Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
File: zGQrH13XOvfTrQVIfghgAd_5suc.mft (raw, json)
Hash identifier: gu1cmrSGJFmYNYrkZLl0nOy9uDMj3eMFSsERbxxTFt4=
Subject key identifier: 9B:9D:C7:A6:C0:C2:44:29:47:FA:41:9D:E3:2F:B1:3B:74:E0:3C:DA
Authority key identifier: CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
Certificate issuer: /CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Certificate serial: 019DA3E5CDA61BF8B2C9112727B3B3645EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
Manifest number: 068D
Signing time: Sun 19 Apr 2026 04:00:39 +0000
Manifest this update: Sun 19 Apr 2026 04:00:39 +0000
Manifest next update: Mon 20 Apr 2026 04:00:39 +0000
Files and hashes: 1: JbQaL2RBjoHVTuti7UfCcrYJr_A.roa (hash: iaksrkAEfaFgIKF/4+Tz3YZIiRYiBmDSf/pDYQdploo=)
2: zGQrH13XOvfTrQVIfghgAd_5suc.crl (hash: 48bX8TY073tNalJdLVCsNcUy8G0SmleRLpc+1qjWJK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:cd:a6:1b:f8:b2:c9:11:27:27:b3:b3:64:5e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Validity
Not Before: Apr 19 04:00:39 2026 GMT
Not After : Apr 20 04:00:39 2026 GMT
Subject: CN=9b9dc7a6c0c2442947fa419de32fb13b74e03cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:a4:7e:57:2b:03:39:c2:a2:89:be:d4:31:
b8:64:4b:85:7a:d5:ff:11:43:13:4f:cd:4a:5e:5f:
64:73:b4:3d:01:6e:d8:8b:e4:d7:ab:d8:71:d0:2b:
f5:35:79:ae:95:42:f9:a7:4e:39:28:3a:cb:ed:02:
74:ce:aa:d3:9c:5a:60:13:26:c2:e5:70:6a:80:29:
bf:c0:68:63:2d:40:d8:29:34:b0:f1:31:08:4e:72:
fd:30:ae:1d:5b:10:5a:d0:b2:e4:27:01:a3:fa:e8:
db:96:e7:f7:f2:57:77:48:b2:29:d6:58:0f:9e:d4:
db:61:be:ba:1b:bb:fd:16:43:01:25:03:91:85:f5:
c4:d6:e3:b0:7b:24:6d:6b:af:88:e2:6d:1d:48:8e:
6f:86:09:72:c6:6f:fa:93:66:a3:17:42:40:83:37:
7e:36:fc:2a:bf:58:dd:6c:df:68:9a:91:8d:1f:5e:
07:04:5a:cc:83:a6:8e:9a:57:a2:8b:f5:b8:58:e4:
6b:2d:18:08:02:f8:43:2b:e8:46:ae:f9:d9:f7:c8:
ab:a9:53:71:04:a0:13:8d:33:25:b4:10:ef:07:45:
37:4a:d6:44:06:86:90:4f:17:39:25:56:8c:43:a3:
fa:62:05:fd:de:ea:7a:86:9e:a4:4e:e9:56:a0:4d:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9D:C7:A6:C0:C2:44:29:47:FA:41:9D:E3:2F:B1:3B:74:E0:3C:DA
X509v3 Authority Key Identifier:
keyid:CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:32:01:bc:cc:40:33:91:ad:27:dd:b9:14:e9:29:d9:ee:ba:
5a:0d:35:f9:7a:29:40:e5:b9:ea:80:57:c6:03:6f:80:ee:f5:
22:65:3d:9e:1f:ba:58:78:c4:a9:cf:ba:31:a0:ab:26:8f:9a:
96:71:d4:3e:00:b0:32:72:dc:a6:fd:36:52:91:9b:e1:7d:09:
06:d3:7f:69:e3:8b:8e:c8:c6:b6:8f:cf:cb:fe:ad:a9:55:f3:
77:6b:1d:b1:96:03:dc:6a:16:55:29:cc:a5:6f:9c:70:56:ca:
ce:37:9f:8c:82:4e:bf:68:17:10:5c:28:08:e9:a2:61:ab:80:
2d:6b:37:f8:bb:c2:77:0d:26:29:62:82:54:bb:00:fd:5a:08:
7e:65:c1:e0:31:f5:77:0a:5d:46:c4:f5:c6:e2:a6:5a:cd:37:
4c:31:88:3c:95:37:61:6a:5b:36:a7:4a:a3:a0:62:4b:15:2d:
c5:63:25:19:8b:d8:39:cf:19:28:65:aa:29:36:1e:de:ab:9b:
f6:47:7d:2a:f5:f1:ef:45:bf:31:cc:3d:de:8b:12:fe:35:c5:
4a:fd:3b:70:5e:89:33:35:30:53:cb:2d:60:5a:9f:40:e4:e9:
50:8b:89:a0:c6:91:b9:d9:45:8f:ee:77:b4:34:3b:23:68:d4:
b7:91:44:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:04 2026 by rpki-client