Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
File: zQzH_YiYsPffS53wuZMZvLKewkM.mft (raw, json)
Hash identifier: jGtVwIhLr2i7G0Vr7XEphHs/b5qiXSYEgeBe6x2NP28=
Subject key identifier: 5C:6C:E6:6D:45:5C:EE:09:89:97:DB:AE:95:59:58:CB:84:ED:11:81
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial: 019DA453DEF9DEDF74F329DA86747283050E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 06:00:53 +0000
Manifest this update: Sun 19 Apr 2026 06:00:53 +0000
Manifest next update: Mon 20 Apr 2026 06:00:53 +0000
Files and hashes: 1: MHBYvDEfair8LMjjWldjlJSK4Kg.roa (hash: vmmrMoTWhgUvddV4vdbfGS7BdwqYfrrX4L+ZJDyj1ho=)
2: zQzH_YiYsPffS53wuZMZvLKewkM.crl (hash: SSE9xzsjc726eIf1nH6PEfGv152ipR1tfjIDsdnCvFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:de:f9:de:df:74:f3:29:da:86:74:72:83:05:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Validity
Not Before: Apr 19 06:00:53 2026 GMT
Not After : Apr 20 06:00:53 2026 GMT
Subject: CN=5c6ce66d455cee098997dbae955958cb84ed1181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:fd:bf:ae:57:77:3d:ef:9e:47:9f:7d:d2:
90:4c:86:82:dc:7c:d1:93:c2:b2:de:57:02:24:2e:
db:18:9d:34:f7:81:1e:38:8f:fe:e5:02:90:e4:5b:
67:74:88:b2:82:ef:92:b0:42:bd:5e:b7:ea:40:2c:
bd:19:06:80:d8:72:21:5f:77:44:82:a9:bf:f7:cf:
ed:3d:cb:b4:1a:84:12:92:cc:3c:2d:99:65:0f:84:
71:53:e4:e0:eb:8e:bd:8e:b7:d7:7b:db:d6:b8:0e:
4a:2b:ca:dd:1c:75:30:57:a7:c0:a1:41:2b:94:08:
11:39:69:6f:94:f3:78:7c:9a:bd:59:49:ef:fb:ae:
d8:f6:c2:3a:b9:28:1b:29:cd:7f:3f:cc:90:64:a4:
58:6c:d5:de:5c:da:17:34:c1:3b:06:67:76:cb:b5:
6c:90:55:e0:b0:c7:30:1a:13:8d:05:f1:88:02:7d:
29:88:23:8d:9c:39:e6:13:b0:27:4e:38:84:ff:e5:
9c:9f:88:7a:6c:9c:0c:ac:ba:99:5e:2a:32:1b:a0:
b1:6c:be:49:e8:22:7f:23:53:f5:d9:05:48:f8:a4:
12:b2:3a:da:88:4c:d0:ee:b3:45:9d:56:ac:d7:60:
64:f5:bb:38:a1:dc:32:4b:39:04:c7:7e:d9:fc:94:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6C:E6:6D:45:5C:EE:09:89:97:DB:AE:95:59:58:CB:84:ED:11:81
X509v3 Authority Key Identifier:
keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c0:28:3f:23:00:b8:6e:f1:d2:3a:38:83:ac:d4:77:a2:59:
13:fc:bb:81:54:f2:76:33:6a:5d:bb:42:7a:1a:cf:bb:de:19:
7d:63:13:34:a0:ae:b6:2c:77:85:14:8e:46:93:8e:3c:71:a2:
16:b8:f9:9f:9b:01:0c:6b:5e:61:2c:da:c7:4e:bf:8a:72:06:
90:e2:0f:98:d8:af:bd:2c:c2:74:17:9c:25:4e:ff:8c:1d:b5:
38:b0:9a:67:be:e3:10:ae:22:01:4a:b3:73:a0:d3:dd:60:85:
f0:60:f9:c9:73:e8:1d:26:1f:3e:fb:bb:56:56:f6:e1:03:cf:
de:13:71:3c:8e:a7:d4:9a:b5:b8:77:90:2e:fd:d1:59:ea:ae:
e2:fe:a2:c6:8c:98:8d:e0:c7:5b:06:d3:72:0c:f6:5c:cd:ef:
13:6d:c9:c3:5e:6f:cc:0e:c7:a6:38:0e:84:ed:f9:24:11:cd:
92:89:60:e8:cc:ab:11:c5:00:f0:e1:b9:aa:35:8a:3f:3f:f9:
40:ac:dc:35:94:a5:5a:34:ac:65:0b:93:31:9a:d3:31:c3:21:
0f:c2:61:46:c1:d7:44:e5:b6:bb:dc:3b:29:92:60:87:a9:9f:
df:22:50:60:03:59:b5:ce:78:b7:18:74:32:de:34:57:fe:d6:
ad:36:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:41 2026 by rpki-client