Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File: 1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier: 7zNdgZt+QLtDA5+07T5a2NdIa6jInCPFAStL0cexZhY=
Subject key identifier: 2C:5E:3B:DF:31:BD:3D:8B:25:EF:C4:23:09:60:31:E8:8D:0C:8D:90
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial: 019D99630DC8C1B26EA55A29DA999DE34D00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number: 082D
Signing time: Fri 17 Apr 2026 03:01:38 +0000
Manifest this update: Fri 17 Apr 2026 03:01:38 +0000
Manifest next update: Sat 18 Apr 2026 03:01:38 +0000
Files and hashes: 1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: aTXc+uyoAcMV52YQK5CCnXxfpfR9ays4/8LrqvkHOYo=)
2: KD5Nzwe5gk1N-Rm3egJ-hjvwQnU.roa (hash: 8YQQaqmVY0bXdQ+XjWYENgqQf0S4GzGtcS/OODIOYgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:0d:c8:c1:b2:6e:a5:5a:29:da:99:9d:e3:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Validity
Not Before: Apr 17 03:01:38 2026 GMT
Not After : Apr 18 03:01:38 2026 GMT
Subject: CN=2c5e3bdf31bd3d8b25efc423096031e88d0c8d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:b9:20:e4:36:03:24:2a:77:e8:ba:9e:e1:
e4:f1:6a:93:13:d1:cd:11:aa:50:3d:c5:b3:16:b0:
39:3c:1b:5b:c9:10:12:08:1f:c9:76:7a:94:72:f6:
f3:db:c9:f7:bd:e8:4f:30:fe:83:ea:25:fb:6b:18:
dc:43:d8:99:a1:d2:27:f0:e4:f1:24:49:b0:f4:86:
e1:c1:d0:92:73:be:f3:d1:12:5d:63:fd:76:26:8f:
85:aa:91:0e:5b:72:e8:31:59:ac:1a:fc:42:34:f0:
18:a8:bf:04:d4:47:48:d5:dd:76:ff:fc:1d:d0:9b:
81:60:a9:b8:8c:0c:fc:a6:e2:f7:69:a9:a2:af:33:
33:48:3f:54:74:b7:66:36:aa:2e:bf:11:05:63:37:
9a:db:b2:d2:86:63:da:00:d2:6b:36:c3:67:b8:4f:
de:35:7b:be:46:1d:21:c7:3d:dd:03:79:ee:69:f3:
45:d6:d9:23:de:da:82:c0:d1:be:bd:b1:b7:34:23:
b1:47:09:41:3c:a3:56:0c:14:49:3f:47:1c:ad:65:
80:40:4c:cb:bf:cb:2c:f9:bd:30:c7:38:c7:cb:66:
0b:14:a8:67:24:0d:51:91:1c:10:5f:2a:67:15:f2:
29:a7:77:3f:33:b4:c7:ed:47:d6:e9:f4:b4:41:83:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5E:3B:DF:31:BD:3D:8B:25:EF:C4:23:09:60:31:E8:8D:0C:8D:90
X509v3 Authority Key Identifier:
keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:74:28:66:9e:58:92:66:63:4b:9f:44:88:5f:09:4e:9f:a5:
14:8b:43:06:6b:a3:59:60:2a:16:26:c7:6f:1e:d9:ae:62:76:
8b:7d:3c:3c:53:c6:2f:b2:ca:f9:11:18:28:48:46:8c:e2:32:
45:c5:d7:07:62:2d:38:a7:8a:4b:0d:c5:0a:22:e5:16:2a:1c:
62:2d:a8:d1:72:3e:7f:2c:02:53:eb:b7:d2:79:87:c8:cd:16:
d5:ba:b3:24:6e:a4:b5:b9:14:6d:3b:41:a9:85:c0:28:6b:b2:
cf:fd:0a:2f:8a:9f:a7:2a:c2:70:76:f6:46:7e:63:86:e0:9b:
0a:cf:10:61:1d:d8:9f:ad:9c:2d:68:3c:9b:cc:92:ce:d7:d4:
4d:0d:bc:9a:1a:39:f4:27:2b:df:85:7c:d3:d1:02:d4:7e:94:
c6:8c:ee:11:7c:ea:9b:9f:56:c3:8e:36:1a:88:0e:6f:a7:ea:
b2:0d:5f:bd:af:6f:fe:41:95:be:96:8f:0e:f4:fe:fa:00:20:
93:e0:4d:72:03:cc:6f:c8:c2:c5:f5:67:9c:9e:68:15:f8:87:
c8:24:e6:c2:25:64:44:48:11:6e:c5:c0:3e:d9:3a:31:ed:e3:
62:53:80:04:e0:b8:af:d1:a2:95:cc:47:e7:a0:ee:44:f0:32:
31:87:ce:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:27 2026 by rpki-client