Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
File: zsUHpaHlUBp61jVTNazf5j2ryQs.mft (raw, json)
Hash identifier: eKuaObttMfY9OYRBgXMsEB2x0xyUdDUUlNs28jjKtJ4=
Subject key identifier: 30:DA:C3:5F:5F:5C:6D:BF:57:80:30:45:F7:F1:68:2B:70:3C:83:1A
Authority key identifier: CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
Certificate issuer: /CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Certificate serial: 019D984FB6248773B351B68464CB886161BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
Manifest number: 18BD
Signing time: Thu 16 Apr 2026 22:00:53 +0000
Manifest this update: Thu 16 Apr 2026 22:00:53 +0000
Manifest next update: Fri 17 Apr 2026 22:00:53 +0000
Files and hashes: 1: zsUHpaHlUBp61jVTNazf5j2ryQs.crl (hash: mIvqW7vinCphP635VJG0NzNnR90ZBLJjcZU2eZFFM5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b6:24:87:73:b3:51:b6:84:64:cb:88:61:61:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Validity
Not Before: Apr 16 22:00:53 2026 GMT
Not After : Apr 17 22:00:53 2026 GMT
Subject: CN=30dac35f5f5c6dbf57803045f7f1682b703c831a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:ad:98:aa:8d:76:a7:ca:ab:e2:8f:15:cc:
fe:b2:5d:b2:08:d4:f4:c5:51:b0:0a:11:fd:72:58:
af:b4:5d:92:47:74:ca:a6:b5:d9:20:e0:09:8d:80:
49:75:80:84:7a:6c:9a:cc:ab:54:31:76:75:50:41:
10:ed:ce:28:59:08:62:bd:1b:05:5d:2f:16:99:ac:
00:25:e1:0c:10:fb:ee:e5:39:ba:48:0d:58:05:77:
0b:d9:97:a2:ce:0d:42:d2:22:8e:5b:0b:06:ac:ea:
eb:46:61:f2:37:67:e3:2e:92:3c:d6:84:1a:94:af:
c3:73:de:7e:9f:36:0a:aa:b5:9b:95:ef:22:10:6e:
dc:23:7b:c4:34:54:fd:26:ec:db:ca:d8:42:48:53:
c4:d6:93:ae:b8:5f:a8:42:9a:79:75:91:6f:cd:57:
84:4f:ae:7d:53:6d:f4:91:89:1c:96:bb:07:0a:f3:
f0:fc:b8:37:03:f3:c6:e6:ba:42:a8:40:cf:0b:26:
de:0f:66:51:c4:9d:bf:d2:f9:1e:fa:52:d2:aa:f2:
9f:7b:00:4d:77:3e:19:54:15:85:19:a7:6b:77:62:
f6:6e:07:35:54:56:87:6f:34:f5:27:08:c7:53:2d:
d1:32:1a:58:92:8e:c0:f0:d1:c3:65:f9:79:8d:30:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DA:C3:5F:5F:5C:6D:BF:57:80:30:45:F7:F1:68:2B:70:3C:83:1A
X509v3 Authority Key Identifier:
keyid:CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:12:59:f1:7b:2f:7f:3a:dc:c8:23:c5:cb:ae:a8:c0:ea:f5:
b6:93:75:8e:5b:bc:79:2c:4a:3a:bb:39:3e:f1:2e:dd:2b:ee:
dc:d9:f2:a4:44:0f:38:bb:5f:53:2b:55:0b:4b:71:38:84:ef:
5e:57:67:07:f9:55:f6:1c:38:26:ed:fc:70:27:c6:a5:16:41:
c6:85:46:21:9c:01:eb:85:fc:8c:53:21:6a:0b:f1:15:e4:42:
4b:9f:f1:01:8c:a0:f7:0e:05:bf:bc:64:68:71:43:09:d3:8f:
53:05:7d:8c:e9:99:4a:24:17:d7:f7:9c:8d:27:b4:68:94:65:
43:f9:47:61:85:be:ad:af:50:3e:61:5b:06:29:90:a5:00:45:
e3:a5:cf:07:d1:20:58:f1:ea:ce:bd:cf:73:9c:2d:84:a2:38:
bb:49:b2:af:48:25:27:54:b8:f8:04:20:1b:62:0c:c3:e9:71:
a2:35:71:f8:76:37:a8:a4:b9:85:ec:6c:0b:af:2b:27:72:38:
7c:00:8a:3c:11:4c:17:33:f5:02:0e:4a:e8:a9:cd:2d:eb:5b:
88:7e:1f:ea:c9:6e:ad:31:83:1c:ab:8e:b8:1a:ae:4d:e1:f5:
a8:a1:83:39:86:d0:26:6e:75:fb:12:25:81:a4:7d:89:5f:2d:
46:46:b7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:21 2026 by rpki-client