Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
File: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft (raw, json)
Hash identifier: TDSYQHFpXi++JeuXAeB6YSDXfoiPRi6z3s7SOgfTw4k=
Subject key identifier: D3:B6:9A:8D:31:D3:A7:1D:3E:AF:E1:09:86:71:9B:E6:95:B6:8A:35
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 019DA48B7A4F4430CDE83496F7C5FB34D276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
Manifest number: 0E7A
Signing time: Sun 19 Apr 2026 07:01:37 +0000
Manifest this update: Sun 19 Apr 2026 07:01:37 +0000
Manifest next update: Mon 20 Apr 2026 07:01:37 +0000
Files and hashes: 1: fskjKgPj5L9YOuWuL2aoh4G8vqU.roa (hash: 31yKilxbLobmkxS1Ne8oNBBHC8xU0xlQdNH3udg5Os4=)
2: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl (hash: EEJz1HGY8+w4p7bt+u5kBo3JuPpM8oAl8EsM0I6Fpf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:7a:4f:44:30:cd:e8:34:96:f7:c5:fb:34:d2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: Apr 19 07:01:37 2026 GMT
Not After : Apr 20 07:01:37 2026 GMT
Subject: CN=d3b69a8d31d3a71d3eafe10986719be695b68a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:4c:7b:2c:47:1e:e5:79:25:62:98:0f:85:
11:9e:c7:af:a9:be:a7:82:14:bd:32:be:d3:82:10:
92:74:dc:03:2b:59:1d:ee:88:f4:86:fb:46:1d:ef:
c8:f2:ce:18:6b:ad:b1:9a:94:06:c2:2f:73:73:b7:
eb:a5:93:92:22:df:93:ce:45:17:42:f5:bf:87:66:
7d:fd:e1:fb:33:15:de:a2:20:5f:30:5c:78:c2:60:
31:6d:56:4a:66:3b:ee:bc:0f:dc:01:fb:5c:bf:d1:
f3:97:ee:14:65:43:3a:93:c8:3d:09:b0:66:42:4d:
a5:df:c7:be:b8:bc:fd:8a:85:4a:60:b8:4a:b5:3a:
bb:3c:37:d7:ec:a2:23:41:e2:f5:a7:e6:61:3e:06:
a9:65:0c:c1:21:55:81:5e:5e:d8:0d:f9:1f:84:a4:
36:72:31:0a:d5:f1:ff:74:15:e5:1f:a5:63:05:99:
1e:98:35:d8:48:58:3f:51:ec:09:a8:1d:fe:dc:56:
2c:7b:93:ac:41:f4:13:68:8a:c7:c5:af:98:ab:a4:
67:c5:f2:17:32:da:07:f1:3a:45:23:cf:9a:f7:cc:
1e:16:e7:66:99:5d:13:dd:c0:29:40:31:40:06:32:
10:de:6b:12:e7:d1:9d:26:19:64:47:e9:d5:29:94:
00:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B6:9A:8D:31:D3:A7:1D:3E:AF:E1:09:86:71:9B:E6:95:B6:8A:35
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5c:ae:5e:82:02:b5:4b:b8:ef:6d:47:f5:5a:bd:7a:2e:8d:
03:8f:a4:76:58:b2:26:c6:15:e0:6c:fa:8e:fb:f3:47:58:e3:
4c:53:de:35:0b:2d:a1:6a:2d:9d:12:96:a7:68:f0:f8:ad:0a:
99:21:15:02:a5:35:b7:2a:a5:82:d9:71:84:9f:35:45:c2:11:
54:5a:9a:33:f4:44:15:0f:81:e1:35:43:d8:c2:7f:70:37:aa:
55:0f:17:54:04:25:55:45:1f:5b:ef:11:e6:75:fc:26:a7:18:
6b:f3:87:22:24:b9:b6:5d:ac:ed:97:35:eb:5e:ac:e6:1d:72:
6b:d6:c6:0c:d7:94:68:a7:45:b9:88:c7:d0:9e:66:a0:96:a2:
23:b2:90:94:38:1d:80:b7:50:4e:ae:ce:2a:09:5c:c5:33:25:
02:3f:cb:3e:ba:a4:5e:98:af:cb:a7:54:d1:bd:3d:82:be:72:
71:ca:20:cf:08:ba:b1:dc:22:3a:cb:36:41:e0:6f:38:af:49:
53:65:90:fc:b8:bf:c3:99:8d:90:d1:27:a2:0f:6f:cc:bc:e0:
9f:ae:a6:62:ad:e6:58:2f:a3:97:1a:de:e7:aa:55:33:eb:13:
c5:52:87:29:05:17:ec:bd:76:bd:2d:d5:72:4d:71:0d:f4:e3:
81:f0:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:32 2026 by rpki-client