Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier: I+RS7iP1bEkQt6Q+G1P/X8Vjpc35vI/LMigDIAJpd8w=
Subject key identifier: B8:03:B6:15:2B:E9:C3:FB:56:F7:11:43:D1:1C:23:39:EF:EF:4B:A0
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 019D9B1A2EFDC18BDF810AC9715F0EF34FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 11:01:17 +0000
Manifest this update: Fri 17 Apr 2026 11:01:17 +0000
Manifest next update: Sat 18 Apr 2026 11:01:17 +0000
Files and hashes: 1: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: jxXG9AeDxjya0iF249suUOioISyo8m24yNXWP0B+mSc=)
2: x4lZLHx409i9ASlNHPyjDZiZaGI.roa (hash: 4B5GMEiwywVOE0OWSZpjZtJiJ2JFSDQmiE9yfVRIDfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:2e:fd:c1:8b:df:81:0a:c9:71:5f:0e:f3:4f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Apr 17 11:01:17 2026 GMT
Not After : Apr 18 11:01:17 2026 GMT
Subject: CN=b803b6152be9c3fb56f71143d11c2339efef4ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:ec:f8:49:f5:60:3e:3f:1d:b4:5f:2e:6f:
4d:c6:16:2e:2f:a8:79:5d:56:b7:6b:fe:d1:41:f9:
f4:55:9f:fb:59:01:3b:f8:9d:54:43:94:4b:20:96:
a8:a9:d3:83:44:47:18:81:fd:36:74:1b:b9:22:34:
ce:1a:9c:e8:46:85:b0:3d:8d:60:ad:33:ef:cf:fd:
25:f9:30:11:5e:6c:9c:41:21:ab:88:cb:08:a8:3d:
8c:6f:71:63:87:7f:81:c4:09:3e:c3:2f:69:93:42:
71:5e:73:f8:f3:bb:9a:98:0b:60:45:03:9b:0f:13:
81:da:2c:a3:a7:d4:72:6b:2f:95:5f:d4:21:2f:4d:
50:bc:5c:fc:12:30:14:8b:c0:9f:0b:67:79:0a:3b:
69:ac:83:9c:49:9e:b8:c4:0a:4a:60:8f:2c:75:34:
99:26:e2:64:d6:71:9a:a1:24:2e:91:f7:d6:b9:96:
b5:57:22:73:f1:da:73:e5:c7:e1:5a:52:25:f2:f7:
29:41:03:24:b7:11:8b:28:75:71:ec:94:06:2c:10:
1e:4f:dc:ae:fa:f1:bc:3b:8e:01:f6:1c:ba:42:0d:
db:2a:fd:ac:0a:ac:87:c9:a0:29:97:5b:10:be:48:
d9:79:7d:bd:9c:f9:fd:54:60:7c:df:0d:c7:25:8a:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:03:B6:15:2B:E9:C3:FB:56:F7:11:43:D1:1C:23:39:EF:EF:4B:A0
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:71:38:1f:b0:0e:36:d8:20:6d:32:69:33:03:4b:b9:20:f6:
cf:87:bf:f8:85:34:f4:1a:09:5d:ec:cc:1f:40:85:1b:35:6c:
89:57:01:0f:7a:1e:f3:75:da:ea:01:83:91:a9:c6:4a:c5:68:
ef:3e:ae:a9:9b:6a:0a:26:d2:b5:e4:f9:98:89:00:0d:de:ab:
22:66:c4:08:2c:1c:be:8b:0e:2b:7c:d7:80:5a:be:44:93:6a:
ef:35:65:a4:7e:ce:05:50:06:6c:57:06:55:1b:a6:88:33:7d:
11:a8:61:7e:ad:61:28:f6:c9:89:0b:ce:01:35:39:21:13:0f:
62:ab:43:0f:40:d0:74:bd:67:7c:1a:82:a4:06:d6:17:71:de:
fa:31:b5:f6:25:e3:48:53:36:32:1a:b0:aa:3b:a2:f3:a1:72:
bb:c8:80:66:b1:61:80:20:6a:9f:87:3e:6d:ef:9a:85:55:d7:
92:09:e4:29:35:e3:be:1f:42:32:53:07:4c:16:d1:85:3d:87:
95:79:19:38:2f:e9:11:17:87:ed:f1:d0:2b:95:ad:ca:d7:29:
c7:47:b7:d9:99:58:33:42:23:34:53:07:af:8f:5f:90:1b:69:
08:3e:84:88:15:81:f7:80:c7:ec:b1:51:f6:e2:ef:19:84:4c:
15:ae:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:12 2026 by rpki-client