Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json)
Hash identifier: f5JiD/wz8a6m0iHgauQBLWyHGjkR+Kb9eH+pPzyjgkg=
Subject key identifier: 85:8C:22:A5:36:B5:93:E1:85:B0:B9:AF:F7:61:62:94:38:2C:E9:B8
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial: 019D9BF58758DCDD8EF8AE94C77C334713F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 15:00:52 +0000
Manifest this update: Fri 17 Apr 2026 15:00:52 +0000
Manifest next update: Sat 18 Apr 2026 15:00:52 +0000
Files and hashes: 1: a-GQ10_VoZGMx2Uu4LVJHteO_m0.roa (hash: NioNjVo8lGbEZZ9K9hzAzdA29RBjR5Al0oMN0vHtav4=)
2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: iYQu7W1r42MoBRc6d5JId5337DxoOyqg4B6Pb45GFX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:87:58:dc:dd:8e:f8:ae:94:c7:7c:33:47:13:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Validity
Not Before: Apr 17 15:00:52 2026 GMT
Not After : Apr 18 15:00:52 2026 GMT
Subject: CN=858c22a536b593e185b0b9aff7616294382ce9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1d:b0:30:e9:b5:73:fb:7c:3d:90:b1:e4:2c:
d6:30:6c:19:e5:71:6d:50:39:6a:75:47:be:ab:55:
41:ae:07:b7:da:b8:2b:0a:27:8d:74:d7:df:c1:06:
ab:3f:0c:84:42:8a:45:7c:5c:29:24:13:45:93:fa:
8b:04:7a:bb:f7:55:56:35:26:2b:bf:64:e2:06:ec:
ca:c2:b4:b6:37:e8:bc:6f:fe:78:c7:69:70:e7:42:
d3:68:6f:b1:78:1e:18:6c:fa:45:09:a6:53:3a:13:
0d:11:10:b3:b3:a0:e5:60:85:03:04:02:fc:a3:66:
be:0e:ad:32:22:60:9d:b1:56:01:e5:0a:08:17:65:
f8:ef:d9:24:33:15:09:2e:47:5a:d3:23:51:f7:86:
53:4b:0c:bc:22:c3:ca:e4:d7:5a:38:96:3d:21:50:
b8:46:5a:09:ba:86:1e:67:4f:42:1a:6f:79:7c:36:
c3:fe:bc:8e:fc:41:0b:72:11:0c:23:af:6d:c2:2b:
8e:4b:e5:06:8d:55:a0:f4:12:b2:ff:04:03:e5:18:
fd:7e:d7:75:dc:0f:d2:17:12:32:a7:99:5c:9e:3e:
67:da:45:d9:72:a4:4d:4b:13:54:98:85:43:c2:6e:
30:76:f5:b4:b2:96:98:0b:d4:76:68:3f:45:6c:55:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8C:22:A5:36:B5:93:E1:85:B0:B9:AF:F7:61:62:94:38:2C:E9:B8
X509v3 Authority Key Identifier:
keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0e:51:ae:b1:db:04:e8:e5:2b:50:01:b1:be:48:e7:e7:0e:
4e:31:58:cc:25:9e:6d:63:9e:9e:d1:29:bd:e8:7d:76:86:4e:
05:db:88:d5:57:3d:e8:7e:af:da:f1:e4:18:43:e7:33:97:28:
2f:29:62:77:92:69:fb:3b:88:46:00:48:5d:b9:a3:c5:f5:c0:
b5:37:ca:7d:57:1c:60:c8:65:85:f6:b5:53:3f:c5:08:44:5e:
0f:0a:f9:22:cc:83:c9:0c:99:ed:d7:b4:00:62:6c:05:0a:75:
bb:3a:7c:08:a9:84:ab:0a:7d:2a:a4:4a:3f:35:2c:b5:4c:62:
ee:10:6c:28:63:83:b7:39:ae:4c:09:b6:4a:5d:e2:83:6f:0d:
1f:c6:60:0b:ef:b0:72:06:e7:a6:ff:af:b1:48:4e:31:92:21:
14:89:2c:0b:f0:cd:83:02:ba:df:f3:23:d8:c9:7d:6c:86:a1:
ba:0c:6d:0d:1d:e8:ff:a3:7f:a4:c9:08:fc:b3:c4:30:c0:f4:
05:09:e4:f8:9f:31:27:c4:33:24:e4:a9:ba:74:ff:76:d5:e9:
84:2f:fd:fc:25:79:a3:4d:ec:4c:bd:cd:5f:89:f7:9b:81:40:
8d:a3:99:f3:13:85:41:8e:7a:00:54:c9:f7:f9:bb:54:e4:a6:
86:ea:1b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:54:48 2026 by rpki-client