d2:9e:b4:1c:b4:9a:79:42:f4:e0:8a:01:
9e:6b:59:43:21:d5:5c:fd:e5:0a:88:2b:01:2c:71:50:f9:c4:
0a:00:c5:e0:c1:70:71:a0:6e:fb:c2:13:30:23:6f:c3:32:bc:
66:34:20:23:0e:67:f1:98:81:59:3b:51:8d:e5:e1:07:71:88:
45:2a:3f:33:7a:2e:00:79:1d:a9:4e:77:33:db:b5:24:b0:67:
62:b2:95:24:19:ba:d2:71:18:21:d6:fa:2d:d1:1f:0b:18:17:
2e:93:96:8a:78:d7:6d:6f:a5:7f:a8:da:73:9f:5a:8e:3e:0b:
d0:45:a1:b7:87:96:28:14:5b:b6:d8:47:89:b5:ac:00:28:4c:
3c:27:14:39:01:d2:8d:06:e4:36:f9:3a:d4:7f:d9:fc:f8:f6:
b5:d1:e4:35:c1:cf:a1:63:c6:ad:2a:74:c7:6f:ef:00:22:ef:
7c:a0:36:02:75:79:30:ff:e9:53:47:f9:58:7f:33:71:5a:ce:
37:c8:8d:8a:a5:6f:cc:22:8f:0f:e5:d9:eb:84:e4:45:a7:b2:
c9:d1:1c:54:3d:6c:e8:71:1a:09:68:22:25:30:10:c2:d6:8d:
76:6c:f1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:50:52 2026 by rpki-client