Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
File: Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft (raw, json)
Hash identifier: dcj2IZCv+rUD7RJ4XU9VetDM+V+WcIVkuAbOYBrI+Ok=
Subject key identifier: EC:AC:91:85:39:51:E2:CF:24:4D:04:36:05:1D:02:67:48:64:98:23
Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Certificate issuer: /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Certificate serial: 019D9C2D35D5B91DF461619B98B654D22605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 16:01:41 +0000
Manifest this update: Fri 17 Apr 2026 16:01:41 +0000
Manifest next update: Sat 18 Apr 2026 16:01:41 +0000
Files and hashes: 1: 1xMZz9pSGq85vXf20FbCjYLr-kg.roa (hash: GLQz1TL8Rtkw2tIKftRi3ZiQjePeddOKBNexMBK6YVc=)
2: HEzbpkGlixMJMAH4xLJPiJ7HjDw.roa (hash: TdJqBEj+bob33O1NnFNh0HeCwlgemJTrTUX71e8Q5Ig=)
3: Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl (hash: ehMTM3BfiPqTu9TWqpfkwA2yxHdIxCx5Dg7xuaXJVGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:35:d5:b9:1d:f4:61:61:9b:98:b6:54:d2:26:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Validity
Not Before: Apr 17 16:01:41 2026 GMT
Not After : Apr 18 16:01:41 2026 GMT
Subject: CN=ecac91853951e2cf244d0436051d026748649823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:7c:05:48:ea:88:d4:64:66:06:3c:de:90:
f9:6c:b7:af:f0:f2:fa:c9:79:49:54:6e:30:b4:ee:
36:25:b8:e6:f3:67:4c:7c:cd:0f:0c:e6:c3:2e:c7:
12:1f:30:a3:85:b7:d0:8c:a1:fb:92:e3:9c:09:b3:
b0:23:e2:9d:1e:16:f6:b8:a4:36:c3:f0:80:ff:1b:
e5:66:7f:a6:17:55:4a:9c:0e:8b:24:22:58:5e:f9:
4d:2f:89:7a:6d:83:e8:d6:40:8b:4f:d7:70:6a:ce:
97:e3:23:12:a7:9e:51:f4:9d:62:02:42:da:1c:b2:
3d:8d:01:71:26:0c:ae:1a:7e:64:1a:40:98:f8:75:
ce:61:d1:e2:ca:56:49:2a:c2:63:ec:f3:c1:7f:1a:
75:a7:02:dc:99:86:c1:44:2e:ac:1a:56:6e:98:3d:
1f:4b:f9:09:33:9c:9a:3d:ea:67:84:7a:b2:ba:bf:
35:f8:51:f5:1f:c9:4f:c2:a0:8c:3e:62:23:d3:29:
96:31:ac:00:ed:62:7c:cb:14:b5:44:2e:5d:48:19:
16:a7:4a:2c:f1:57:dd:59:37:90:99:43:11:ef:1c:
d5:23:ff:12:20:b4:00:03:a4:1f:6d:c7:a6:ad:2d:
ce:35:4b:70:e8:fd:5e:e1:ec:93:af:c7:b2:f3:f4:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AC:91:85:39:51:E2:CF:24:4D:04:36:05:1D:02:67:48:64:98:23
X509v3 Authority Key Identifier:
keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:87:8e:e8:41:19:a7:49:44:d8:44:2f:5f:90:39:4a:e0:a3:
46:c3:4d:a6:fa:3c:df:27:ff:91:ff:26:97:62:40:84:e8:27:
20:95:66:ed:c0:4d:9e:12:54:be:f5:d8:40:5f:e6:01:d4:2e:
4e:3e:f0:39:f5:4c:8d:c1:c7:3a:0b:db:1f:6f:2b:a5:69:53:
7e:39:76:f3:91:f1:1b:d7:85:3a:a2:93:6b:c5:1b:35:b8:8f:
22:47:7c:ba:1e:39:26:ab:17:1b:36:de:93:f2:2e:95:02:85:
5b:2a:96:b5:43:be:2f:e4:b2:f4:0e:00:31:52:95:64:2e:51:
0e:0e:0a:2b:79:96:e1:c7:bd:54:5c:ec:37:60:eb:ef:c5:75:
1b:65:5f:13:98:b7:6b:cd:6e:e1:dc:55:58:22:3a:e9:bb:40:
38:0b:90:a8:f2:ab:7e:d6:a7:b3:f4:78:3c:15:30:38:af:68:
78:0a:bb:7b:1f:d3:19:82:6d:c5:4c:f0:1e:80:a6:42:89:fe:
cc:c5:c6:a1:ea:5f:f6:14:8d:a9:b6:ae:32:75:c5:a0:04:35:
72:a0:a7:ea:ba:ff:b7:2d:d9:ad:0e:ea:b9:4a:d2:2b:08:cf:
2d:0b:81:bf:d4:e2:3b:30:8d:9c:dc:9b:ea:e2:5c:b8:5d:b3:
9b:6c:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:05:23 2026 by rpki-client