Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier: YCuihbFkG0fVhSym/adqVbZxuBau5L48BZoJlmjDaJ4=
Subject key identifier: D1:E8:FD:42:18:E1:30:B0:42:BE:58:EE:02:F3:FE:91:36:DA:D1:1A
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 019D98F4B398A2F41857F300788AA44FEFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 01:01:06 +0000
Manifest this update: Fri 17 Apr 2026 01:01:06 +0000
Manifest next update: Sat 18 Apr 2026 01:01:06 +0000
Files and hashes: 1: 2Zg_-dpcqfmzuDStyGzldA-iv1s.roa (hash: rO88dw5SEIUE2fPQKc2On6kad3jKSdwxG+JqeHFebNY=)
2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: GvV/bOyFsMETFeKS8eHWvS/mewj28xuNNZjqDwVWQnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:b3:98:a2:f4:18:57:f3:00:78:8a:a4:4f:ef:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Apr 17 01:01:06 2026 GMT
Not After : Apr 18 01:01:06 2026 GMT
Subject: CN=d1e8fd4218e130b042be58ee02f3fe9136dad11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:e4:97:13:f7:ad:06:04:c9:a5:26:0b:47:
af:48:35:2c:e2:2a:1e:b3:98:ef:82:48:a4:24:db:
ad:02:e5:0a:01:26:48:3d:71:c8:2e:6b:33:9d:59:
3a:9e:28:29:93:33:ba:1b:3d:fc:00:e1:8a:bf:01:
47:4a:ec:4a:aa:1b:3b:71:fe:17:cf:50:4b:af:1d:
12:d7:9f:93:3a:d5:a9:6b:16:5e:b4:2a:81:c0:a6:
e6:a2:85:03:bf:59:b8:58:ba:f3:75:86:58:c0:7d:
45:29:12:c5:2b:be:c9:c4:52:a7:f4:bd:8a:d0:1e:
47:c8:48:44:b1:4f:ce:31:62:12:00:ab:f2:83:5e:
08:70:d2:a6:11:77:8e:1c:d8:96:e3:8e:8d:67:1a:
00:98:fb:8a:48:c0:6f:dd:f8:4f:ad:1d:81:e8:85:
2b:c1:53:d2:12:7d:ee:d9:1c:ab:08:d9:ae:4e:66:
0b:9c:7a:b4:70:47:3d:0d:58:36:bb:17:51:40:26:
a8:15:3b:6c:ef:37:09:d3:03:e4:0c:52:a3:c5:86:
c8:06:fc:71:6b:5a:e6:52:57:d8:0c:62:19:05:91:
b4:9e:8c:62:71:7d:67:7e:d1:6a:10:33:d9:e1:af:
31:1a:23:94:39:38:ed:82:bc:02:6e:cd:77:2b:39:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E8:FD:42:18:E1:30:B0:42:BE:58:EE:02:F3:FE:91:36:DA:D1:1A
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:94:4f:c1:25:b9:ca:da:05:1d:47:bd:54:91:42:14:1e:ee:
41:ec:ed:e5:87:8c:4e:ca:c8:e9:27:20:d8:78:6b:54:05:73:
78:a1:39:e3:be:89:87:a9:3f:ac:9e:97:29:81:09:92:f7:f2:
66:db:9e:01:86:56:2d:a5:71:7c:2b:cf:0e:15:3a:83:f1:83:
97:6f:cb:32:ee:51:56:cc:90:e7:e8:08:7a:d8:1e:d3:9d:70:
11:0c:23:f1:5b:d8:00:fd:ba:6a:66:2a:ce:e2:22:1c:ab:25:
39:5f:bf:e6:0c:05:fa:a4:83:0d:1d:56:48:af:20:ca:85:14:
8e:32:a0:ea:76:ef:95:66:48:82:d4:09:90:06:bd:4b:6e:39:
ac:e0:3b:84:0e:13:7d:19:ac:44:52:23:b8:fc:25:0e:81:bd:
ee:5c:6d:36:80:22:27:ec:9e:60:4c:6f:96:7a:52:4f:06:e5:
ac:46:52:ec:57:62:51:82:d3:8d:90:83:98:ba:7d:0b:a7:31:
6c:d0:ef:c9:c9:6e:61:0c:61:a9:db:22:83:ea:42:35:13:a4:
16:61:d7:9f:a5:e9:b9:f8:dd:0f:ee:64:e4:91:30:b8:c5:8b:
80:3b:21:d0:9a:d1:71:cf:20:cd:46:72:9d:68:ee:a1:44:48:
19:61:60:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:10 2026 by rpki-client