Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
File: z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft (raw, json)
Hash identifier: iIvmNhG/hJr/6TrNWUhqnGFpkEaNQS+lvn127GBCA7M=
Subject key identifier: 5D:25:DA:D7:76:F3:88:01:01:83:AC:A5:4C:64:68:7E:F4:D5:E7:BB
Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Certificate serial: 019D9A3E3E0561C36F11E62EC6D8E2789CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:03 +0000
Manifest this update: Fri 17 Apr 2026 07:01:03 +0000
Manifest next update: Sat 18 Apr 2026 07:01:03 +0000
Files and hashes: 1: BVCNuyEI8Escb23UOBkojnAQ3uU.roa (hash: TpAVxATDxHC3mnDA/ZCfMM4mNI1Q7807T0lCqaxfnlA=)
2: z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl (hash: w82hDW0T7IU1GDDG8ZNssXC6F3nUEZbSyJK273vypXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:3e:05:61:c3:6f:11:e6:2e:c6:d8:e2:78:9c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Validity
Not Before: Apr 17 07:01:03 2026 GMT
Not After : Apr 18 07:01:03 2026 GMT
Subject: CN=5d25dad776f388010183aca54c64687ef4d5e7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a6:fb:3e:27:a1:ad:6a:5b:a3:ca:84:f3:bd:
e3:b3:8f:9a:60:b1:3a:e6:83:20:30:5b:0f:33:d4:
7e:53:be:af:7c:02:d1:d9:70:ad:f5:48:56:45:5a:
45:ac:f0:97:c4:b8:2a:f4:16:2c:8a:0c:2e:96:cc:
6e:65:cd:23:d2:68:87:6d:8a:d7:e8:d3:82:44:54:
2f:40:75:5c:8e:ee:0f:c4:92:7b:32:b9:72:b0:03:
c6:fe:8f:c8:38:79:fe:87:0a:6c:bd:83:19:0b:61:
2f:59:3f:55:63:fb:46:a4:0f:fc:f8:30:e5:00:71:
39:64:8d:09:75:c3:33:a5:4c:6d:4f:c6:32:45:53:
91:b1:43:a1:48:05:a5:35:52:93:d0:41:c5:2c:c1:
64:8b:a6:a2:94:0f:e0:80:9a:b5:22:fa:96:3f:ff:
c9:c4:3d:8c:0f:4d:58:ec:b9:cc:b3:4f:08:b4:00:
08:d5:01:6f:6e:9a:5d:b8:d5:b1:64:6f:b8:c5:c5:
cc:fb:41:4e:a3:93:d3:7b:9c:64:74:51:7d:47:ef:
d4:b9:ba:34:11:ae:ba:02:d4:90:40:23:f6:b2:c0:
c0:f1:e1:5f:81:1a:f8:55:ab:b6:67:72:86:84:61:
e0:68:5d:6b:17:c9:39:43:7c:eb:74:c4:77:b1:e6:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:25:DA:D7:76:F3:88:01:01:83:AC:A5:4C:64:68:7E:F4:D5:E7:BB
X509v3 Authority Key Identifier:
keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7d:48:63:89:36:9c:0e:8a:c3:f6:a5:c0:25:ca:f3:b5:35:
b3:0f:9a:82:f3:b1:41:42:0d:54:10:31:17:6c:42:a0:e7:b1:
cd:b7:48:a1:eb:46:02:b8:7e:35:ea:00:a4:a0:ab:7b:0a:7d:
aa:2d:db:3b:58:63:3f:d7:ba:1e:6d:ab:86:5e:1e:be:4b:b5:
cc:e9:28:20:45:51:1a:11:2d:89:65:ad:ef:ba:91:f7:39:70:
ff:cd:46:55:ee:9e:20:cf:b6:eb:5f:e3:9b:2c:43:76:bd:64:
82:53:b2:7f:4c:43:59:1d:a5:04:6a:e6:81:31:68:4d:a7:3d:
de:dc:92:b6:28:89:c6:6f:59:33:6c:cf:0d:df:4b:7f:58:3d:
a1:5b:6a:87:2d:ff:f7:e0:fb:83:c6:53:38:d0:7e:29:ae:3b:
0f:fd:1b:ab:4d:14:20:39:21:9b:e6:44:6f:75:1a:57:39:f3:
1d:62:1c:64:e4:39:a9:7d:b1:78:60:ed:a5:93:6f:46:f7:20:
5c:9b:78:1f:30:9c:c5:73:f2:11:75:84:1a:9a:bf:28:37:68:
98:71:25:f0:77:6d:c5:43:25:c1:ef:b6:5a:15:6e:6e:f4:cc:
56:28:29:46:69:42:7a:b2:e7:cf:3a:2d:40:08:56:3a:1f:03:
d1:de:ef:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:50 2026 by rpki-client