Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
File: zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft (raw, json)
Hash identifier: RlahY/Eb60Lact3/MNMESfDLYcdMt7cf1k76Uk8wXNs=
Subject key identifier: 7D:03:69:79:32:21:23:1E:72:C1:76:66:3B:1F:FC:6F:BC:9F:C2:DF
Authority key identifier: CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6
Certificate issuer: /CN=cddd902a1271270027e4577778ea35883b4515f6
Certificate serial: 019D996227991E14CDB9894D941F92E5D4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 03:00:39 +0000
Manifest this update: Fri 17 Apr 2026 03:00:39 +0000
Manifest next update: Sat 18 Apr 2026 03:00:39 +0000
Files and hashes: 1: dCjH0v3m8tCVY_tkggWdXHZn358.roa (hash: a8K+Ic68j3/hayz7h7GvBE1rHXDfwuhE74wsEmkFkNk=)
2: zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl (hash: x6hgXG+8/MKBwYOgXrDyoIgvB/lZ/J9aMH0S+iYsXGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:27:99:1e:14:cd:b9:89:4d:94:1f:92:e5:d4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddd902a1271270027e4577778ea35883b4515f6
Validity
Not Before: Apr 17 03:00:39 2026 GMT
Not After : Apr 18 03:00:39 2026 GMT
Subject: CN=7d0369793221231e72c176663b1ffc6fbc9fc2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:1a:09:e7:6f:f5:29:7c:f5:79:b2:be:ac:
4b:ef:b0:d0:42:e2:ee:cf:90:fc:74:d0:08:6d:24:
49:5c:f5:82:9f:89:c5:b1:cf:8a:2c:b7:02:d6:49:
e1:4b:2c:11:69:d9:e0:c2:69:c3:40:d4:1e:fc:f7:
d0:0f:ed:a7:5b:dc:55:4e:c9:12:d7:16:3f:21:e0:
55:0c:28:4f:85:79:21:88:66:ce:f1:e4:a9:aa:62:
79:e9:bd:45:2f:0a:3e:34:8f:17:9b:10:31:96:07:
73:57:87:e5:49:43:de:90:39:c8:18:02:0c:ab:60:
74:1b:fa:66:2a:47:8d:4f:61:29:f8:c2:b9:d9:05:
85:8f:71:e6:aa:3b:66:4c:73:c2:e3:2b:ea:e2:b1:
86:31:c5:6c:bb:92:ec:8a:6e:da:5b:98:d0:a7:14:
5d:2d:85:d3:a2:cf:f9:ef:29:f9:f6:b7:0a:a1:6d:
8b:f4:56:eb:14:3f:db:9c:f5:c6:7b:c6:16:b9:40:
fe:c6:21:50:68:97:38:19:ed:07:e1:97:79:65:bc:
a3:b9:0c:75:d9:1b:9f:1f:77:22:83:33:9e:ec:50:
ee:79:68:34:aa:31:16:0f:2a:76:46:c3:7a:09:c0:
ef:72:70:ed:da:a6:23:5d:7a:bc:3b:de:e5:19:34:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:03:69:79:32:21:23:1E:72:C1:76:66:3B:1F:FC:6F:BC:9F:C2:DF
X509v3 Authority Key Identifier:
keyid:CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c7:c3:04:3c:f4:51:83:32:bd:1b:cc:78:fb:2d:a2:b6:45:
16:5b:c1:13:cb:30:9e:70:5f:0c:b3:a1:8d:d7:2d:57:b1:87:
e9:ac:7e:44:75:f9:65:62:95:8d:63:c0:4d:8a:51:b7:ad:6e:
e2:f4:01:46:63:57:fe:eb:ae:c8:53:f4:7a:ef:2b:9e:2b:cf:
c2:00:58:07:ed:e5:df:59:2c:89:21:19:a2:29:1d:d9:43:ab:
e1:a5:f2:c1:26:46:25:1d:05:43:d6:7a:be:66:3d:a4:cc:92:
f7:4f:b9:5d:f1:f9:4d:f6:5c:a7:59:ff:2b:23:51:a2:30:1d:
52:5e:65:7b:04:2f:50:d4:9e:71:34:7a:77:4d:36:f8:8f:1e:
7d:5e:e6:56:fa:80:d1:73:c9:7d:be:44:22:36:61:b5:2f:32:
b2:06:87:6e:84:1a:2d:7c:a3:d4:9f:9e:76:8c:38:58:38:b9:
ec:c8:ed:94:4f:dd:1e:64:8c:33:de:f2:59:a2:48:64:1d:80:
4b:22:f9:dc:09:28:e4:37:59:e2:9a:b4:b7:2f:ea:10:c7:48:
59:24:56:9e:a1:59:86:fc:23:e5:6d:37:79:da:ba:6e:3e:9c:
d4:23:5b:8b:b4:68:03:fc:47:a1:3e:4c:2c:b3:92:7a:a3:81:
a0:f0:61:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:49 2026 by rpki-client