Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: n+KJs2R6BaXAMWeXzwB9ubX1x+SM8PVhyH1NN8VntIA=
Subject key identifier: 3D:2F:C9:4F:0A:9B:45:97:28:C9:28:37:EC:52:A4:53:C2:74:42:3B
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 019D98BD48DD4CEF5F99928242F2C615E5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 00:00:34 +0000
Manifest this update: Fri 17 Apr 2026 00:00:34 +0000
Manifest next update: Sat 18 Apr 2026 00:00:34 +0000
Files and hashes: 1: jd-Obso-qia3Fzrm-rJvl_CyXrA.roa (hash: w+UMEthLd9XD2Eg9Qq+nBr2hQA3cH7TTPC5wOmg4x3A=)
2: vvIOu90M6kEZ71mN06u0tYK02eU.roa (hash: rr9r1oYZxg4M15XzRNVPfU9mZGnGg57yCNPY5TXNgYg=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: 7QU7/lVM4Bg4rEhYHG0NwrIzJ6HkYWRA/7OkcDXF+1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:48:dd:4c:ef:5f:99:92:82:42:f2:c6:15:e5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Apr 17 00:00:34 2026 GMT
Not After : Apr 18 00:00:34 2026 GMT
Subject: CN=3d2fc94f0a9b459728c92837ec52a453c274423b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8d:9c:24:95:10:f4:e7:3b:1c:e6:b5:f4:49:
ba:75:98:6d:33:f1:b3:16:63:f7:e2:c8:76:00:35:
e0:eb:45:6f:17:b1:1d:f4:62:9a:34:36:2a:b3:4b:
64:39:5e:17:27:f2:b8:f9:9c:63:ff:3b:d4:61:a9:
95:7d:2f:c9:2a:89:8c:da:04:da:80:63:e1:32:c3:
e8:ad:5b:96:f7:03:e7:3b:fc:8e:85:e0:be:9f:a7:
84:f3:ce:09:85:51:de:bd:90:e8:9e:a3:c2:4b:73:
15:e9:e1:b1:55:0a:25:c3:be:e6:96:61:40:8c:f2:
2d:51:d4:8d:3d:69:95:90:7a:75:1e:da:89:9f:fc:
d5:d3:c8:9e:ed:30:e3:fd:5d:10:82:3e:63:dc:21:
36:aa:a7:8d:3a:0b:9c:8a:0b:52:58:7e:de:ed:37:
c1:cc:15:cc:12:07:4a:b3:1b:d4:89:55:40:d5:7f:
65:ad:e1:65:f6:6b:68:c2:15:cf:63:db:d9:8f:09:
21:e8:6a:eb:46:ad:17:a3:6d:a8:d3:ad:7b:49:f9:
20:08:85:1a:5e:17:9a:e1:57:62:74:16:ff:05:75:
c6:11:9f:2d:6f:f8:30:87:ce:ec:35:22:9e:06:a4:
6a:60:c7:00:ef:27:c6:0a:d5:bf:b6:65:8c:8d:88:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2F:C9:4F:0A:9B:45:97:28:C9:28:37:EC:52:A4:53:C2:74:42:3B
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:18:0e:c7:30:80:07:31:a8:27:39:35:8c:34:15:e7:01:f8:
21:1d:20:44:6d:10:56:99:7f:d5:b4:8e:c9:d3:1e:55:78:66:
b4:4e:79:84:61:ac:9c:3f:06:11:07:c4:97:e4:ee:08:3f:7e:
ab:d4:bf:be:ed:e0:2e:b2:5f:10:d5:01:70:42:89:ac:6f:f5:
cc:e1:0e:14:cb:75:95:1e:6b:5d:c0:ee:a7:73:f0:ea:6b:f6:
31:5c:30:18:70:af:5f:9f:ed:d5:14:ac:8a:81:f8:d5:0a:5a:
89:32:d7:17:c9:3c:c0:94:b9:b7:41:aa:44:08:cf:42:91:19:
fa:aa:47:4c:93:42:8e:1c:24:df:a6:8d:2f:6e:ae:a4:ac:c4:
24:38:e3:33:28:cf:1c:b9:a9:9b:d4:91:06:7a:da:f7:9f:5d:
7b:d8:7a:49:8d:77:83:69:0c:b3:67:f3:1e:01:45:d2:e8:e9:
83:55:7a:d1:0d:01:69:92:c2:1d:36:14:bd:4d:f4:6c:be:72:
3c:31:7b:58:d7:11:70:25:6a:d7:16:3c:f4:0c:bc:c9:ad:82:
19:d0:96:a0:e9:86:01:b1:ec:bb:ae:89:cd:b5:ba:11:20:1a:
4b:14:f5:04:65:0b:85:9a:ed:40:6a:01:98:f0:d4:51:cc:28:
f0:64:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:55 2026 by rpki-client