Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
File: zQzH_YiYsPffS53wuZMZvLKewkM.mft (raw, json)
Hash identifier: xfu4T60Hdn0IG1pI49UBeoTY4d5Dl3sTdfkbxV3jiaY=
Subject key identifier: 86:3E:56:F4:2C:AC:AF:0F:65:8E:9F:31:E2:01:A8:7E:4D:DD:1D:08
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial: 019D98BD9505058A39C8436748A014FE576E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 00:00:54 +0000
Manifest this update: Fri 17 Apr 2026 00:00:54 +0000
Manifest next update: Sat 18 Apr 2026 00:00:54 +0000
Files and hashes: 1: MHBYvDEfair8LMjjWldjlJSK4Kg.roa (hash: vmmrMoTWhgUvddV4vdbfGS7BdwqYfrrX4L+ZJDyj1ho=)
2: zQzH_YiYsPffS53wuZMZvLKewkM.crl (hash: jOX0sMnGGcyYUE3drw2HHyEKxvzQ6jHkXHhvbaTXumQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:95:05:05:8a:39:c8:43:67:48:a0:14:fe:57:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Validity
Not Before: Apr 17 00:00:54 2026 GMT
Not After : Apr 18 00:00:54 2026 GMT
Subject: CN=863e56f42cacaf0f658e9f31e201a87e4ddd1d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:4f:0c:40:61:6b:e7:2e:37:30:b5:36:db:
3c:72:3b:24:56:ea:53:54:d1:d2:43:bb:f6:ca:5d:
06:b3:eb:4b:9f:3b:55:37:98:7e:6f:8b:d0:5e:aa:
86:02:73:61:2f:d1:b8:2e:eb:2b:2b:2e:3b:91:a4:
5f:ad:ea:9b:94:75:7e:f1:75:94:10:f2:01:0a:e6:
fe:ae:e1:9f:22:ed:ee:91:c1:bc:56:5b:f4:11:8b:
f8:2c:5d:c8:6e:49:78:b2:bd:b9:3d:ff:b5:6d:de:
ca:de:d3:dd:5f:8d:e2:ef:66:11:bb:10:39:a6:b2:
21:0b:2a:2e:d0:03:57:1c:49:56:22:a8:0c:9a:9d:
ae:0f:7d:76:87:a9:f9:9a:3a:c7:bb:2c:27:53:d8:
5f:60:44:1f:db:58:0f:31:e2:19:20:af:c6:76:b2:
d2:47:bc:c5:9a:c7:97:e0:3a:45:1f:f5:b6:dd:a3:
df:d4:96:63:51:84:72:8d:0c:fa:51:3a:ba:35:a6:
77:30:cd:c2:28:63:af:57:db:94:79:6f:a2:79:c8:
d1:71:9f:71:c9:c9:ff:05:5a:a3:93:1c:c9:ab:4d:
b7:74:79:9f:2d:5a:85:ec:01:63:e9:7f:8d:12:1f:
a9:91:f6:c6:a4:88:41:b5:47:4c:d7:ab:1b:4e:36:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3E:56:F4:2C:AC:AF:0F:65:8E:9F:31:E2:01:A8:7E:4D:DD:1D:08
X509v3 Authority Key Identifier:
keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a2:a8:59:c1:e9:e6:7c:0e:fe:06:8b:e2:3a:a7:c6:73:05:
b4:8d:63:79:2e:70:42:72:93:ce:11:3c:89:b4:5a:5d:42:0d:
c2:cb:54:ad:7e:d2:68:23:bc:be:c3:24:75:20:e5:3e:3c:e0:
60:ac:78:9a:9e:75:c1:83:27:95:a9:19:7b:cd:2e:33:1c:90:
a6:d3:2b:b9:b1:23:13:89:32:e9:3c:77:34:8b:40:9b:08:af:
de:9e:64:cc:e0:eb:13:45:c5:26:7e:7c:ed:3f:d1:06:0c:65:
4b:04:08:16:e6:4d:80:9f:25:48:16:ce:a1:9a:7b:56:bf:e9:
cb:fd:7e:a7:d1:8a:a1:3c:87:9b:a7:d2:31:85:ed:69:00:c0:
c6:6e:b3:0b:84:b1:b1:6e:ce:c4:4e:76:d8:12:5b:b0:f6:d9:
9f:28:e6:6e:a8:fa:78:cd:47:94:ac:67:19:64:85:6e:76:e1:
8a:2f:be:0d:18:e8:fd:43:c6:0b:11:ad:69:a7:e6:8b:65:dc:
be:fc:3e:08:75:4b:94:e2:b9:e7:8d:01:c5:0c:d6:07:b7:e0:
a6:12:60:31:94:d2:a0:81:c4:bd:ca:0c:82:66:58:5d:70:84:
ad:26:24:62:94:31:03:2d:70:ba:9c:d0:c9:8c:40:be:64:b4:
84:33:b4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:01 2026 by rpki-client