Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
File: zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json)
Hash identifier: g74OVHVutamfH1asRUKvRbSKHn8Gf6EyYUZGko7+hCQ=
Subject key identifier: 6A:74:2B:CB:55:33:3E:A8:67:37:3C:BE:C8:B8:D9:36:01:52:9A:03
Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
Certificate issuer: /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Certificate serial: 019D9A3DE5C0DA0CAA905DC4B5E039C6D4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 07:00:40 +0000
Manifest this update: Fri 17 Apr 2026 07:00:40 +0000
Manifest next update: Sat 18 Apr 2026 07:00:40 +0000
Files and hashes: 1: GnEvIAlaB-UByoYHOt2F_BVdPQE.roa (hash: fX8z3h8g/jt3tVZ0Hy99MVng9ZbtXgnxN+T6t3Ums8A=)
2: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: R815asrUVgwGYrWjvaLxcavUO9duDajvEZ/Mc8lgv9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e5:c0:da:0c:aa:90:5d:c4:b5:e0:39:c6:d4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Validity
Not Before: Apr 17 07:00:40 2026 GMT
Not After : Apr 18 07:00:40 2026 GMT
Subject: CN=6a742bcb55333ea867373cbec8b8d93601529a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:ac:ae:ef:a4:f4:2d:60:96:35:5e:d5:2f:
30:1b:9f:f8:95:03:63:a2:8b:01:29:1b:b3:c5:ab:
1c:9d:57:e4:17:c5:56:93:59:5f:98:6d:47:94:ea:
42:b7:30:f4:de:38:51:07:0f:fd:dc:c2:64:d4:06:
1c:ed:b2:12:25:4b:58:7e:a4:b0:32:fc:aa:24:88:
a3:96:48:e5:57:e0:05:00:45:86:c3:50:4f:b3:7f:
48:cc:ee:66:da:d7:7c:a5:b3:51:30:7f:d4:a7:e5:
da:80:ac:fa:56:e8:7f:57:82:7a:1e:be:16:13:8c:
e8:2c:81:a1:cb:ce:16:3c:f5:22:47:31:24:77:71:
a1:0a:a4:ba:46:41:01:31:88:af:10:3d:20:9f:93:
9b:0f:a0:00:20:66:df:d6:50:6b:09:4d:a5:13:12:
af:0b:79:e6:7c:2d:43:41:7b:90:1a:a5:a1:07:f9:
5a:e5:54:32:75:31:52:08:27:e8:9f:c1:d3:da:e4:
d1:4a:14:92:bd:03:13:bf:50:37:20:8e:cb:94:f1:
60:63:75:1e:e0:ed:57:a0:cf:92:7f:20:82:7c:1e:
d7:5b:cc:69:6b:74:f5:f0:a0:3f:8b:dd:58:0d:23:
51:2d:55:d5:14:68:fc:90:ac:7b:60:09:f5:b9:61:
5a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:74:2B:CB:55:33:3E:A8:67:37:3C:BE:C8:B8:D9:36:01:52:9A:03
X509v3 Authority Key Identifier:
keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:eb:a0:f5:54:b8:cb:46:c3:01:67:43:b1:48:38:14:6f:e9:
a2:40:e3:27:d6:0f:ac:ac:00:51:54:04:60:39:a4:22:ac:b1:
db:b4:2d:e8:cd:52:bb:db:00:ae:dc:34:72:bf:d6:b0:fd:37:
8d:47:db:5f:91:a9:e7:cd:bf:1f:bd:29:91:98:0b:16:ae:4b:
ab:a5:a3:b8:48:a0:29:7a:6b:e6:6c:02:67:3e:05:02:7d:e7:
f0:4c:69:39:47:5d:02:30:64:b4:36:9f:66:b9:23:ee:70:30:
d0:8d:1c:c3:de:f3:a9:dc:99:c4:f6:b4:10:77:9d:a3:9f:be:
c7:9f:f4:8d:58:be:af:a3:c0:71:7f:86:d6:35:d7:99:b4:9b:
48:42:07:8c:2e:f4:fc:76:de:af:2b:c0:08:d0:7c:c0:89:f2:
a4:78:cb:af:ca:e7:a9:96:13:a5:56:33:52:65:6e:77:1c:96:
10:5c:79:9e:28:7b:eb:53:19:43:47:12:c7:c1:e1:9a:a3:40:
6c:8d:c1:85:2b:b2:d1:0b:da:d3:67:22:5d:65:be:c5:c6:e5:
fa:c5:b3:11:6c:be:f8:97:a0:6d:4e:a8:e1:a7:aa:de:c1:2b:
84:b2:fc:be:28:a1:ae:13:8f:4c:0c:08:58:85:88:05:f2:97:
04:8f:d8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:47 2026 by rpki-client