Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: n6jNJ6pAgcUMJ6G1qG6FOb4y/LTZwvmQkGwkUiDmthQ=
Subject key identifier: 0D:19:C2:AB:7A:63:B3:03:C5:2E:3F:4A:53:1C:82:2A:60:5A:8E:2C
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 019D98BD4D49D5B27C7DEDD1B710FDBDA909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:00:36 +0000
Manifest this update: Fri 17 Apr 2026 00:00:36 +0000
Manifest next update: Sat 18 Apr 2026 00:00:36 +0000
Files and hashes: 1: Y9ARVG_hAm4nIrCTT5R9mNE2Ai8.roa (hash: MI2P4v9i+kU4F9eDStIUnkN/VYUaWV71u0evfwMIhOU=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: ai7LKfgGe2Kz/hOh89I1vOfxKUCTDG+AUGd5LgG2IAQ=)
3: fzcY56XdnFZoFNt0HXida4aSHGU.roa (hash: MqoKni1V8waFiRzOClIF15P78qFKBD2MS62bZfGpfEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:4d:49:d5:b2:7c:7d:ed:d1:b7:10:fd:bd:a9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Apr 17 00:00:36 2026 GMT
Not After : Apr 18 00:00:36 2026 GMT
Subject: CN=0d19c2ab7a63b303c52e3f4a531c822a605a8e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:54:91:30:eb:a0:b6:11:2f:75:90:fa:bf:3e:
cf:f9:14:58:35:86:4c:78:e9:d8:2d:40:1c:5d:8f:
33:09:6e:a0:51:94:f8:1b:ac:16:51:68:eb:13:9b:
de:9b:43:b0:20:00:6b:4f:b9:b6:f8:91:ee:f8:20:
67:78:66:c1:4e:ec:da:e6:82:f4:58:2a:44:a8:a5:
63:50:f5:a6:e8:06:4b:44:ac:d2:cf:83:38:26:a5:
d4:a2:35:23:04:40:fb:c7:80:94:c7:a8:c1:96:83:
56:73:b0:b3:7c:e9:6a:29:55:93:e6:7f:7f:d9:a7:
d4:1d:1e:db:0e:fb:e6:ea:2d:9d:70:74:d9:34:fe:
92:d9:c7:e6:b3:10:50:42:7c:fa:a3:a1:2b:c8:6c:
40:f8:63:0d:ea:83:65:9f:e2:32:93:12:b0:81:68:
fb:1d:b2:0f:d7:89:60:8e:69:ed:30:5d:e9:77:49:
19:20:60:87:ae:2d:7b:50:33:9a:f7:44:a9:06:7a:
03:a6:27:35:3e:e5:be:ef:ee:aa:d0:2c:eb:3d:01:
64:aa:3d:6c:3d:e6:7d:e7:b3:5e:d0:f3:8d:78:11:
df:e5:ba:3e:ec:22:9f:30:98:c0:04:c9:5c:2d:ed:
1f:95:3c:c4:44:f9:25:f5:7b:f5:8d:d1:16:a1:84:
f7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:C2:AB:7A:63:B3:03:C5:2E:3F:4A:53:1C:82:2A:60:5A:8E:2C
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5f:2c:29:12:3b:8e:90:55:8a:fb:c4:14:55:37:0a:53:cb:
9f:26:50:3c:a2:6c:21:ba:da:84:3d:2a:30:e5:7c:79:8a:b1:
7a:e1:02:98:08:be:87:d1:cd:de:00:41:d7:ee:bd:ec:89:21:
6e:17:80:3f:c6:96:0a:17:5f:10:20:d6:96:c8:71:bf:8b:d4:
70:0b:72:a3:56:d7:ff:14:5f:24:7d:b4:0b:87:78:e3:a1:fc:
d7:bd:47:ff:45:07:20:57:a4:8e:d7:1f:64:08:21:81:42:51:
19:e4:d6:8f:8d:2d:b3:c9:af:e9:61:a6:2a:d2:07:9a:33:d8:
9b:34:52:9f:5e:b2:15:44:bf:86:5f:aa:ac:39:48:38:58:07:
ff:25:61:23:5a:75:c1:6c:46:57:81:7b:85:da:3e:cf:83:a0:
5d:99:99:92:d9:85:3e:fa:95:2e:ef:6a:a4:a4:1f:bb:b3:4f:
9e:8f:e0:7d:ef:8d:dd:d9:f3:f6:5b:fe:7b:42:5f:3e:da:9f:
ab:04:74:50:f9:98:fb:14:a2:f5:1d:d6:55:5b:55:c4:eb:75:
20:cb:76:85:1a:19:ab:a4:bc:5c:36:a9:6f:db:c8:e7:39:ee:
e7:10:7f:23:21:b0:12:6b:3a:bb:8e:4d:09:3a:03:d5:eb:af:
37:8c:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:05 2026 by rpki-client