Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: Pc8NZtiwLIv7Rh6C8/6NWmAhC9y/k6EMKEXyv7IwMlA=
Subject key identifier: F9:32:21:B6:C5:56:26:58:D3:98:45:E7:E1:5D:34:6F:01:19:66:2E
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 019D9850E32DC95297D418E7EAFCAC1E77E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 1377
Signing time: Thu 16 Apr 2026 22:02:10 +0000
Manifest this update: Thu 16 Apr 2026 22:02:10 +0000
Manifest next update: Fri 17 Apr 2026 22:02:10 +0000
Files and hashes: 1: HY8y2aUxH2zl7Z8uEFKyCs4_DZE.roa (hash: pgB+L4R4Q18tDhMP8CyO3Aai8GigL3mxjQcI8MoXdXI=)
2: cKZJLTzeqYRhpsddyswZAoLcpsE.roa (hash: HgvgjBFasTjpcgFlyoecgapQ0MDuq029z3qYeWnH2Zk=)
3: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: CSpCkFzpZ5yOJAey8hr5OKKubhngq9vjG6FGvxc8z9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:e3:2d:c9:52:97:d4:18:e7:ea:fc:ac:1e:77:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Apr 16 22:02:10 2026 GMT
Not After : Apr 17 22:02:10 2026 GMT
Subject: CN=f93221b6c5562658d39845e7e15d346f0119662e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:58:c7:91:2e:8a:c6:bf:92:3b:49:89:7c:41:
cd:e6:d7:f5:d3:40:ce:54:a4:74:a4:8e:dc:9a:93:
58:b9:4b:fd:b9:ac:30:b1:73:e7:09:e8:e5:ae:a2:
1b:d5:cd:4d:25:7f:95:59:38:20:1c:69:ef:73:77:
2f:05:24:f6:fd:e1:9b:f5:dc:64:ff:18:7d:ab:63:
ca:d9:63:e6:9a:a9:e8:2e:4e:b5:44:d2:ca:f1:46:
10:72:1a:32:a0:49:7b:fc:45:15:28:57:14:a3:93:
a5:6e:2d:84:da:69:dd:3f:b6:bd:4c:99:c6:b0:04:
59:5d:56:6b:e2:fe:20:d5:c2:df:72:4a:68:36:b1:
5c:66:55:82:bb:91:58:c6:c9:fe:71:e7:a8:f9:39:
8d:46:65:a8:cb:b4:d4:c9:f7:63:56:a8:8e:e5:23:
ad:d1:5a:73:3b:c9:b5:9a:5e:58:e6:e6:cb:b9:5c:
32:cf:8e:50:c3:79:b1:72:26:06:97:be:b5:fb:0a:
c9:11:d0:4f:a3:c9:d2:91:26:18:33:b1:67:3e:9a:
f5:0e:22:97:30:45:74:27:c9:74:81:d8:8b:75:82:
e2:27:c3:fa:b9:96:20:1a:f4:04:be:61:75:80:86:
66:0d:f3:f0:47:b8:6e:f9:cb:aa:ca:f2:5f:9a:df:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:32:21:B6:C5:56:26:58:D3:98:45:E7:E1:5D:34:6F:01:19:66:2E
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3e:9e:b0:e6:a1:73:8f:5b:2f:12:19:bb:a0:49:d0:37:a5:
38:6e:90:cb:35:06:57:f0:3b:ea:d8:b3:7a:09:71:9e:39:3e:
1c:32:35:8c:6d:80:36:c5:62:1e:7b:1a:39:87:0c:ae:3b:3a:
ef:2b:78:be:cc:29:f5:e8:ef:0f:78:33:9a:5e:9e:a2:11:ad:
f3:b9:e0:18:c2:6a:55:ab:74:13:14:ad:95:3d:22:6e:b2:90:
84:be:0b:b5:60:42:48:9f:7d:23:26:89:7f:6a:56:80:07:f9:
b3:e6:aa:d0:35:74:0f:cd:9c:81:96:cf:42:07:4c:58:99:7d:
7b:91:46:95:82:e4:b9:74:c8:10:48:bc:df:7c:7d:0f:2d:eb:
6d:c3:a4:94:87:d5:e3:fc:9b:46:3d:c8:9d:bf:38:46:ee:e2:
e1:96:c3:ed:af:39:af:90:56:fd:d9:27:d0:5e:2f:3c:28:8a:
a9:e4:30:4c:f1:31:47:ed:22:bb:fb:b7:6f:6a:01:a5:f7:19:
2b:4d:39:b5:7e:c2:3f:1b:0b:ad:c7:8a:f0:8a:68:69:55:4b:
b8:b1:65:c7:32:1e:71:6e:c5:e0:ab:b9:89:9d:5e:d0:1c:1c:
41:f2:35:d3:90:13:1c:5b:8f:c1:fc:4b:3d:42:a0:46:12:e3:
d9:f8:ff:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:36 2026 by rpki-client