Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier: Ux1SodpNKRntceNW9h+q/qOVVzxDYtehpPfa0XrNMN4=
Subject key identifier: 9A:AD:88:6F:39:5C:56:21:1A:06:61:82:9B:E8:CB:D4:B5:AE:A0:9E
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 019D984FDC1EBEE103D92B57DA0FF050FEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number: 18CA
Signing time: Thu 16 Apr 2026 22:01:03 +0000
Manifest this update: Thu 16 Apr 2026 22:01:03 +0000
Manifest next update: Fri 17 Apr 2026 22:01:03 +0000
Files and hashes: 1: Ig_zAXCn9vbFw7KxbkjMl45qbh4.roa (hash: VV7LhTzcbYlq8rfyk66GOg6XaES1MuVkOsiFHAWaNpk=)
2: TL1A_qeZFLWPpsnbfA9cmU0ctYM.roa (hash: Q8nTZN24u9mJs2w8KPuIp5t3PveHdtJEuDtOyRjriNk=)
3: TOJ03U-pk8ZKfSmj2VROvQgDtnY.roa (hash: EpZhvdW8kSRP3l2H/Fnes0x88lVH2bOzwjHn3A0hFLU=)
4: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: Mvef6kIh/jim3OvBQkYon/UXr+1HHkMMOFyQej4C9JQ=)
5: w7NAr2u_fskJOiH5ZL_DBig50oc.roa (hash: S337FZgQBWH3kGuKNK3U/HNaRNmRFoOB+d+zWxnLtV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:dc:1e:be:e1:03:d9:2b:57:da:0f:f0:50:fe:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: Apr 16 22:01:03 2026 GMT
Not After : Apr 17 22:01:03 2026 GMT
Subject: CN=9aad886f395c56211a0661829be8cbd4b5aea09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f1:24:13:0c:2e:96:35:c0:75:ac:9d:1c:72:
8d:65:23:e1:23:6b:1c:b4:20:fe:f5:7a:fc:7f:cd:
c1:60:09:6d:cc:07:61:90:8c:f3:8c:10:a8:73:f3:
bb:84:30:97:3a:57:0e:a3:7e:f0:1f:ba:ec:ae:21:
bc:5a:5a:e6:f3:ae:66:5e:84:3b:ee:3b:bc:e4:ef:
ba:56:81:15:01:2d:6e:43:d3:22:f4:4c:89:79:3a:
76:76:4e:59:62:a8:d0:ef:3b:d9:46:23:ff:7e:01:
28:f1:fc:7b:8c:db:f4:ef:c4:1b:19:f4:2f:93:de:
26:51:62:e9:49:7b:e9:19:ac:a3:c6:09:ff:dc:e1:
02:23:bc:9b:01:97:ce:85:1c:09:0f:90:32:f1:40:
ae:56:47:0e:0d:ff:c0:08:0f:5c:46:88:74:d1:3d:
52:71:7f:97:bc:99:f9:8b:c5:92:18:73:ac:0f:d6:
d1:27:55:11:a8:83:97:7b:37:00:a2:1d:7d:a2:48:
0e:8d:aa:76:93:b7:59:c7:2e:75:6b:c7:5a:d3:a5:
3b:77:3e:9e:19:95:e0:f0:e2:4f:88:30:4c:91:52:
06:14:51:13:02:e8:ca:e5:2d:8f:f5:b8:05:af:ab:
4e:76:e4:d7:86:b9:1a:5c:1a:d7:ee:cf:76:9c:17:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AD:88:6F:39:5C:56:21:1A:06:61:82:9B:E8:CB:D4:B5:AE:A0:9E
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e4:12:02:ad:d8:9c:0a:c3:4d:a0:0d:9b:76:cb:5b:fe:b2:
ca:7f:af:93:86:6e:9f:26:ef:dc:4c:99:1e:5b:dd:9a:a6:e4:
a4:fc:53:cf:b5:55:b2:00:bb:fd:03:79:66:3a:fd:90:0b:7b:
98:2a:ec:5d:3c:2e:ed:2f:63:ee:d9:2d:30:62:5d:ce:5a:37:
54:25:2e:5f:00:3e:5f:fd:2a:a2:a2:06:ea:9b:91:e5:e4:28:
8c:39:68:b4:63:ba:7a:44:60:9f:94:ca:40:38:73:ec:e1:06:
dc:e7:fc:0d:3d:82:6b:31:7c:f9:3b:79:28:34:67:85:64:ab:
34:ca:54:1c:ff:85:86:58:b4:4a:8f:42:58:9e:3f:83:95:24:
47:a1:f5:07:38:97:1c:41:81:82:81:a2:e6:07:7d:0b:44:2e:
00:01:f3:08:b5:81:86:be:bd:ab:25:60:4a:3f:cd:82:ea:06:
eb:ba:a1:6b:32:88:f9:e5:f7:6b:c6:b7:39:ac:51:10:3a:2b:
b2:4e:79:27:da:5e:93:04:a2:01:d5:e8:37:f8:0f:41:5c:04:
9a:0e:27:91:0b:d7:84:50:d6:11:bf:a3:b6:9b:c3:ca:d7:ec:
76:21:f0:2d:05:70:cc:bc:c3:68:b3:e3:a4:49:f3:19:9d:ae:
f1:18:c6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:32:14 2026 by rpki-client