Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: UNs5ps05/Ymj7lxgAzITYZFa5sl8FFqQWmVJ5ryhsxs=
Subject key identifier: F6:26:42:D7:84:ED:93:FE:2F:91:9B:64:C6:D7:B3:25:78:9D:AB:6B
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 019D98F46D5D9CC304DC28AD09700788B9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 18D5
Signing time: Fri 17 Apr 2026 01:00:48 +0000
Manifest this update: Fri 17 Apr 2026 01:00:48 +0000
Manifest next update: Sat 18 Apr 2026 01:00:48 +0000
Files and hashes: 1: F_Dk1EXyZalcSUrQVrmmhufc-3c.roa (hash: Bud8p3xLXlXOrM2nbGi5ghblIRWjV7KfIKq7F8d9FoQ=)
2: P8VBM2Vt78MH0hTsTsDYoN1DCwo.roa (hash: BNrt6BqKbc/fkjdmpvHEP4BZdwanUa88eWbx1Ysrn8g=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: dCk91uJQeNW/n15S/bt211URui9xg2LiBqUxPpfPOzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:6d:5d:9c:c3:04:dc:28:ad:09:70:07:88:b9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Apr 17 01:00:48 2026 GMT
Not After : Apr 18 01:00:48 2026 GMT
Subject: CN=f62642d784ed93fe2f919b64c6d7b325789dab6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:d9:b1:f1:f8:44:14:eb:96:cb:5c:0f:82:
d8:39:ab:ad:4b:e4:88:46:36:ca:9b:ac:9e:d6:4a:
cb:44:a6:93:bc:45:8a:32:99:f2:03:e0:d9:b0:4e:
4c:20:20:9d:c9:18:90:a2:0a:5b:5f:63:4e:13:83:
ed:ba:63:07:90:be:74:fd:4e:a6:81:70:2a:da:fc:
5c:ce:31:44:15:48:9a:24:c2:0c:dd:5a:78:5a:8c:
62:75:40:76:44:18:bf:f7:66:fc:bd:79:5a:04:a9:
80:dd:d5:dc:bf:4e:d4:86:89:1c:fd:b3:4e:51:f3:
2a:e0:c7:e7:0d:2f:70:b7:42:cc:1b:33:f7:6c:d3:
c9:17:46:54:c3:0f:34:d5:32:bc:ac:25:9c:b5:43:
fe:85:6a:f1:d2:c1:c7:80:af:9b:ec:1d:a4:9c:45:
60:32:ff:44:84:95:60:21:c8:da:9a:7c:15:11:2c:
b5:f2:00:51:ae:23:e7:2c:92:67:a0:d5:ee:cc:10:
2b:2b:02:17:12:cc:41:8e:49:bc:24:4c:1d:8c:dc:
94:8d:75:dc:15:79:46:f8:89:47:7a:2d:51:b3:c6:
77:7f:b0:7a:27:38:2c:1c:2c:89:53:79:79:ea:1e:
1a:87:8b:64:6d:41:e1:a6:65:4b:67:24:7a:10:e2:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:26:42:D7:84:ED:93:FE:2F:91:9B:64:C6:D7:B3:25:78:9D:AB:6B
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:47:f5:99:14:6a:a5:34:29:2b:dd:a4:40:f3:bc:e9:b0:4a:
2e:9e:79:d6:6a:46:9d:0d:00:2f:e7:46:9b:89:ae:5b:06:23:
f4:13:bf:76:35:07:66:05:e8:c3:f7:5a:62:60:da:f3:6a:67:
54:b5:2d:b1:ec:f9:a4:4b:79:a0:3d:a6:2a:f0:32:e5:69:f6:
16:cf:33:2a:b2:a1:e8:ac:fc:e9:49:c6:ea:fe:59:79:56:78:
8c:eb:48:ed:f1:19:73:03:0b:15:f9:6c:99:35:0a:76:6a:c0:
11:d8:ad:70:5f:91:e6:5c:c6:cc:29:0d:ce:17:d2:ce:0a:c0:
d3:40:08:cf:d2:12:bf:48:49:c4:20:39:f7:6f:63:8e:5d:a7:
46:46:e9:da:64:67:ed:a0:dd:c8:6f:a6:59:7c:32:69:98:b4:
f8:c5:82:fb:ab:06:f7:81:f0:6a:75:65:f9:89:05:13:d6:3a:
10:8a:5d:53:cc:75:3e:c0:81:db:ae:3b:33:6f:af:d7:c7:59:
8d:94:f5:06:97:63:86:d9:47:69:00:78:1d:f2:7b:51:a4:c8:
0f:a7:17:c8:5d:63:6c:df:cf:3a:15:d6:8b:91:7c:29:5f:ca:
98:7a:5c:d6:e3:22:f4:09:ab:11:44:b6:a9:cf:62:cf:83:b5:
ec:d7:74:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:56 2026 by rpki-client