Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json)
Hash identifier: IJevteXKuxoxAUAQ9cbN/JE5bfesDohrI96Zrnoq3dY=
Subject key identifier: 7B:F4:DA:FD:A5:13:E0:C4:73:C2:10:93:4C:E8:C4:1D:FB:0C:E5:F8
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 019D992B2C98EDBECB78863ABC188DD36A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:36 +0000
Manifest this update: Fri 17 Apr 2026 02:00:36 +0000
Manifest next update: Sat 18 Apr 2026 02:00:36 +0000
Files and hashes: 1: 4CypVNXRlUvDBje7mxt1CfmoovM.roa (hash: mFvuzRC/7svGOuSJoxhgmd+xnQF90mcigroStvs77GM=)
2: Jac1EeUsCOU9PNKJghMRhALb5vg.roa (hash: VrBYKI+eA8ElszFTROTPF/fpPXRNVBQ9W9hfTJtea1Q=)
3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: Deh4FEsAAihc/1OhJNXYEDTt2/uOXCg2XosAefuzXHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:2c:98:ed:be:cb:78:86:3a:bc:18:8d:d3:6a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Apr 17 02:00:36 2026 GMT
Not After : Apr 18 02:00:36 2026 GMT
Subject: CN=7bf4dafda513e0c473c210934ce8c41dfb0ce5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:97:b6:a0:33:a8:bd:bc:e3:35:ad:cf:e7:3e:
f1:f0:b8:03:f5:cd:37:6a:ba:0c:87:01:dc:2c:0a:
b5:b8:6f:a5:82:e6:0f:d4:8f:54:5d:37:41:e8:29:
3a:e7:ac:60:b5:5f:cd:93:01:8d:55:c5:a4:8d:22:
2b:e2:44:07:2d:3f:57:7d:87:e7:a6:02:56:fd:ee:
98:90:4f:90:b6:9b:16:9b:a8:0c:f8:25:c6:1b:1e:
bf:9e:2c:60:17:a8:a7:b8:bd:04:10:b3:df:e7:1a:
f4:69:86:f8:11:e7:6c:ae:f8:23:95:b4:cd:da:4b:
d8:30:11:f2:e7:6f:48:22:ea:b7:89:9d:b3:b2:a5:
78:29:80:14:81:4a:94:69:2f:5c:ac:16:69:bf:f5:
b9:d7:45:2a:a4:aa:9b:49:3e:81:f8:af:8f:20:c2:
d5:90:36:bf:dc:7a:8d:9b:ca:55:ca:ab:bf:d6:e6:
58:87:b4:5e:5c:f7:08:c6:22:8c:e7:dd:3d:a2:31:
70:de:3d:80:80:d7:6c:0d:44:46:4c:74:58:bd:3b:
ed:a8:34:ad:ec:58:72:89:71:52:26:7a:b9:b5:82:
d1:53:0b:ca:d9:7b:0f:41:f3:fd:35:62:f6:00:18:
a0:da:9c:f3:61:42:4a:0a:22:48:70:69:b1:cf:09:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F4:DA:FD:A5:13:E0:C4:73:C2:10:93:4C:E8:C4:1D:FB:0C:E5:F8
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:96:f3:38:c3:e8:84:36:aa:e6:ff:ec:3f:cd:a3:64:20:8b:
f5:0e:7c:5a:29:7c:b0:36:71:e2:26:12:4e:47:c4:81:94:99:
47:5f:21:f8:f9:e1:d0:4b:b6:86:49:0e:e2:15:e4:f6:8c:b1:
e3:76:f8:99:59:08:4b:b5:92:ee:50:99:85:32:b3:08:8f:e2:
ff:cc:b3:86:e7:8c:da:c5:97:c9:02:c7:5e:81:36:de:ce:6f:
ec:d0:31:ef:7a:98:a2:8c:79:fa:fb:28:ae:c0:94:fa:e4:12:
5e:3f:f5:6e:31:15:1e:d6:df:98:c4:f0:6a:02:09:e4:3e:08:
99:ae:4f:4c:07:28:0e:24:8d:5d:10:a1:98:3c:02:a3:90:a6:
dc:87:43:e3:5d:ab:51:e6:39:6d:b6:fd:15:a2:21:0f:0f:86:
67:4a:fc:be:22:2b:a4:b1:99:fe:bf:aa:ef:c8:17:92:b9:17:
55:e9:0d:9d:6d:ad:81:9a:7c:38:62:0c:c8:0a:f5:58:c2:20:
28:1d:21:cc:18:d5:39:38:d3:05:14:47:67:f0:65:3e:f7:37:
5f:8f:53:9e:5e:a4:7e:a0:8e:60:18:fe:7b:ee:2d:3a:b8:9c:
6e:d6:99:8c:f1:a3:cb:0a:30:60:b4:14:a7:ba:df:02:8b:a2:
8a:a5:c0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:03:00 2026 by rpki-client