Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft
File: zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft (raw, json)
Hash identifier: y0npgTqgC0I0YVdP69H3FfRopBMKghOQMUF4a+Aj8O4=
Subject key identifier: 40:65:F0:76:42:1F:CB:91:EC:03:02:82:CA:8C:96:4A:2F:66:6D:9A
Authority key identifier: CC:E5:0C:AB:B6:F7:38:62:16:0E:F1:F9:F5:05:4F:49:0A:89:DF:F8
Certificate issuer: /CN=cce50cabb6f73862160ef1f9f5054f490a89dff8
Certificate serial: 019D9C632C609FAFEF8E5A9355D413BB8B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft
Manifest number: 0158
Signing time: Fri 17 Apr 2026 17:00:38 +0000
Manifest this update: Fri 17 Apr 2026 17:00:38 +0000
Manifest next update: Sat 18 Apr 2026 17:00:38 +0000
Files and hashes: 1: s7t_akC7zKi1bxuEfE-gecZOJkw.roa (hash: hOOmqhwtS/j3wjfpIaMddw7GnavqbISUHa+AEjysuQA=)
2: zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl (hash: +CySFz/edaT2yOTCeBXtAs1Nus+LYXhPQGcun2qQgEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:2c:60:9f:af:ef:8e:5a:93:55:d4:13:bb:8b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce50cabb6f73862160ef1f9f5054f490a89dff8
Validity
Not Before: Apr 17 17:00:38 2026 GMT
Not After : Apr 18 17:00:38 2026 GMT
Subject: CN=4065f076421fcb91ec030282ca8c964a2f666d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:03:08:a1:0f:04:f7:ed:83:25:69:8f:2f:
67:fc:ed:e3:ca:68:56:00:4b:44:58:0d:47:e1:7a:
c0:00:08:25:d1:ca:47:b8:2c:2d:45:71:56:4b:d6:
b6:3c:27:da:cb:2a:24:18:35:56:f4:43:d3:37:7a:
11:5e:88:7a:5f:4a:17:be:5e:eb:0c:51:6b:c1:0a:
5f:45:7d:c9:ab:f5:3b:d0:8b:b4:2b:a8:6c:4e:0e:
d3:7c:24:14:fe:1e:b1:13:0e:7d:ee:9e:a3:36:4a:
92:0e:bc:cf:d4:5b:09:67:3d:4b:27:3f:07:ac:3c:
0b:ca:34:20:69:2c:e1:67:69:0a:fb:66:2c:8a:f3:
03:b8:35:74:73:36:9c:7c:44:c6:c7:aa:13:46:37:
09:48:23:3e:9a:da:ad:8e:df:55:4c:f4:c1:8e:a9:
8a:71:51:36:70:2d:2d:6d:ec:47:dc:02:ae:66:77:
9a:a8:01:b6:58:8c:31:f7:b8:b2:51:18:7f:0b:88:
0e:27:b6:79:96:d8:65:18:53:fc:33:37:f1:d8:c7:
c2:f2:7f:52:cc:86:d8:d2:6c:32:a8:27:1b:b5:53:
6d:e2:34:97:f2:48:9a:b4:db:d7:07:de:37:de:9f:
f2:b7:1f:9d:4a:e5:e6:92:40:05:16:e2:7e:04:ba:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:65:F0:76:42:1F:CB:91:EC:03:02:82:CA:8C:96:4A:2F:66:6D:9A
X509v3 Authority Key Identifier:
keyid:CC:E5:0C:AB:B6:F7:38:62:16:0E:F1:F9:F5:05:4F:49:0A:89:DF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOUMq7b3OGIWDvH59QVPSQqJ3_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/837e64-c744-45d5-8ad8-e5240073909b/1/zOUMq7b3OGIWDvH59QVPSQqJ3_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dd:44:d8:d7:7a:2a:04:c2:0a:6b:71:13:5d:ce:b1:81:8e:
42:04:8b:ba:25:d8:94:c4:02:fc:5a:21:13:58:73:92:e9:ae:
dd:1d:8d:0d:ab:51:c9:77:a6:81:0a:6d:0a:ca:97:70:f6:03:
c7:16:df:a0:96:af:11:5e:00:04:8e:5f:49:21:a2:f0:dd:5d:
79:89:96:d0:36:75:57:25:8b:1f:a5:c6:1a:5c:7e:10:98:41:
4f:6b:8a:33:2b:48:b3:ce:a7:5c:2a:c2:cd:2d:a3:4a:d9:11:
42:a1:20:6b:06:e2:5d:eb:5e:af:6d:b1:f8:df:54:b3:bb:fa:
93:5b:41:e1:71:72:dc:55:c8:e1:85:db:91:4c:70:de:05:8f:
51:47:86:29:10:c9:1b:79:94:08:ae:6b:b2:93:c7:37:81:66:
b1:88:2c:e8:59:97:38:03:e1:48:7a:e3:fa:9f:8f:01:ff:33:
63:15:af:0f:5f:73:81:07:6b:85:29:ef:38:5c:82:c3:a0:58:
b6:c9:bb:38:b5:bd:d0:1c:56:95:b5:03:28:36:c9:28:6f:a1:
09:8c:07:14:22:ed:72:a9:6c:9f:11:f5:dc:63:6a:dc:0d:55:
3e:4b:cf:73:3a:a7:01:83:2b:cb:a4:99:ea:c5:05:17:7b:7c:
79:8b:7c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:14 2026 by rpki-client