Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: ciBLTGKJUVusg5dcz0N/AED6TQ6JtviK9h92yofnRzs=
Subject key identifier: 2B:3D:23:54:4D:E6:BA:B0:45:C7:D6:AE:BC:8F:51:29:4C:28:36:C8
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 019D9AAB9CC88CD0E132055BACC88C04C55C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 09:00:31 +0000
Manifest this update: Fri 17 Apr 2026 09:00:31 +0000
Manifest next update: Sat 18 Apr 2026 09:00:31 +0000
Files and hashes: 1: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (hash: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY=)
2: N5kOhaXtNzCeBcbrMh56hDQ4o-U.roa (hash: Ry7/KfE6gcp/8mUaVPE02UAFkpNMITvazXOcwXAUcVo=)
3: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: PEy+dLVMiwzOMK/9/NymfvahMv0EOeHOLtUDyeLuIZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:9c:c8:8c:d0:e1:32:05:5b:ac:c8:8c:04:c5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Apr 17 09:00:31 2026 GMT
Not After : Apr 18 09:00:31 2026 GMT
Subject: CN=2b3d23544de6bab045c7d6aebc8f51294c2836c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:25:76:3c:8d:a3:00:cc:6d:66:37:b7:17:
36:4d:38:ef:09:85:b2:a4:0b:45:dd:e2:90:60:93:
ea:20:b9:83:d9:a6:8e:d4:4b:aa:88:2e:5d:f3:7c:
67:4d:fe:13:c2:0d:1c:ca:99:5e:1e:08:72:2c:9c:
bd:27:3b:26:5b:62:76:55:71:f9:57:86:98:a2:83:
86:53:c6:15:ea:fe:df:c3:1f:f4:d6:94:76:22:ff:
56:2b:84:4b:63:bb:d4:f3:83:b3:71:a1:e1:f6:67:
90:14:33:45:53:d6:8e:e0:22:d8:9b:e8:e2:1b:44:
00:07:09:d6:74:6e:dd:49:f7:78:6c:b3:92:5e:ff:
bf:fa:a4:a7:e2:c3:2a:b7:25:16:45:75:8b:59:07:
26:20:75:b6:6c:31:27:81:bf:70:04:4d:7a:76:d3:
92:fa:f5:cd:b2:f3:1c:ff:6e:ff:f5:59:8a:2d:27:
18:89:05:51:f9:e1:e6:c9:3d:3b:c8:30:d4:f0:71:
89:71:d7:42:80:b5:54:87:ed:42:c5:10:7c:e3:82:
66:48:df:a8:b3:b0:8a:82:fd:e6:5f:71:ea:f1:fc:
f2:75:e4:8a:4b:ef:2e:3d:94:88:a3:cb:75:14:24:
12:fc:62:94:48:99:d9:42:c2:1a:78:00:12:16:f7:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3D:23:54:4D:E6:BA:B0:45:C7:D6:AE:BC:8F:51:29:4C:28:36:C8
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f6:0d:d4:ca:a8:d7:58:44:26:31:73:3f:8e:67:62:a2:d0:
bd:ab:e1:c1:8e:d2:c9:b5:7c:d7:39:c9:dc:0f:88:31:ea:1f:
14:9f:98:d9:4a:6c:72:44:9c:8b:17:04:e9:49:db:1f:f2:27:
c3:46:5b:00:56:88:bc:12:f5:a0:e1:67:d1:f9:ef:a3:0d:fc:
6c:03:d0:31:5b:32:dc:52:b8:d0:2f:aa:04:b2:84:68:44:b0:
36:e0:1c:5e:a7:e2:77:7c:5c:50:ef:cb:49:36:a4:86:50:f7:
ed:6b:ea:a5:6a:ff:a4:6f:02:61:f9:1e:e3:fa:b3:b1:65:db:
72:a9:7a:32:87:7d:58:82:fa:f0:50:2b:34:1b:39:ed:4b:6c:
14:7a:3c:0f:aa:c1:b7:f2:31:5d:20:37:47:1b:6e:1b:8d:97:
12:09:44:10:12:bc:4b:06:22:92:3e:9e:59:0c:a3:31:94:71:
a3:8b:da:ad:16:3d:24:3f:69:8a:07:02:d4:82:b5:4d:51:54:
dd:08:71:4f:c6:bd:f0:2e:5a:9b:bb:c6:21:b4:4b:84:d1:1d:
8d:f7:b5:3e:0c:95:43:97:f2:c6:56:23:dc:97:6c:f3:50:c2:
6b:5a:59:af:b7:a2:1d:8d:f5:8b:a5:54:ab:d2:55:e9:e0:df:
29:f4:1f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:51 2026 by rpki-client