Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: Rh4qz7T14nvpZXkS90I22k2OoC8HsD8G09UuKsYdvGI=
Subject key identifier: 56:98:87:17:07:E0:61:0B:ED:46:70:2B:82:B1:EC:C6:F3:D7:A0:15
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 019D98F5069098BEEBF1F1D7B1439B5A0D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:01:27 +0000
Manifest this update: Fri 17 Apr 2026 01:01:27 +0000
Manifest next update: Sat 18 Apr 2026 01:01:27 +0000
Files and hashes: 1: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: aXyTGlEABlIDcKdo0ujTcEYoNjHFuhy07o18s04a4ug=)
2: tLzYTCMgcEaSpA6pqJ49xM0mJhg.roa (hash: v1AukhZWCgWLe1okLFBBNkZmMt/d4/1gGQHfd9186v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:06:90:98:be:eb:f1:f1:d7:b1:43:9b:5a:0d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Apr 17 01:01:27 2026 GMT
Not After : Apr 18 01:01:27 2026 GMT
Subject: CN=5698871707e0610bed46702b82b1ecc6f3d7a015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:36:d8:20:78:61:10:3a:15:26:10:9b:05:
6a:ea:f9:16:0c:5e:e7:40:e2:3f:9b:b2:51:4e:6e:
0e:3b:60:c0:ff:d7:96:87:37:84:5a:d1:1f:be:db:
90:85:8b:82:5e:87:e0:26:a6:21:16:09:b6:dc:e5:
2f:be:06:d6:e8:7f:29:be:60:59:1b:59:bd:44:8a:
a3:4c:c9:54:dc:6e:4e:de:55:ae:f8:90:26:ac:03:
be:db:5c:e1:21:0a:f4:b3:69:43:af:53:a3:bc:4f:
ba:cd:a8:97:06:e0:a5:7a:fb:bf:65:02:5f:3d:5f:
6a:b6:b5:fa:13:a7:3c:0e:66:2c:51:06:44:2d:3c:
a5:46:38:7f:d3:7e:50:f6:d3:43:c6:eb:0a:1b:c0:
b1:46:98:ee:80:ed:ef:d2:e3:0b:39:c8:e7:dd:5d:
50:27:ed:1f:20:89:67:93:16:9f:e9:f5:6b:31:3e:
3a:57:13:ba:08:e3:f4:20:e9:1e:3d:65:e8:be:48:
3a:e6:ba:b4:5d:e1:61:5a:d7:ad:a6:a7:f3:3a:ae:
e7:f6:ef:84:08:e7:1a:96:e9:9b:a1:c1:9f:13:8d:
1a:e6:8d:d7:2d:52:24:f5:bc:22:78:d9:da:9e:62:
6e:09:f9:a8:a6:42:4e:30:0f:49:82:6e:a8:98:86:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:98:87:17:07:E0:61:0B:ED:46:70:2B:82:B1:EC:C6:F3:D7:A0:15
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b2:5e:e9:8e:bc:8a:2f:e4:32:20:d9:6a:c3:31:d8:7c:f6:
dd:b2:d9:87:ae:b8:d3:6e:92:bd:86:cf:43:43:91:98:17:5f:
ff:93:24:ad:e4:78:08:7e:1d:bc:37:f2:43:e2:0b:40:5a:1c:
47:a0:cf:5f:74:de:57:ad:5d:2c:29:56:9a:53:b0:5c:9b:98:
c0:d7:40:8f:dd:b7:73:cc:bc:83:67:12:86:50:8c:a4:4c:d7:
e0:1d:6f:1f:3e:ab:7f:a6:e5:f9:91:9b:cc:db:10:e7:58:89:
79:c5:0d:5e:7b:17:6f:db:ce:1d:84:bc:fa:59:4b:f4:7f:d7:
84:ab:eb:4d:8e:8e:9e:d9:fb:32:be:72:5a:96:0b:ff:57:d5:
f7:66:30:b6:2a:a4:d3:1f:88:05:92:5d:7c:5c:e2:24:6b:b2:
06:dd:e0:ea:fa:2e:24:4a:62:db:9e:1f:21:55:44:75:3a:b1:
97:96:41:41:86:f5:7a:8c:e4:2d:c8:4f:26:13:f2:63:70:d1:
cb:e2:72:9f:72:f2:88:14:1a:49:84:35:29:c5:35:c7:88:d0:
eb:28:40:1b:2b:0b:40:f8:a9:5b:ff:46:ee:98:65:d8:ec:ea:
ec:bd:75:df:65:cb:eb:fd:c3:d3:6b:1a:5d:2a:50:0f:b9:87:
c1:3f:9b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:10:48 2026 by rpki-client