Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: f3ZCadSwoaeFqsSvwoAYB0nhD/mwaTHL4m6Aa3Pendo=
Subject key identifier: B5:C8:89:62:ED:21:F5:0B:49:6E:FB:C8:C1:6F:94:40:B3:65:E9:C1
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 019D992B4F446D877CFE8DABA84961069F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:45 +0000
Manifest this update: Fri 17 Apr 2026 02:00:45 +0000
Manifest next update: Sat 18 Apr 2026 02:00:45 +0000
Files and hashes: 1: FD-L71vOa8KLs_76ysrN9aQ0pzM.roa (hash: noRO8/x+O1Zr80AJy00hkuf+fSAmumdFD5w61Of+JBo=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: 0if3CxyjaqM8qaQqG1iqreUUkexp3A9vigMgYOsJl2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:4f:44:6d:87:7c:fe:8d:ab:a8:49:61:06:9f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Apr 17 02:00:45 2026 GMT
Not After : Apr 18 02:00:45 2026 GMT
Subject: CN=b5c88962ed21f50b496efbc8c16f9440b365e9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:67:2f:73:25:d2:ba:52:7d:a5:58:83:a1:c0:
d8:21:6b:93:86:49:6c:99:95:1a:a2:7a:be:90:51:
0f:45:78:8d:76:f3:73:46:76:58:d2:e2:8b:e5:b1:
14:b2:8f:be:3f:75:01:31:9b:8e:da:b6:77:19:ae:
b4:23:8b:66:5a:3a:b1:34:d6:c2:29:51:98:4b:22:
96:b9:a3:27:b7:a1:00:2b:4b:12:46:35:61:60:fb:
92:3e:78:ab:53:ee:36:67:ee:f4:6f:95:2f:e1:f1:
84:ef:c2:ce:af:56:f5:cd:ec:a9:fc:a9:4d:51:56:
20:80:b4:da:b5:cd:68:62:16:af:b9:eb:38:82:c3:
e2:c3:fc:c0:64:45:5e:dc:5e:8b:7c:64:f5:7a:96:
14:42:54:97:f1:e5:3b:69:00:71:ba:1a:8b:c2:76:
ff:a0:f1:e1:2d:31:94:a5:ee:81:2e:51:9f:e1:6f:
ff:64:b6:95:8d:ee:09:b2:7a:2d:f2:f8:73:8c:0f:
1e:aa:1d:e0:41:a7:66:2f:e6:9e:46:f5:c1:c3:ec:
9b:63:9e:11:f4:42:e0:e7:34:5a:a0:bf:36:dd:90:
6d:16:03:3d:b3:dc:83:6f:1a:3c:95:bd:aa:2e:58:
6b:aa:6a:62:3c:36:1b:56:6c:33:1e:eb:d2:19:55:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C8:89:62:ED:21:F5:0B:49:6E:FB:C8:C1:6F:94:40:B3:65:E9:C1
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b0:de:0e:fc:1d:9e:f8:38:4b:c0:4f:a3:7c:78:46:72:0b:
e4:25:e8:82:c7:56:05:5b:10:a2:97:44:e1:6a:5a:25:98:be:
d0:1f:40:bc:29:4b:87:b3:73:6a:0b:d5:b3:11:54:83:6d:39:
41:20:68:59:c5:a8:3a:4c:b9:34:a5:6e:10:67:cf:a0:11:b4:
9b:15:d6:5a:c3:44:90:47:e7:21:66:e7:a9:13:2a:43:96:a1:
7c:16:c0:42:e1:c6:8e:94:56:87:a1:f0:c3:f6:3a:85:b1:01:
70:a0:ba:39:ba:a5:48:ff:db:68:67:96:ad:c0:58:3b:19:40:
6c:ef:f1:28:69:41:ce:12:45:79:33:ec:1c:8f:f4:95:6c:1a:
47:5e:81:b7:23:74:fa:77:d8:fb:1c:8b:27:73:05:5c:5c:85:
a4:61:ff:6c:8f:5b:16:ed:2d:7d:6e:29:04:f3:52:33:1c:b6:
c6:e8:c1:95:52:59:5f:1b:b3:80:58:e7:dd:ed:f3:94:a9:5d:
e5:6d:d0:c8:dd:cb:9a:65:48:60:89:ce:6f:8d:32:5f:f4:99:
ce:72:a0:10:40:2a:da:92:c7:20:46:f3:5b:05:c7:dc:7c:bb:
2f:eb:80:8c:b5:50:ed:a2:93:f7:af:27:99:63:e3:5c:ca:48:
93:f5:bc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:15 2026 by rpki-client