Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
File: zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json)
Hash identifier: IOfsIR1hEJEEWk0SMnSCaFxe3VcNO2Pt8kKiN5TU1AQ=
Subject key identifier: 66:63:A1:D0:79:92:CB:19:36:83:36:2D:4E:F0:45:C9:10:51:EC:47
Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Certificate serial: 019DA41D0E35ED53EAB9D71D2F609E28E7FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 05:01:00 +0000
Manifest this update: Sun 19 Apr 2026 05:01:00 +0000
Manifest next update: Mon 20 Apr 2026 05:01:00 +0000
Files and hashes: 1: o7uX2sWUxD5f-QHIO7URESLWvKE.roa (hash: BBcxbvhwEbzfWJqG4lgqgeDWLcjr+9yx0XzssJhMKcc=)
2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: M8KiijT5Fu6IHGWbkqpdrFr8lJ71QKdeIvcCjKRADRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:0e:35:ed:53:ea:b9:d7:1d:2f:60:9e:28:e7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e
Validity
Not Before: Apr 19 05:01:00 2026 GMT
Not After : Apr 20 05:01:00 2026 GMT
Subject: CN=6663a1d07992cb193683362d4ef045c91051ec47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:ef:ad:cf:67:c0:3d:d3:fa:40:57:f8:71:
f5:18:94:2d:5c:c7:10:a8:f2:49:2c:65:6e:3e:8a:
e2:6b:4e:04:08:3a:30:37:44:f9:89:b9:7c:3d:85:
15:7f:79:84:e1:92:f9:f7:93:5d:d5:d0:fb:af:cf:
b1:4c:70:19:fd:1f:4f:1f:03:22:ea:8a:f9:b3:e9:
27:4d:60:2e:da:f8:22:bd:f0:80:25:df:e9:c4:65:
df:74:c8:36:94:38:4a:a5:5c:65:51:cb:bd:88:d2:
2b:4b:3e:f3:72:4f:0d:45:72:cc:9a:56:36:c6:91:
ef:af:bf:83:73:97:6d:15:8a:a3:47:28:95:ea:94:
6a:68:0c:37:72:e0:8b:7a:0c:83:1d:ca:d3:00:fd:
0f:77:42:1c:f7:e8:62:72:44:a0:cd:a7:4f:b4:d7:
2a:af:f8:df:65:97:9f:6c:a7:43:63:91:71:93:61:
84:48:8b:e5:30:9b:b1:ee:c3:7c:7b:4a:a7:d3:b8:
ce:0b:3c:db:cb:8c:73:d9:1a:ef:87:2e:a1:e7:86:
ed:82:ff:c1:de:14:98:12:c6:0e:43:93:46:5b:0b:
d5:f8:10:dc:ca:c5:1a:99:b2:cf:0c:2c:f9:f7:cc:
de:d9:75:a1:45:cb:32:9e:59:ed:86:ac:c6:36:0d:
47:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:63:A1:D0:79:92:CB:19:36:83:36:2D:4E:F0:45:C9:10:51:EC:47
X509v3 Authority Key Identifier:
keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0b:c6:0f:59:82:cd:50:db:51:7b:05:57:eb:e7:8f:f0:fa:
b2:00:b3:5f:38:62:b1:4a:c4:e0:4d:7d:3a:26:14:b5:2c:a5:
fc:f6:85:ab:e0:98:c1:cf:45:a6:0c:db:13:7c:65:d8:2d:92:
51:82:b1:72:38:17:f0:cb:fa:af:e9:f0:52:27:ec:fe:ad:d5:
35:5d:b3:a2:a9:e4:20:33:ba:67:12:ea:6a:42:b0:30:b1:8e:
e9:f5:36:04:c6:60:eb:42:9c:f3:da:4e:dc:79:f6:00:5d:3e:
b7:b7:d9:56:bf:22:20:ed:2f:f9:42:11:7f:94:a2:9c:73:8b:
64:fc:ab:77:27:0e:16:07:33:4d:6d:a8:6a:54:79:d3:d8:b6:
90:bb:37:46:2c:ea:ed:4d:54:8c:d6:94:15:8a:f7:99:20:4e:
14:39:d9:da:5b:06:78:fa:dc:79:f6:83:26:9b:5c:01:eb:86:
2f:ab:db:92:b6:e4:3e:b1:5d:72:da:4f:9a:0a:10:d6:fe:b5:
23:ed:29:05:44:da:ef:ec:f6:9c:53:a3:50:cc:73:97:d1:af:
c6:87:61:d0:5c:8f:0a:33:48:d9:c7:da:df:af:a1:3f:f6:ff:
f8:26:09:a8:04:b0:26:e8:4b:df:87:8f:80:95:32:fb:ac:27:
33:87:06:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:51 2026 by rpki-client