Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: jZxkpbUYHIdjF3eJuJUjOdeQ+XVahPMbFiXKfQi74B4=
Subject key identifier: 43:22:FB:48:71:A7:05:FE:87:4C:D4:51:29:39:59:0D:06:5B:C4:3B
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 019D988647BAA11B76BB5C622DF8E6B21746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 18C7
Signing time: Thu 16 Apr 2026 23:00:30 +0000
Manifest this update: Thu 16 Apr 2026 23:00:30 +0000
Manifest next update: Fri 17 Apr 2026 23:00:30 +0000
Files and hashes: 1: D4uyY53Lmy1XuEBR8gb-mU5orsY.roa (hash: 8oSSSK/7hQ8ikVIjak5cGWlYgkzTSsHj01P8F5aOk0c=)
2: _-wZGwfKC4JuWvajehhHWsCMKV0.roa (hash: d+1R/IWP3rQJYixIA4F2RI4IuR3jIDKC1rUEN0I2u8s=)
3: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: FOAMS0b1Wkf294iJD7qx4BPL0ExeG3r1ioAuBY5uzQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:47:ba:a1:1b:76:bb:5c:62:2d:f8:e6:b2:17:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Apr 16 23:00:30 2026 GMT
Not After : Apr 17 23:00:30 2026 GMT
Subject: CN=4322fb4871a705fe874cd4512939590d065bc43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:79:5c:05:21:40:f8:b7:a7:ac:e0:d4:87:
e7:a8:85:e9:b8:e6:7f:4d:7c:5c:a6:0f:a8:a8:14:
70:50:7c:88:e0:c5:0e:7a:e7:c9:dc:5d:85:b6:a3:
e8:7d:7d:83:c7:a5:0e:de:ab:82:4c:f3:7d:cb:5f:
4a:2d:4c:07:6f:7f:12:06:f5:f9:50:50:ab:a6:f8:
42:fe:c0:71:d6:e8:6e:c1:25:49:7a:5a:ec:86:1c:
66:3c:09:ae:5c:bf:5a:97:0c:3e:d2:a5:e3:ef:09:
7d:dd:5b:8e:ac:ae:92:75:67:c6:f8:e2:a0:41:30:
29:9f:2a:c1:26:bb:ce:3f:5f:6b:ac:ce:61:ec:c2:
25:c6:20:c6:86:9f:61:c9:b9:a9:4f:6c:77:ab:4d:
05:4c:4d:df:b6:3b:6c:d9:61:5e:e8:f4:15:3e:e8:
70:3d:9c:1e:db:99:73:76:4e:10:8a:ce:40:96:df:
12:d9:62:80:60:bc:61:91:e5:47:22:4a:66:ff:02:
9d:78:0f:37:e1:0f:de:78:f3:de:e0:5e:77:8b:63:
64:d1:f1:2f:9b:e4:a9:2b:43:2d:8d:6e:53:ea:e6:
72:8b:1a:b6:2e:87:c0:ee:eb:48:25:90:b4:50:e0:
29:a9:30:a6:51:41:f1:87:ae:64:3c:86:f3:ca:86:
e1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:22:FB:48:71:A7:05:FE:87:4C:D4:51:29:39:59:0D:06:5B:C4:3B
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1f:49:54:3b:05:7e:78:a1:67:b3:4d:45:54:96:b8:c1:86:
8f:55:75:14:1f:c6:40:8f:61:20:42:b8:18:b3:7c:8a:29:f3:
10:98:7c:f3:ce:33:c3:c5:c4:5b:eb:67:cd:20:17:42:f0:b6:
e5:8a:3d:0d:c5:63:f5:cd:72:1b:c7:cd:8b:84:17:11:32:07:
2e:14:79:c0:bc:cf:a5:c4:be:66:e7:4b:ae:57:8b:a5:42:50:
a9:d4:34:74:c0:3c:d3:f3:80:73:56:1e:0a:5f:3e:34:ac:08:
62:8d:40:26:68:5d:6c:75:12:89:b4:61:eb:94:3f:25:e1:87:
cf:e3:b9:b6:29:78:c8:7b:1b:cf:ff:f5:c1:42:77:01:2b:01:
5a:5d:6c:bc:a3:5e:d5:c9:54:37:cc:4a:09:42:69:b0:36:a0:
98:5c:13:69:07:8e:07:31:f5:94:72:28:26:72:0f:dc:db:c0:
2b:f2:d2:82:7f:91:1e:ee:5d:08:81:d2:c5:b1:b3:f2:83:79:
a2:c0:d3:ee:df:fb:e1:d5:5d:54:de:4c:7a:1c:b6:fe:3a:de:
77:dc:40:22:39:6c:9c:ad:91:b9:0e:c1:ba:96:76:1a:c9:5b:
82:f7:3e:ed:b6:f5:fb:92:a6:d0:c2:f2:6a:34:75:23:fa:53:
87:c0:d7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:04:06 2026 by rpki-client