Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier: hz3Tn0T3pkYh91E5Wt4GDnHPWTn6iQzbQIVcz4jzH8Q=
Subject key identifier: 93:5F:0C:CB:24:57:AE:85:8F:FE:DD:51:84:19:05:44:FD:B7:05:16
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 019DA378EBAFEDDB2A872B78437D55B19DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number: 18D7
Signing time: Sun 19 Apr 2026 02:01:43 +0000
Manifest this update: Sun 19 Apr 2026 02:01:43 +0000
Manifest next update: Mon 20 Apr 2026 02:01:43 +0000
Files and hashes: 1: efPNeN_0KirVowyqOO81ber6Zg8.roa (hash: 0sZnmeXPSX5yamGjUWVvInbw7JdGyiWW9gzFR1D9bNU=)
2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: b02toznLikTZkFIebiUYzdELkfKncDIjKnhpmBtUPIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:eb:af:ed:db:2a:87:2b:78:43:7d:55:b1:9d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Apr 19 02:01:43 2026 GMT
Not After : Apr 20 02:01:43 2026 GMT
Subject: CN=935f0ccb2457ae858ffedd5184190544fdb70516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:55:31:a3:58:8b:74:6d:74:86:5e:ef:b5:85:
e4:7c:86:62:17:ad:eb:8b:f7:e4:ff:7a:5c:27:ef:
95:1f:66:4e:03:b6:79:7d:3a:1e:ef:8e:38:d9:7d:
ac:db:77:7c:fb:56:9d:49:a1:da:6d:0a:ea:2e:dd:
69:5b:f0:8c:e7:ed:74:01:56:33:54:dc:67:18:08:
1c:e5:5e:04:26:e7:5a:1c:47:ba:54:3d:a7:69:c1:
fb:f9:8d:fc:bf:f2:46:5c:93:51:72:36:95:19:f1:
16:1c:e2:fb:c3:82:15:13:5a:56:ef:ed:31:b1:7b:
a1:44:1b:6b:f6:3b:f7:84:de:e6:d4:bb:3c:a7:13:
35:81:ef:21:6a:dd:b9:00:04:88:53:ad:96:20:6a:
7d:aa:5d:2d:88:1a:04:e4:a4:53:e5:93:4b:35:d9:
4a:8e:dd:5b:29:0d:30:2d:92:da:92:b6:6e:4a:bf:
24:21:88:e9:0e:30:52:06:9f:0f:33:50:65:2b:57:
19:2d:22:a9:ad:a7:c5:e3:e5:d1:a3:4e:c8:72:a3:
37:6e:0d:82:65:dd:a7:6b:ed:32:58:0f:b8:43:d6:
98:7a:e7:0f:45:39:7f:64:52:3c:05:1b:9d:16:31:
df:99:10:d6:e2:d1:d2:1a:74:e9:46:31:d8:e5:68:
2c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5F:0C:CB:24:57:AE:85:8F:FE:DD:51:84:19:05:44:FD:B7:05:16
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c7:9f:f6:99:c6:7b:53:62:59:ec:e0:ac:c7:86:b9:f5:2f:
db:b1:f0:82:64:86:38:70:20:ed:bb:35:fc:7c:fe:74:e1:ac:
d1:f6:3f:a3:94:6d:bc:0d:f5:01:44:a7:3d:f3:d1:07:96:2a:
19:78:d7:35:f8:2a:6b:55:2d:5e:4a:d8:06:90:5c:ed:e5:07:
d4:34:1a:5b:97:d8:0b:c2:5c:8d:44:2e:4f:c7:40:d1:08:69:
85:dd:0c:4f:b8:3d:9d:58:72:95:da:ff:69:04:6c:eb:44:41:
c4:24:c4:fd:38:50:d6:bc:8e:d8:6e:81:bd:b3:0f:6e:0d:e6:
cd:45:0e:32:91:f4:bb:58:3c:4f:cf:49:46:19:2d:3e:e6:90:
a6:2d:f0:be:cd:d0:ae:f6:f8:f6:84:4b:d3:b4:4b:25:31:81:
5c:60:07:8a:70:ec:c9:57:e0:03:76:f2:e1:60:46:fa:27:61:
50:0a:2a:61:41:58:dc:10:58:c3:27:8c:97:e2:e6:a3:1f:4a:
c0:31:96:e9:ac:cb:3d:5a:fb:b5:02:51:fb:e1:e7:29:29:c7:
e5:8b:37:79:70:be:c0:6c:13:d4:94:24:c9:64:8e:e1:ef:8c:
9b:55:f1:61:40:ca:ba:5c:61:98:14:b5:64:09:ee:34:29:bb:
84:a9:a2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:16 2026 by rpki-client