Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
File: zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json)
Hash identifier: CRGW/GR5xv5G6LarS8x+8BSuF/4sWsrZROjRxvOfYo4=
Subject key identifier: 3E:57:C2:91:1B:A0:94:4B:F8:44:B6:8F:7E:27:6D:25:D6:E5:4F:A7
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 019D99628541D12771B2DAA723EB1D8B03EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 03:01:03 +0000
Manifest this update: Fri 17 Apr 2026 03:01:03 +0000
Manifest next update: Sat 18 Apr 2026 03:01:03 +0000
Files and hashes: 1: 5gvppHvivcscRmJkd_-Ax4ZpaIk.roa (hash: Fv7SxnZFuKOYMVmrqeZiX9L2/02B+Ff1eXNebanWC4I=)
2: q07AwoeAHG6jHueO7q9HXMyxFjs.roa (hash: KbddfU+aGzifwawc6lQ9wXWnokH881+sm51JZkWk/6U=)
3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: P2r9U+Jr1t950X+jsCtyVMUlhkH9hY9y81/EdkgH12E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:85:41:d1:27:71:b2:da:a7:23:eb:1d:8b:03:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: Apr 17 03:01:03 2026 GMT
Not After : Apr 18 03:01:03 2026 GMT
Subject: CN=3e57c2911ba0944bf844b68f7e276d25d6e54fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ed:2a:3e:e5:14:10:bc:e8:aa:60:80:ff:96:
ed:df:04:c0:96:5b:94:e2:8c:c3:f1:89:de:d4:84:
2b:87:60:28:d5:84:63:d8:d8:dd:b6:2a:78:e7:85:
e3:9c:40:7b:c4:7d:a9:9d:a9:c8:aa:b4:9d:c5:59:
87:2e:90:fa:11:6d:64:96:2a:d4:75:5e:01:06:9a:
37:54:0e:95:47:28:2f:d7:7c:b8:d2:ba:b5:01:81:
7f:0f:4e:fc:aa:b6:3e:86:dd:6d:1c:b9:f6:b9:72:
2c:6a:9b:dd:a3:d8:99:24:f0:be:48:07:db:de:95:
c1:ab:35:95:ff:d7:83:41:39:27:4f:6a:56:e5:f2:
57:9e:6b:79:6f:4d:b8:fe:1c:52:ec:1e:f5:c3:c5:
8f:77:12:df:b9:82:ec:1a:81:ee:9d:3c:5a:3d:e4:
1c:cd:d3:ac:5c:2c:65:39:7f:50:88:93:c4:19:49:
ba:2e:8e:85:42:fb:c0:50:20:5a:e3:fb:f3:01:d4:
63:23:1f:18:12:60:46:ce:97:cd:23:e3:19:e6:fd:
1c:16:fb:32:21:8e:41:41:f7:8c:5c:79:6b:24:72:
72:12:7e:e7:a7:60:59:1c:d4:2d:7d:cf:c6:2e:b1:
3d:96:00:31:d2:3f:fe:33:c3:a1:b2:cf:fc:39:20:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:57:C2:91:1B:A0:94:4B:F8:44:B6:8F:7E:27:6D:25:D6:E5:4F:A7
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:92:dc:24:41:97:b2:a4:22:8c:59:2c:9a:8c:bb:8c:57:90:
5d:38:94:6a:af:75:a6:5e:ed:03:53:fe:17:dd:03:1a:6f:b0:
f6:43:7e:66:ba:df:4b:a4:37:e3:a7:69:53:f1:3d:0f:84:45:
cf:ec:4c:93:b6:01:a5:9a:4b:70:97:d8:53:82:9c:2f:50:58:
f7:ab:4a:ef:21:b5:3d:1c:cc:9f:f8:e7:e4:d2:b0:c7:45:7d:
47:55:fc:6c:7a:0a:cf:d4:a2:8f:ab:c8:bb:08:9e:2d:15:0e:
20:f5:47:7a:3d:15:ff:f1:a3:30:1f:e4:91:ca:39:54:82:09:
90:15:be:1f:00:e1:a0:d6:df:5f:ff:f5:b8:19:ad:d5:0c:e4:
1c:a6:6d:ab:3a:f6:ff:c7:6d:da:7d:3f:8c:bb:37:f8:c0:1c:
a7:6d:fd:1b:0e:f9:bc:ad:62:3c:5b:66:93:7c:a0:91:69:ff:
3d:23:a7:a3:0c:9f:5a:34:bf:44:dc:96:ce:fd:f9:fd:3d:82:
db:8b:49:df:3c:ab:f0:5a:59:a5:5c:4b:bc:59:ed:75:62:21:
ec:82:7b:8d:67:f5:46:c4:00:7d:08:5a:57:23:2c:d0:ab:3c:
18:1f:ba:18:74:01:23:97:43:23:89:50:fc:bb:30:05:6f:b7:
9c:1f:dd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:11 2026 by rpki-client