Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: fAyWuwpUZjHBrDv/3P16xB1wi1wkqmy2aBj/3xLoVqg=
Subject key identifier: C2:99:57:F5:66:80:A1:9C:2F:59:C2:C2:C8:60:AB:24:75:19:75:3A
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 019D9A06BCADC33EEB13DD2A301F67AE1177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 18CD
Signing time: Fri 17 Apr 2026 06:00:25 +0000
Manifest this update: Fri 17 Apr 2026 06:00:25 +0000
Manifest next update: Sat 18 Apr 2026 06:00:25 +0000
Files and hashes: 1: 0GL7DdIdoFqMUjvFhCRfHpKPMbA.roa (hash: pZia0ALckAxbVwXjSvk9ZitHob5JnbAYRMcyTh/GAHw=)
2: 4CJ3InuHwPxMIYug15LfFjf4TFE.roa (hash: AqjwYTvPMHv8KhwXl422zB5jGiNZqfOiCwgbFsHZ07g=)
3: H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa (hash: z0WYajZ68GEteUnmX5OmcBfJ0ynCGdGVIvLSKmVhonU=)
4: VxmBydPNDVkjAwNW0HlCl0mcW2A.roa (hash: 2uX2f6w9d7FkhAQJ79lByeDaz04Av+toag4OFSNYkF8=)
5: X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa (hash: rE1Gy+5Y3N/6nRhiVvsTgzmZ/j4C83X5X1jx7h+hjs0=)
6: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: JzSm8y25Hy5cZDX/+NXzeoxd3QFhOOUYmRFcGx6pHIA=)
7: srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa (hash: WOqlcZKIxr5sVUqyyKJNHMiLfFbk3vNnFX+UsNkt18I=)
8: zPyNAFdQmlJqV2qKRKA-eSuuTJY.roa (hash: WQ7fB4l+y3xXDPGETnFXWLdLLeTLH4yREUZKhvFa6Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:bc:ad:c3:3e:eb:13:dd:2a:30:1f:67:ae:11:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Apr 17 06:00:25 2026 GMT
Not After : Apr 18 06:00:25 2026 GMT
Subject: CN=c29957f56680a19c2f59c2c2c860ab247519753a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:0a:65:fe:28:22:ac:50:5b:44:e9:1f:04:
76:36:31:3c:74:29:a0:4e:b8:4c:2d:38:6e:a0:2e:
40:34:e1:05:80:03:ab:79:11:5f:a5:9e:29:93:46:
0b:f2:c8:8b:a3:4d:fc:c1:ae:cd:07:1a:35:cb:50:
66:43:ca:5c:4a:11:9d:7b:db:71:93:04:6e:db:80:
80:b8:5f:b2:3e:39:27:d3:e4:b8:4d:04:93:4f:60:
d4:d3:93:3b:d4:4d:9d:f5:11:a9:4d:89:84:79:8a:
a1:d6:e0:67:28:c8:c9:3b:91:a0:62:08:45:f1:20:
ab:c6:6b:3c:05:e4:40:12:5a:05:ab:b5:fb:cb:3a:
4b:76:af:47:d2:ee:a5:35:31:22:d8:1f:38:c3:5a:
48:69:5f:e7:a9:23:a1:00:2e:22:f1:bb:49:2b:ba:
18:58:c8:3e:e6:62:9b:69:cd:b7:2c:22:98:7b:4f:
a0:40:a4:5f:77:9c:fd:03:09:96:a3:82:51:cb:15:
b8:fa:c2:ec:e0:bd:57:c1:ae:e5:c6:2d:b8:f8:6b:
8e:83:31:c0:80:78:ac:0b:51:2f:ff:5e:77:a4:94:
f6:03:0a:dc:04:20:5f:62:eb:30:8e:e4:cc:f8:d5:
cd:80:f8:ff:00:32:c1:2b:67:0b:9c:78:a1:7b:5c:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:99:57:F5:66:80:A1:9C:2F:59:C2:C2:C8:60:AB:24:75:19:75:3A
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f4:74:b7:6e:98:63:be:f0:68:2b:61:08:ea:36:d7:4d:7f:
96:f6:4d:cb:1d:cc:1d:22:ae:c8:ef:d6:3c:7f:f3:65:9b:9a:
f8:66:3a:83:48:2e:1d:dd:3b:19:a6:33:f5:cd:84:d9:ba:80:
b1:59:e8:bd:2a:3e:a2:40:6f:c5:e9:e1:ed:f3:03:2c:9c:a8:
25:80:bd:00:35:06:70:e0:f0:de:89:d9:1d:7c:14:c2:51:c3:
fa:12:58:70:bd:bf:82:1a:40:5a:fe:4e:98:24:53:52:9f:a6:
07:d0:e2:86:5f:b7:e3:fd:f0:bc:10:fe:30:7e:9e:c2:62:b5:
79:16:3b:80:7e:ff:54:46:67:b2:4a:b7:99:4c:0e:11:bf:f2:
5d:38:87:a5:c5:61:10:2f:32:71:08:e4:2e:56:ed:a3:8b:eb:
eb:22:61:d7:ad:50:3c:c2:1b:c6:25:a6:d5:dc:a7:f1:c1:f5:
a5:cc:b7:ee:73:17:82:76:44:1c:ea:4f:0b:76:95:73:ea:6b:
be:e2:d8:1a:f3:f0:10:20:8b:db:41:32:94:c0:46:21:25:b2:
fb:5c:5f:e4:6a:ec:14:bc:51:0a:f6:db:f2:21:13:a5:13:51:
05:5b:bc:35:ff:eb:00:18:e0:2e:6e:dc:b2:13:11:1b:81:3f:
49:26:40:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:57 2026 by rpki-client