Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: Oo27Vo+fVntKn3WTaShAK2OCuCdi5rk3BAKZQ37b0fM=
Subject key identifier: 59:D5:C5:8A:D0:21:B7:78:FE:08:0A:97:87:BC:B3:DB:7F:92:40:8F
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 019D9999A6A00AFDB6DC71FB024CDF549736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 13CD
Signing time: Fri 17 Apr 2026 04:01:16 +0000
Manifest this update: Fri 17 Apr 2026 04:01:16 +0000
Manifest next update: Sat 18 Apr 2026 04:01:16 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: IjsaKhZlmA21x1X8z/WraOkUf6enP0puuJxWY0LRv+Q=)
2: ft2lqYuwguQru201O9bgAkHsRZw.roa (hash: SxxAgVWTlTtYZ2yYRlmGWx2ZIQrhV12/tHeUOv3mztU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a6:a0:0a:fd:b6:dc:71:fb:02:4c:df:54:97:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Apr 17 04:01:16 2026 GMT
Not After : Apr 18 04:01:16 2026 GMT
Subject: CN=59d5c58ad021b778fe080a9787bcb3db7f92408f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:34:31:60:0d:ce:0d:6a:7a:da:e1:c1:37:
d1:55:c2:8a:09:de:e4:ce:f9:e1:09:d6:8b:4b:8d:
43:db:e0:e6:4d:22:2a:54:11:5f:e7:49:e0:46:43:
fc:74:9a:3e:92:a6:b0:69:03:c8:0c:72:d9:87:38:
b9:ca:3f:0e:69:8d:1e:75:2c:c7:1e:3a:8a:32:de:
15:0f:68:c6:47:8d:ba:16:44:18:ad:7c:37:bd:d6:
1e:60:25:da:71:bb:5f:c7:d9:76:c4:d8:15:89:b0:
18:56:78:f5:3e:f0:0d:18:75:ce:4f:f5:b7:6c:34:
60:58:03:b1:95:66:1f:32:6e:c5:b6:e6:47:57:93:
15:0e:e1:48:34:69:f5:ee:d6:5a:3c:73:21:ad:76:
05:37:9c:73:f2:2b:74:95:87:e7:94:4a:c3:bc:bc:
17:92:93:eb:01:a7:2e:03:3c:4c:e3:ee:14:ea:b1:
de:da:f1:26:24:c6:75:db:ce:83:a3:41:28:e6:72:
ef:67:b0:92:38:d7:82:3f:a1:1f:3b:80:76:04:9f:
40:b3:95:94:a3:69:5b:37:a7:50:74:bf:df:2b:7d:
ea:ed:23:68:ff:16:e1:26:10:cd:ea:ad:fd:8a:6b:
f0:e7:7f:3f:7f:a8:a6:fe:17:d9:38:c9:7c:79:1b:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D5:C5:8A:D0:21:B7:78:FE:08:0A:97:87:BC:B3:DB:7F:92:40:8F
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:70:ac:a8:8a:dd:02:92:a6:13:2f:7d:6f:81:65:58:51:5b:
be:e5:79:e0:3e:2a:48:2d:55:11:9a:e3:ad:9e:81:32:8e:0a:
8d:41:e0:9b:e4:13:d8:c1:3e:d6:f4:68:3a:3d:75:fa:94:d0:
43:95:dd:47:50:a5:9e:5d:f9:11:a8:6c:b7:d8:64:63:08:87:
99:0e:d0:25:d5:fc:7b:8c:a3:7f:dc:86:e3:ae:8e:f6:95:95:
85:34:77:d3:03:c3:bc:5b:43:a0:2a:04:38:c1:61:ef:90:e0:
bb:6f:6f:83:49:d8:11:56:31:a8:25:8f:7e:8c:69:6b:b0:92:
83:bf:e6:9c:a5:cb:85:9f:cc:19:05:6b:a0:42:47:21:20:a0:
c1:87:7a:7e:25:c3:0e:ee:bb:11:01:22:52:cf:d2:0a:ca:19:
27:f4:b6:7f:b0:03:59:c0:eb:45:50:22:bf:4c:93:1f:6e:43:
9a:e8:55:b3:58:37:19:06:aa:9d:1e:8c:b4:96:01:10:42:07:
56:d4:70:0c:1b:38:40:0e:29:d2:a2:80:94:9e:58:d2:9a:48:
35:df:5c:c5:60:35:f2:38:13:d7:12:34:cf:e8:c4:e5:a9:99:
f8:68:45:ab:7e:6d:1d:ba:38:01:f2:9b:2b:f2:9a:d2:58:5d:
a9:dd:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:22 2026 by rpki-client