Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
File: zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json)
Hash identifier: ZP4v6IKUdj3Iw+nMhe+4U8FUppUs4Q7vfHOtrf9/isg=
Subject key identifier: 5D:AA:0A:85:94:BC:70:C0:40:79:6A:8D:3C:49:64:41:FB:77:C5:34
Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Certificate serial: 019D9962A50AAE6BCB55A272DD4E96425628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:01:11 +0000
Manifest this update: Fri 17 Apr 2026 03:01:11 +0000
Manifest next update: Sat 18 Apr 2026 03:01:11 +0000
Files and hashes: 1: 3GOUf5zM72xHW-KizqGmfejZI-I.roa (hash: 7Jjry34OgvJlCQgmEgxo8SwsDK8ifphC6Z5s0sCqAbk=)
2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: 0yXVBQqnIPHoNu3SNeKXIli1nbEnHugYXy1Hi0PoY/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a5:0a:ae:6b:cb:55:a2:72:dd:4e:96:42:56:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Validity
Not Before: Apr 17 03:01:11 2026 GMT
Not After : Apr 18 03:01:11 2026 GMT
Subject: CN=5daa0a8594bc70c040796a8d3c496441fb77c534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:15:03:b3:79:c0:86:9a:6d:a3:b7:33:0a:
80:7d:c1:09:76:b5:e8:38:78:47:06:2e:cb:95:db:
18:26:a6:30:49:5e:81:27:bd:8c:76:e5:03:aa:1c:
03:c6:1d:41:93:8b:21:4b:c6:67:9d:74:35:0b:7e:
ad:fc:ce:3c:e2:f7:08:d3:71:cc:c0:ac:69:e3:ba:
78:f9:ea:12:13:32:f2:13:fa:77:39:a4:f8:f9:90:
a5:f2:ee:1e:42:dd:bc:db:18:03:64:60:fa:7d:1d:
6a:e1:3a:75:1f:b1:94:3a:aa:d5:16:3f:69:2b:69:
aa:c9:1c:fa:d1:0c:83:08:64:a7:66:bd:ce:2b:1d:
cd:d0:2c:82:ea:b7:14:35:71:a4:a5:c5:68:b3:c9:
fd:cf:6c:63:1f:84:7d:ed:57:f6:47:a2:7c:af:45:
c5:76:56:d8:3f:c1:f8:e2:c2:20:44:a2:79:31:f0:
8b:9f:4a:bf:0c:86:90:d5:28:95:ce:7a:56:34:44:
66:6f:2e:16:31:45:fb:29:2b:ff:7a:15:50:ec:7a:
70:d4:62:85:14:40:5f:72:41:8a:6d:8d:31:0d:48:
52:65:e3:a9:55:31:8e:e4:3b:9e:8f:4f:53:4c:d9:
7a:3e:a5:8b:73:c9:9a:32:73:1c:62:12:a6:a5:0e:
6a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AA:0A:85:94:BC:70:C0:40:79:6A:8D:3C:49:64:41:FB:77:C5:34
X509v3 Authority Key Identifier:
keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5a:eb:63:11:f4:33:79:72:22:70:63:24:69:f2:ec:a8:34:
b9:7b:15:48:33:ab:4a:78:66:76:6a:7b:4b:30:40:1e:ff:9a:
a7:27:ed:14:29:41:2f:8a:2b:16:7e:39:7f:c8:3d:d5:52:bf:
33:51:7d:c4:d4:89:e4:99:8a:e8:48:f8:2b:96:03:82:73:c7:
6b:73:09:96:fc:54:3e:e7:85:5b:d8:4c:f1:fb:67:51:8d:43:
0e:8b:e8:17:83:14:87:2a:63:21:6d:08:f6:cb:e5:af:52:c3:
f3:35:d0:0d:06:9c:6d:d5:b0:6e:ea:d7:48:b5:37:b7:ac:7e:
8a:07:57:47:39:79:b8:a4:6f:e5:5a:fa:27:ca:ba:e6:f1:86:
23:ac:cd:37:de:56:d3:79:77:9f:ba:ea:07:a7:41:3a:61:09:
67:62:b1:f0:d4:fd:b7:ba:ff:5b:a8:ae:e3:66:91:64:14:94:
2a:29:6d:58:37:91:fe:85:7a:97:9b:54:f9:4d:e5:50:0a:93:
dd:94:c7:4d:1d:68:d3:ec:0a:fe:c6:25:75:59:c4:ba:1c:21:
cf:e4:62:32:12:6f:65:e4:bc:4f:a4:cc:3d:d3:bf:e3:76:78:
d4:4e:63:1d:b8:16:34:11:c5:f0:96:74:e0:39:fd:34:f4:79:
0d:2b:8d:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYqUKrmvLVaJy3U6WQlYoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNTdlYzRjNDAyNWFkYWI4OGI5MjA3NGFkNDYwNTZlOWY5
MzA5OWYwHhcNMjYwNDE3MDMwMTExWhcNMjYwNDE4MDMwMTExWjAzMTEwLwYDVQQD
Eyg1ZGFhMGE4NTk0YmM3MGMwNDA3OTZhOGQzYzQ5NjQ0MWZiNzdjNTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRIVA7N5wIaabaO3MwqAfcEJdrXo
OHhHBi7LldsYJqYwSV6BJ72MduUDqhwDxh1Bk4shS8ZnnXQ1C36t/M484vcI03HM
wKxp47p4+eoSEzLyE/p3OaT4+ZCl8u4eQt282xgDZGD6fR1q4Tp1H7GUOqrVFj9p
K2mqyRz60QyDCGSnZr3OKx3N0CyC6rcUNXGkpcVos8n9z2xjH4R97Vf2R6J8r0XF
dlbYP8H44sIgRKJ5MfCLn0q/DIaQ1SiVznpWNERmby4WMUX7KSv/ehVQ7Hpw1GKF
FEBfckGKbY0xDUhSZeOpVTGO5Duej09TTNl6PqWLc8maMnMcYhKmpQ5q2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2qCoWUvHDAQHlqjTxJZEH7d8U0MB8GA1UdIwQY
MBaAFM1X7ExAJa2riLkgdK1GBW6fkwmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMmYzNTQtOThjZC00MzI1LTlmYmUt
NzYyNDMyZmRkNGRkLzEvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wMmYzNTQtOThjZC00MzI1LTlmYmUtNzYyNDMyZmRkNGRk
LzEvelZmc1RFQWxyYXVJdVNCMHJVWUZicC1UQ1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1rrYxH0
M3lyInBjJGny7Kg0uXsVSDOrSnhmdmp7SzBAHv+apyftFClBL4orFn45f8g91VK/
M1F9xNSJ5JmK6Ej4K5YDgnPHa3MJlvxUPueFW9hM8ftnUY1DDovoF4MUhypjIW0I
9svlr1LD8zXQDQacbdWwburXSLU3t6x+igdXRzl5uKRv5Vr6J8q65vGGI6zNN95W
03l3n7rqB6dBOmEJZ2Kx8NT9t7r/W6iu42aRZBSUKiltWDeR/oV6l5tU+U3lUAqT
3ZTHTR1o0+wK/sYldVnEuhwhz+RiMhJvZeS8T6TMPdO/43Z41E5jHbgWNBHF8JZ0
4Dn9NPR5DSuNAg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:28 2026 by rpki-client