Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: ttNztGzIyb+VpHA8pYRiyxOmdA2k8jqwCeXcQEm6rUc=
Subject key identifier: B3:02:72:D3:C2:B5:CE:7A:20:F4:FC:A2:58:A7:1F:15:9C:28:37:A8
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 019D9773CB3DACC57622529D31EFBD20179C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 18:00:41 +0000
Manifest this update: Thu 16 Apr 2026 18:00:41 +0000
Manifest next update: Fri 17 Apr 2026 18:00:41 +0000
Files and hashes: 1: Utsq8tMmY3izY1fN7UB7ffBp7M0.roa (hash: kD7h2+kSGCGsnzgnalUMgkhy9wvQ1pxuWkQeWsMBxuE=)
2: qm3Y1xRAyMug1o4ZkPIWA5TQn1A.roa (hash: ah0q5b8U5QR+bHmaVCJCImjUhbJsUIFGC+OnAqXZW1w=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: j3vzPbmGhS/Z9n0kOkdLnY93ZPhz6ticeWLWEJM7elM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:cb:3d:ac:c5:76:22:52:9d:31:ef:bd:20:17:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Apr 16 18:00:41 2026 GMT
Not After : Apr 17 18:00:41 2026 GMT
Subject: CN=b30272d3c2b5ce7a20f4fca258a71f159c2837a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:c6:ae:2d:5c:2a:a9:0e:8b:87:c8:2d:60:
3b:07:37:68:a2:52:6b:1b:c8:3a:61:e1:28:d9:ce:
5d:52:9f:a1:9b:ec:3b:98:cc:6f:56:dc:ba:39:cd:
10:d3:72:2f:f1:0e:fb:93:55:13:b7:f9:f2:15:6f:
7a:1d:9d:59:88:f1:cb:45:b7:15:59:7f:4f:a2:7c:
d8:27:60:72:39:fe:67:34:74:19:95:34:05:c8:cc:
4a:59:c2:81:c3:d6:d8:05:61:33:92:dd:5a:d2:cd:
5d:e8:2b:e6:57:ad:03:b9:81:31:7d:34:5c:ca:45:
32:e5:08:b0:e2:42:20:fd:e8:15:67:a8:04:d5:68:
18:3d:79:79:22:c4:ab:07:8c:fb:d9:2c:47:1f:7c:
2b:bd:39:e6:2a:82:d4:c7:6a:0d:71:5f:22:24:ab:
c8:e1:23:d1:e4:65:0d:25:06:b5:f5:7b:ae:89:90:
00:78:77:39:70:f8:07:e9:d6:f9:58:f5:20:21:d3:
b7:d1:76:f6:1e:9b:f9:b0:18:d3:6f:b2:4e:ed:52:
68:0e:12:9d:f5:99:86:0c:4c:52:14:63:d3:99:74:
bc:7d:29:59:81:32:d8:95:14:13:ee:55:16:e2:31:
f2:4a:15:9c:72:81:82:7a:a4:e2:a6:f5:0a:08:58:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:02:72:D3:C2:B5:CE:7A:20:F4:FC:A2:58:A7:1F:15:9C:28:37:A8
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:06:54:9e:c5:60:5a:53:65:84:8b:a5:70:ee:55:f6:39:ad:
26:40:fd:16:02:bb:76:00:a0:b8:35:42:14:e8:4b:cb:3c:04:
44:27:59:51:ad:54:47:a8:67:6c:87:67:90:54:a3:c5:3b:a9:
25:8b:cf:f4:5a:45:59:ba:43:73:03:4d:a9:f1:d5:80:8c:ef:
ad:f9:e5:af:7f:85:36:c8:f6:89:a6:7b:0a:27:8c:49:3f:9d:
8c:4f:90:85:c1:75:89:2f:41:ea:59:0a:3c:25:1b:ca:f6:91:
20:30:05:b5:25:e7:ca:b7:4b:50:f3:8c:2f:df:c4:d3:fc:3b:
a5:b3:61:47:fd:9f:aa:b3:0d:53:a0:68:25:a4:1d:6a:24:9e:
9c:a5:ae:1b:7b:1b:5f:1e:60:bc:b9:f6:1b:83:8a:4e:6f:72:
80:b9:cf:bd:5a:d0:83:d2:16:9c:eb:26:65:f0:d8:ac:a6:a3:
f5:0e:f3:91:29:76:a5:fa:c5:69:17:cf:ff:7a:67:49:55:43:
9d:91:e2:80:2b:1f:7a:49:19:d5:0b:3f:44:ec:3a:69:98:ce:
55:9f:88:32:21:76:41:a6:58:8b:3e:c4:b9:fc:2f:41:b8:68:
71:e5:6a:9b:35:fc:e7:40:8b:fd:f1:a9:f8:16:cb:15:cb:04:
79:01:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:58 2026 by rpki-client