Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier: Gb+1nLSZOrECK6tLv5c/np8rG07JV7YjVjIo/Di40mM=
Subject key identifier: 5D:89:FF:A9:D6:03:58:16:44:98:85:5C:66:DE:4F:60:73:53:AD:38
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer: /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial: 019D984F8BB810FD3D1D57AB9BD9BC065B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:00:42 +0000
Manifest this update: Thu 16 Apr 2026 22:00:42 +0000
Manifest next update: Fri 17 Apr 2026 22:00:42 +0000
Files and hashes: 1: 502RJFuHYsVVdsk5nlBdFZUnjzA.roa (hash: J6t8qFuhu7mWQDizillanFkdE0VQubG3/+wxJ1PTiNE=)
2: H5WGDRV0Cja1HIG_Gz5Hy5IDN2I.roa (hash: xT+WKT5cnc3Ep9zj5B/hCN7Fut8wkjVPD70bqm1rWyw=)
3: N3w2YmGANLSdSH-pmW22BuKUUBA.roa (hash: uB29W9OdRAZ7PHwh9T8cMIQuzRXrkCYKeRnBEx1cojA=)
4: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: dgBCkxVz7FnDivehvnvRqGlB61iPJd9mkaHS/htKhGY=)
5: ehC04eDurG--NxqYOKej5J5_Mkc.roa (hash: awoH3KlHVYA/xFgpcE34EbkUxOAICljJqKoGjg1R2VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:8b:b8:10:fd:3d:1d:57:ab:9b:d9:bc:06:5b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Validity
Not Before: Apr 16 22:00:42 2026 GMT
Not After : Apr 17 22:00:42 2026 GMT
Subject: CN=5d89ffa9d60358164498855c66de4f607353ad38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:a9:4c:bf:bb:24:2c:0d:7c:ef:32:c8:b0:
bd:5c:30:21:30:eb:fc:5b:9d:66:61:d0:bc:46:76:
54:bf:24:30:ee:04:26:6d:e2:34:87:0b:78:39:13:
8f:2a:0b:63:2c:c8:9e:86:2f:71:34:2d:80:74:96:
fe:fd:d3:09:fd:fc:07:85:e0:fa:5b:4e:68:6c:1c:
41:df:c4:d4:22:33:11:db:a7:cf:76:3a:b6:ee:10:
30:ce:30:9d:7b:27:61:17:3a:e7:79:6e:f6:67:32:
38:3c:99:b0:90:ba:5a:85:3e:86:a8:d9:55:aa:cb:
ae:c6:7e:f5:60:2a:32:ec:a6:6a:3e:ef:e5:2d:af:
00:42:ff:bf:1b:d1:3e:63:b2:8a:34:11:20:d4:60:
fd:29:5f:0e:4d:5f:61:17:ae:24:8f:b5:57:28:45:
a0:75:e3:7d:7a:24:44:65:0c:cb:ba:08:13:b8:a9:
9b:a4:69:b7:02:f4:b2:34:29:05:b1:00:bc:09:9c:
cd:1f:10:1d:2e:8e:43:8f:45:49:70:6e:3c:6c:61:
dc:3d:2b:55:f1:2e:56:ad:7e:2d:2a:c5:53:38:55:
8a:5a:7c:20:39:bb:ca:96:09:65:5e:3d:ce:86:b5:
b3:ef:da:9f:47:f4:4b:fe:1e:40:81:ff:d3:d9:59:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:89:FF:A9:D6:03:58:16:44:98:85:5C:66:DE:4F:60:73:53:AD:38
X509v3 Authority Key Identifier:
keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7f:87:76:68:bb:80:0b:66:3a:fd:88:58:00:5c:ab:97:a7:
f9:f2:c7:0c:e3:a2:8b:a0:c5:e8:22:e8:46:c4:d2:a5:c2:11:
fd:7a:c3:58:d5:04:ff:a2:43:fb:43:5f:c4:1b:8f:04:a9:43:
05:7b:a8:4d:85:41:4f:25:aa:49:e0:67:67:90:2a:41:a2:94:
69:cf:57:95:95:f5:a4:7e:4b:fe:e0:5e:e3:be:e0:80:c6:47:
43:c9:a3:d7:0a:6e:ac:2d:19:ef:ab:98:5f:71:88:ea:bc:55:
52:cb:48:66:12:07:f8:a8:de:0c:1a:bb:e9:c4:34:c5:5c:36:
18:94:55:98:71:06:95:e3:f2:a3:a6:c8:85:11:6b:3c:f0:ea:
76:48:83:6f:63:bc:7e:bc:e1:30:31:a4:24:59:ed:3a:64:f5:
68:79:c3:99:b5:18:bb:71:34:f8:33:5b:a2:18:32:d9:1a:dc:
83:d7:5f:8a:ad:e8:90:12:40:c3:e3:87:3e:40:ff:84:9e:35:
49:fd:28:b2:b1:b6:46:e5:1f:c0:6e:e0:5c:ba:a5:a2:24:64:
9e:52:41:2b:ac:0b:9b:47:e3:f7:bb:d2:38:37:42:a9:1a:84:
84:3e:60:40:9f:44:b6:38:12:a0:38:b1:f6:8c:ed:ca:08:ba:
66:e3:f8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:43 2026 by rpki-client