Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json)
Hash identifier: SjoRxMHSdiNhAF2LKuy0XjIGWY8J+y/dqzWDw68Nl7I=
Subject key identifier: 2C:AA:8D:E5:0D:D7:F8:FF:08:3C:88:CC:43:20:11:20:C2:7E:A9:6D
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 019DA37887AD31341D4705C374773D972350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
Manifest number: 09FB
Signing time: Sun 19 Apr 2026 02:01:18 +0000
Manifest this update: Sun 19 Apr 2026 02:01:18 +0000
Manifest next update: Mon 20 Apr 2026 02:01:18 +0000
Files and hashes: 1: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: GWC0ibjS6G+3Fx8w//W/trOGO4sFG3Nu3qxaVbnE8A0=)
2: ekOzOiDdfxxEUE52B61ICsigaF0.roa (hash: 6fj4c7wjlH2wB374dMtlshl1OSG/zfWE+ZknbaJj2LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:87:ad:31:34:1d:47:05:c3:74:77:3d:97:23:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Apr 19 02:01:18 2026 GMT
Not After : Apr 20 02:01:18 2026 GMT
Subject: CN=2caa8de50dd7f8ff083c88cc43201120c27ea96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:d8:0e:da:aa:79:51:55:e2:8f:ff:fc:13:
03:34:df:bb:fc:f7:89:cb:7b:bd:5e:59:0e:28:2c:
32:fc:85:19:fb:5e:22:ca:89:56:9f:72:35:c6:c8:
ca:c4:d4:91:a1:2d:a9:eb:4f:6e:f1:62:4b:c8:7c:
80:7f:cb:cf:e0:e0:66:a2:f5:39:54:31:71:58:e3:
e8:e9:fe:8b:50:5f:84:d2:d7:9d:76:20:44:12:d2:
41:ce:3b:a3:4f:14:84:7f:17:79:fc:1d:a4:4c:3b:
72:f2:5d:41:dc:06:37:a1:12:d4:c4:77:9a:35:3f:
39:7f:21:61:77:fd:9b:b9:a2:76:d1:29:77:fc:3a:
83:ec:30:59:28:ef:82:a8:fc:2c:81:5b:1a:5e:da:
e9:08:0f:10:a1:e2:bb:09:7a:7c:2d:ea:24:78:b4:
d7:3d:29:8b:08:2f:5a:b1:4a:f0:e2:93:33:32:93:
0d:5a:82:75:a5:59:ef:d5:36:e3:08:36:46:32:94:
c5:ec:4d:7e:fd:10:77:c6:e2:c5:d9:c1:e4:bc:5d:
f5:6b:3d:28:0f:8e:f7:f5:f4:e0:bf:b9:af:c1:09:
c1:26:44:f3:50:ad:e0:7b:24:b9:1f:68:62:84:6c:
ca:62:c8:e5:44:2e:c4:4e:4c:b5:a1:98:ba:27:65:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AA:8D:E5:0D:D7:F8:FF:08:3C:88:CC:43:20:11:20:C2:7E:A9:6D
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:52:28:09:35:48:3f:88:2b:ab:c5:ca:3a:d5:7f:c3:d0:1f:
50:29:05:50:3d:57:11:5c:d5:da:d1:a8:3f:f2:24:b9:41:65:
75:40:da:70:bc:08:a9:b1:36:d5:96:9e:9f:20:97:db:de:26:
a2:5c:c3:95:9e:21:7d:33:fb:0e:0f:20:42:8e:db:2e:9c:83:
9b:63:f4:d5:10:c9:19:f1:4b:32:12:35:dc:b4:f5:8b:92:e5:
43:44:61:ce:87:aa:2b:a8:a4:b2:2a:e8:e7:6e:f5:ef:22:37:
d2:15:56:e8:6a:2d:fc:42:fd:4a:75:e6:a9:e1:cf:bd:64:be:
1e:24:f6:90:43:b4:be:8a:1d:46:34:b4:c9:89:0a:dc:00:18:
9f:8d:20:be:88:27:cc:a7:d8:c8:f5:28:72:bc:9c:3d:3f:19:
eb:64:a4:e8:80:68:b4:70:be:7c:ce:67:00:a5:95:7f:6a:cf:
23:51:41:a0:4f:f3:47:64:15:d2:f9:e1:6f:77:85:ab:83:9a:
a8:12:22:d8:d2:63:b9:db:f7:12:43:1f:f4:0a:e9:38:8b:7f:
2d:d3:bd:f5:c4:a2:9e:1b:6a:57:70:18:40:c0:6e:bf:0b:52:
57:91:0d:80:95:53:a9:9a:77:aa:04:c1:70:3d:15:e5:07:39:
4f:12:1b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:32 2026 by rpki-client