Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: 7cQ7f3/Qefwp2JogCAEFV2zJeBOx+UMKhLEL7xuPOJE=
Subject key identifier: 92:0C:80:1A:28:6B:F3:7B:47:3E:1C:84:6F:C7:CA:32:AC:FA:E4:D9
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 019D98F4B475FF163E52345BE4EE8942BC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:01:06 +0000
Manifest this update: Fri 17 Apr 2026 01:01:06 +0000
Manifest next update: Sat 18 Apr 2026 01:01:06 +0000
Files and hashes: 1: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: 9Ls5vBLSxKp7sOv3obWDAvyvWMwzoYC9NckIJTesB5E=)
2: ftUP8AhWyKSCfDygp2EvHTO8Boo.roa (hash: ewSYxaolal/Z6l87pd6PUdDa+voxm7gfdPqRbZdlcCk=)
3: h7hfu83GdfBNM7Zx2PElKBPYyGY.roa (hash: HsgzFT58UTHg7xZoI81l8ngXvJujr6TYdyM2zeg4nXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:b4:75:ff:16:3e:52:34:5b:e4:ee:89:42:bc:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Apr 17 01:01:06 2026 GMT
Not After : Apr 18 01:01:06 2026 GMT
Subject: CN=920c801a286bf37b473e1c846fc7ca32acfae4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:53:06:bb:90:de:37:77:8b:62:57:af:d6:82:
0e:c2:77:01:9d:b5:a8:05:21:cc:5f:04:fe:3d:f8:
94:83:58:6d:3f:f0:22:c1:21:45:2e:3d:12:ba:d3:
00:c4:1c:a6:22:23:cd:41:1a:23:9d:8b:67:0c:c2:
bf:5e:d5:23:51:0b:68:2d:a6:4c:a2:ff:f9:4f:fa:
bc:31:b9:c4:8a:84:6c:54:72:b1:0c:6c:d2:c1:e9:
0c:02:23:25:77:2c:d2:89:58:7d:41:b5:60:25:fd:
d3:72:3a:77:8d:ec:cb:64:b8:c9:5f:b8:12:7c:2b:
80:63:63:f6:e4:3c:c3:21:b2:83:6e:64:21:59:a8:
e8:72:2a:1f:08:09:bd:b8:2a:07:b1:07:5f:a0:ea:
9c:38:56:a9:1c:8e:94:4a:d5:33:44:4a:b1:13:e7:
f7:44:d1:fd:9b:e6:a9:92:2e:e5:58:37:32:ca:63:
7e:10:fb:02:a5:4d:f3:36:83:06:dc:db:16:bd:56:
9e:ca:3b:d9:d4:d9:7a:81:1e:66:99:ca:e6:ef:37:
34:c7:b8:e4:30:ac:a2:72:ac:6c:f9:6a:26:80:e7:
5f:d0:a5:24:a5:bc:41:94:9b:13:97:dd:bc:35:41:
16:e0:1d:52:ee:7b:25:f5:6a:43:f1:3f:63:4e:64:
8b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0C:80:1A:28:6B:F3:7B:47:3E:1C:84:6F:C7:CA:32:AC:FA:E4:D9
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:49:b1:d5:b0:9c:a6:50:13:87:29:46:a5:d4:98:29:3a:09:
b5:14:aa:98:5f:87:b3:c1:62:d0:79:50:56:20:dd:2a:cc:05:
67:38:c4:70:da:2c:95:05:f6:ae:ce:d4:70:42:af:f5:84:0a:
52:05:9a:ab:5f:ac:fa:83:88:f6:eb:50:36:23:7a:ee:27:54:
72:30:86:5d:e9:f7:47:f8:4d:3a:7c:f7:f1:40:ce:4c:95:f4:
a4:ef:3e:8e:a8:b2:bf:f4:e4:d1:de:6e:73:7f:0c:55:a2:06:
99:fb:eb:64:0d:a1:e5:0c:42:54:02:59:80:65:5f:34:e3:f7:
69:06:5a:7e:6d:28:35:ab:f2:f2:a5:10:e8:0f:e6:31:22:c8:
d4:11:76:84:ee:a6:11:2e:83:6f:ba:64:e8:b5:d4:ef:e9:be:
16:40:5b:86:3f:6a:a1:3d:f6:6c:b0:b0:fb:e8:cb:92:a1:7f:
b2:5a:c5:bb:79:29:5e:d1:33:12:54:fc:c3:12:f7:44:83:e4:
72:83:a1:7f:f9:ce:10:b0:63:a2:64:eb:39:af:12:91:b8:47:
e9:cc:e7:a6:37:55:0e:5d:49:6b:6e:ff:18:12:62:af:79:5d:
e3:3b:90:56:ef:14:2c:3a:06:6a:af:70:23:38:10:4b:66:e2:
05:45:4c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:08 2026 by rpki-client