Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File: Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier: SfqWZXuJC1kjVnzRJqpH/cteDc8yaCmjardlmuOLJXY=
Subject key identifier: AF:93:8F:8B:15:6F:54:B7:68:BB:C2:43:08:25:F3:F8:4F:A1:DB:A5
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial: 019D9818BF5F76332EF1B313B5F7F6E4C191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 21:00:51 +0000
Manifest this update: Thu 16 Apr 2026 21:00:51 +0000
Manifest next update: Fri 17 Apr 2026 21:00:51 +0000
Files and hashes: 1: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: 9saNEj/FUTPGHSQVLcwlKGGbaryoWaXDYmLo1juB63Y=)
2: bpt9BsJOl3owDEYCjUtmuxEN8E0.roa (hash: nUeffKsyk9gHED4nwJFpfEhtvPTx7ZUa82CM8DIOyWQ=)
3: pUq5FgDmcbsOBzOSxvfT-61HYXc.roa (hash: UB81wheS00LuQ/3CNRheeKScZVmaRZ7KVUFOcqWElYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:bf:5f:76:33:2e:f1:b3:13:b5:f7:f6:e4:c1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Validity
Not Before: Apr 16 21:00:51 2026 GMT
Not After : Apr 17 21:00:51 2026 GMT
Subject: CN=af938f8b156f54b768bbc2430825f3f84fa1dba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:67:ad:3b:36:db:92:da:15:40:8f:48:5f:
92:18:73:e4:3d:42:2a:02:42:51:05:9d:94:33:df:
17:7d:59:26:d4:aa:1c:7c:c2:c9:51:b1:92:40:6b:
4d:04:06:be:e7:16:04:07:d4:3a:7f:09:81:bf:f4:
10:4c:2a:a3:00:80:9d:27:b4:27:26:57:95:81:b5:
b6:71:07:62:f7:6d:d4:4e:33:ac:49:69:14:fd:88:
f3:0b:b1:c9:3c:cd:2f:a7:30:8e:3b:fe:d8:e6:f1:
e5:18:f8:d3:e6:d4:36:1b:b3:bb:35:2f:fc:73:54:
85:26:29:63:db:d2:74:36:d0:db:c8:73:f2:18:bb:
ab:98:3e:db:5f:1c:13:d6:bb:40:10:05:f7:79:be:
16:81:e8:ef:c8:f4:00:d1:22:dd:02:11:21:2c:a2:
ae:7d:fc:b0:70:9a:ac:23:39:6a:6b:d3:a2:49:54:
e3:a1:ba:d9:fa:2a:3c:e4:78:a9:ba:e4:61:11:ba:
b8:fe:86:47:dc:cb:59:cd:e5:68:d9:c4:d6:0f:ab:
30:b1:d8:57:ff:5c:5d:be:3f:e7:bc:8b:64:2f:20:
19:98:ba:55:e2:15:cf:10:74:b6:77:9c:e4:1a:df:
16:4c:f8:24:9a:56:86:81:3f:b8:1a:a1:d6:60:37:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:93:8F:8B:15:6F:54:B7:68:BB:C2:43:08:25:F3:F8:4F:A1:DB:A5
X509v3 Authority Key Identifier:
keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:22:93:f0:e7:e9:97:a1:7d:e2:34:d0:38:0d:75:8d:c8:11:
4b:cf:fb:d1:0b:b8:18:19:f0:f8:3a:a4:17:47:f5:58:c5:8d:
65:69:e0:56:43:67:4f:ec:dd:4c:bd:22:fd:2d:9f:a9:b2:0a:
72:a8:83:42:22:c6:76:0b:65:37:fe:83:e4:30:aa:dd:ab:91:
15:89:99:b2:b6:eb:41:d1:dd:43:9d:14:ed:67:40:89:84:02:
be:27:74:f2:fc:93:6b:88:2b:88:36:50:0e:6c:89:26:99:5b:
21:f5:4e:61:d2:fb:d5:2a:36:98:72:c1:73:d6:6b:dc:7d:b2:
a7:a7:68:c1:67:a3:cd:d3:e8:37:4c:98:16:db:62:93:40:59:
7d:59:d3:4e:8a:87:90:3e:0a:ad:9c:da:d0:e1:e3:05:14:87:
c9:f9:4d:08:2c:ba:53:d5:b9:eb:af:8d:92:cf:d4:7b:9f:a6:
5c:c3:25:c4:33:e0:1b:ad:43:5e:81:b4:4e:75:1b:99:c8:a0:
bf:4b:68:00:89:2a:78:b2:52:ac:a9:1c:10:0c:a6:fb:60:66:
9f:44:fc:bf:7b:93:33:da:37:af:7f:d8:3b:54:b2:48:71:ee:
e9:c8:68:7b:3d:47:dc:c1:25:1b:b1:9c:7e:c7:71:28:ea:82:
06:bd:52:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:58 2026 by rpki-client