Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
File: ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft (raw, json)
Hash identifier: ogW1rvWWh9bh59m9zDxLfum380YauJ+cbSn2CRxTCro=
Subject key identifier: 9B:F2:92:15:1B:F7:33:B1:7B:1C:7A:37:5A:C0:CA:C1:D3:13:8F:96
Authority key identifier: 64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
Certificate issuer: /CN=644ca1f90518d4253f325947d7f32db78721647c
Certificate serial: 019D99D0B5E88BE1BF6F0F5AB632499A3E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:01:25 +0000
Manifest this update: Fri 17 Apr 2026 05:01:25 +0000
Manifest next update: Sat 18 Apr 2026 05:01:25 +0000
Files and hashes: 1: ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl (hash: eHp4jjaSq9fxtYAVW1pjE/YOZ9H5PkwgwFuTmpGE6/I=)
2: h-DdB5q6o6vGcwUvYQjItuQoHSo.roa (hash: R0KxdO/E8HjCSvDapDPgguWBk+j+4g//kGxl/YMu2PE=)
3: y1-SGhZC7LSQ3xAFEOGz9QyG038.roa (hash: G+7mp0FPcfU99vlwCxTLgDF4pbzcHad2tCEvXbWZJ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:b5:e8:8b:e1:bf:6f:0f:5a:b6:32:49:9a:3e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644ca1f90518d4253f325947d7f32db78721647c
Validity
Not Before: Apr 17 05:01:25 2026 GMT
Not After : Apr 18 05:01:25 2026 GMT
Subject: CN=9bf292151bf733b17b1c7a375ac0cac1d3138f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:bd:43:dc:f5:90:e0:9f:25:26:eb:bf:6a:
de:24:05:7a:02:06:5f:de:16:fd:16:d3:e0:4e:ba:
88:63:26:84:9c:ef:62:7f:0f:b6:97:3e:23:17:89:
43:1c:e3:82:72:69:f7:67:a4:90:80:33:df:a4:af:
1f:07:2c:a5:4a:04:56:39:41:5b:89:47:c9:a7:fe:
2b:4a:c6:fa:10:56:23:da:60:df:7f:ed:22:d9:a7:
97:99:e8:bc:92:88:6f:b0:ab:5b:a3:96:c0:cb:09:
a9:27:97:4b:ed:b4:95:e8:9b:de:64:68:6c:83:c4:
e2:39:da:9b:59:66:27:04:af:c8:b6:93:42:60:fb:
3e:a1:5b:a0:7f:e8:d1:28:d8:54:11:f8:4f:d1:e4:
86:8b:d5:52:32:66:86:32:dd:6b:59:9c:4c:d0:89:
48:3c:34:27:4f:a8:d6:00:ed:da:d5:3b:53:e7:6d:
6f:b1:f3:70:6e:72:13:59:fc:01:6d:82:a6:a4:16:
df:e6:74:6b:5c:71:be:25:d7:09:25:a0:34:79:3b:
82:36:ad:a5:6b:30:72:60:e8:ec:b9:17:66:5e:67:
cc:83:79:55:fa:30:4d:29:e6:30:98:42:0c:30:86:
c1:20:f5:9d:50:ef:14:5f:f6:bd:c9:bb:fd:36:77:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F2:92:15:1B:F7:33:B1:7B:1C:7A:37:5A:C0:CA:C1:D3:13:8F:96
X509v3 Authority Key Identifier:
keyid:64:4C:A1:F9:05:18:D4:25:3F:32:59:47:D7:F3:2D:B7:87:21:64:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEyh-QUY1CU_MllH1_Mtt4chZHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1564-3466-4732-83bd-b90d974e5fb5/1/ZEyh-QUY1CU_MllH1_Mtt4chZHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:71:62:8a:e7:e7:05:92:cf:25:fb:ed:0a:20:da:3b:e4:a7:
dc:c7:e3:a9:94:96:1c:43:8c:6b:5b:2f:bb:6b:40:45:22:f4:
2c:33:bc:20:b5:e7:fe:23:dd:08:d1:f9:56:fa:3d:69:52:82:
65:c9:40:3f:e0:48:1d:72:93:15:ef:b0:7d:f2:f9:06:ea:05:
37:37:72:ce:10:52:7f:fa:55:11:a6:4b:09:94:f4:34:21:f1:
01:3d:54:ea:4d:ca:a6:e6:26:27:cd:cf:ef:94:ab:de:13:ff:
c7:ba:24:7b:2b:4a:13:24:b0:a2:8b:e6:5e:f6:11:7a:a5:0a:
18:d7:1c:21:e5:d4:2e:69:ff:65:6c:4d:1c:75:aa:0e:40:b8:
e4:ff:5d:b0:3b:86:43:72:43:f2:79:67:ea:ec:24:03:ff:d0:
4b:4b:88:b6:cb:d7:91:78:b6:04:12:42:06:0b:e1:67:87:0c:
8b:92:99:b6:72:4d:71:61:ba:49:c1:4c:a4:38:23:be:79:30:
fe:c2:4a:24:60:a1:e8:22:70:b8:1f:b8:19:82:76:3c:92:73:
d6:f5:48:4f:7e:64:42:06:a7:14:27:dc:3c:b3:bc:09:b6:6b:
07:71:63:51:37:a5:45:b8:f8:94:77:15:6a:e0:fc:bb:c0:cf:
1e:e5:22:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:45 2026 by rpki-client