Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
File: ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json)
Hash identifier: tHX4feOPs/aEf7NIhbyCOjmg+HJiIwlzENBLsCRoHE0=
Subject key identifier: 31:E2:71:DC:16:5F:AF:E9:9D:D5:30:F9:50:84:A3:73:B5:E2:7D:BF
Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Certificate serial: 019D9818F12DD335C33432863B69A0C942AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 21:01:04 +0000
Manifest this update: Thu 16 Apr 2026 21:01:04 +0000
Manifest next update: Fri 17 Apr 2026 21:01:04 +0000
Files and hashes: 1: Tthj6IAisEXh8B7T83zOvQFpSgE.roa (hash: swp/iMSfoovOUEacEZNjOCFIiISihBeFVFi87XAxBPg=)
2: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: b0LK+QLoNRPzg/xfr4E/KvJ/C++UxKuSHRQffs4nG+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:f1:2d:d3:35:c3:34:32:86:3b:69:a0:c9:42:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Validity
Not Before: Apr 16 21:01:04 2026 GMT
Not After : Apr 17 21:01:04 2026 GMT
Subject: CN=31e271dc165fafe99dd530f95084a373b5e27dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:65:7a:83:ac:cc:70:ac:d0:9e:b0:33:98:
c7:49:92:da:c9:df:5b:f2:cc:6c:36:10:9e:e4:d7:
36:d0:03:e9:80:7e:25:4b:e5:a3:7c:56:f2:6a:a5:
67:43:e9:39:32:c8:0a:37:6a:0a:2d:58:bf:be:09:
d3:8f:76:26:02:a2:63:25:91:88:ba:2e:f2:b6:47:
fd:5e:ce:64:9a:b7:a1:e5:d6:27:f2:42:75:58:84:
50:af:0b:91:6f:a9:24:a7:53:12:25:e4:e0:a0:51:
e9:5c:c7:49:57:b3:a4:d5:19:4e:6b:a4:7e:5d:41:
64:6d:ff:2d:98:cb:9f:64:ee:9e:9b:1e:16:6d:d2:
5c:08:c8:30:8c:69:10:07:f9:7d:d0:95:b0:54:f1:
fa:ea:49:a1:8d:99:c4:5d:65:bb:72:84:06:6c:ca:
8f:ef:4a:fb:f8:ab:4b:27:b0:54:a9:dd:38:d4:59:
77:1d:aa:30:a4:f4:18:08:79:7e:b1:71:6b:1f:96:
8a:49:cb:7a:fe:20:cb:50:f4:77:67:60:7e:05:0f:
81:d5:bf:62:ca:ea:15:1c:78:ef:fb:d0:48:58:59:
fc:04:fd:6e:f4:bb:62:6d:cb:34:bc:f9:49:dc:ab:
02:90:78:cd:38:aa:fa:0e:6b:9f:b0:ee:1e:cf:8a:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E2:71:DC:16:5F:AF:E9:9D:D5:30:F9:50:84:A3:73:B5:E2:7D:BF
X509v3 Authority Key Identifier:
keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3d:2b:c7:33:35:56:b5:ca:87:08:dd:01:81:29:09:12:74:
34:3c:54:ce:1a:b2:c1:50:70:eb:d3:e2:80:85:9a:fc:2a:b1:
be:91:87:4f:13:6b:b7:e9:58:37:7c:d7:c3:58:dd:9d:19:1c:
f3:db:09:1a:9d:97:b7:5b:10:23:8a:93:d0:1d:65:da:2d:7f:
12:3d:2b:a6:ab:ea:e4:ff:9b:43:17:66:ea:98:0d:48:b5:73:
e3:2a:be:3c:fc:54:8b:a0:cc:22:ca:c7:3e:7d:f7:54:6c:87:
8c:9f:a4:91:7c:ed:65:68:a9:87:5f:ba:3c:a7:bc:13:70:ad:
e0:03:8f:f3:51:ca:49:8d:bb:44:02:ec:0b:60:d3:ac:76:7b:
ac:24:ed:23:76:4d:d1:fc:22:20:c3:40:ca:96:90:48:2b:0b:
c4:6f:4b:4e:ed:3f:78:ab:cf:05:c2:0d:58:e5:db:90:10:73:
d6:1f:b6:7d:57:c0:89:b5:90:32:eb:c2:c8:10:dd:e5:12:f9:
ca:62:fb:05:b8:57:7c:08:3f:6f:3e:cf:ec:27:a3:57:de:60:
ec:0a:59:57:e1:f4:eb:55:2b:cc:7e:64:2e:4f:c2:d2:fc:cc:
a8:8a:d1:29:27:c5:e6:3c:1a:f7:4d:84:d6:3f:a2:ad:31:17:
b0:3c:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:07:54 2026 by rpki-client