Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier: saLSvRnOBYfCN+uo4TGOxSrNEXJ3PZpxJnskoG4NGCs=
Subject key identifier: 6D:8A:79:1A:97:B9:22:70:A7:09:60:C9:42:CC:64:27:1B:37:75:85
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial: 019D9B880649C29BD165DDC607E94A67744C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 13:01:16 +0000
Manifest this update: Fri 17 Apr 2026 13:01:16 +0000
Manifest next update: Sat 18 Apr 2026 13:01:16 +0000
Files and hashes: 1: vZ8MxOiXegtHuoU9azc_92OWfV4.roa (hash: iwh0Pl3Hne1gOnuU6enDkJTWZ+3nLBGQ17Ta8mwUfwg=)
2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: zJoxgPRxL9pH2pAKKecOi5kUpuuW22xaOt/1zwrxQic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:06:49:c2:9b:d1:65:dd:c6:07:e9:4a:67:74:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Validity
Not Before: Apr 17 13:01:16 2026 GMT
Not After : Apr 18 13:01:16 2026 GMT
Subject: CN=6d8a791a97b92270a70960c942cc64271b377585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:cc:37:08:fe:76:f6:85:a9:20:4f:ad:b5:
27:d4:86:75:26:4b:f7:84:9e:1a:d3:ad:c0:e1:6d:
3d:9f:f7:7b:12:ed:77:5f:a7:27:fe:59:d6:d6:28:
cb:22:cd:f2:60:e7:89:1b:7d:2f:1a:87:08:45:a6:
e5:bc:9c:2b:f9:60:8a:25:fc:9c:9c:4c:b4:35:ae:
0b:34:b1:18:43:ee:3e:9a:73:6e:12:11:ec:1f:62:
a5:d9:d4:1a:65:38:85:22:74:79:80:6f:0a:63:50:
3e:8c:3d:68:ec:2e:35:34:eb:e3:8a:f9:ab:f5:cb:
5d:34:50:85:95:75:3e:96:df:b3:67:ad:5f:27:1c:
bd:b9:2b:27:31:3e:da:30:36:87:8f:92:e8:ed:41:
59:d0:80:bb:33:b2:7d:d3:45:c1:34:d4:9b:8a:ff:
3d:c6:ad:c9:a5:3f:3d:6f:35:84:e6:26:ea:b1:db:
50:98:f5:f5:24:7c:08:e8:09:1a:3b:77:a9:8c:5f:
d3:00:2c:74:5f:30:65:7f:87:9a:a1:88:6f:d2:0f:
09:a2:08:e3:55:20:03:2a:19:21:eb:b2:69:e8:8d:
ff:ee:ae:af:d9:69:58:f3:62:1b:f0:72:4a:85:75:
0d:4d:d4:72:c1:be:3c:4b:bd:a7:a2:63:c2:d5:57:
60:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8A:79:1A:97:B9:22:70:A7:09:60:C9:42:CC:64:27:1B:37:75:85
X509v3 Authority Key Identifier:
keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:58:16:3b:8d:8c:27:9c:e7:8d:cd:ad:99:ec:3a:c3:63:e0:
6c:1d:a3:4c:ee:ab:72:07:5b:15:b7:7c:15:18:ac:3c:20:50:
d1:83:76:3e:ac:01:0a:de:88:d4:9f:d7:79:f8:70:85:0f:46:
74:73:1e:56:96:d9:80:61:a2:02:5f:77:d0:76:69:61:fb:39:
d7:aa:cb:82:48:7b:9c:db:fc:44:5e:d4:b2:94:f6:ba:e4:b3:
5d:18:dd:cc:73:fc:a0:a9:d2:31:ef:99:64:17:3d:ed:62:f6:
64:4f:36:b1:d7:87:b8:00:ae:90:a9:a9:43:f0:ba:c2:b3:8f:
a9:13:b3:a6:d7:13:28:9a:78:7f:01:a1:8f:8f:f5:69:c0:ab:
93:1c:49:e9:18:ae:5e:5c:5c:3c:e7:f0:47:70:82:d6:39:15:
a3:80:22:6d:cc:9d:4d:b0:6e:bf:49:26:22:05:e4:84:43:7c:
81:c1:ff:d2:17:75:f3:40:ce:9d:a0:87:9b:66:5e:b1:a9:89:
00:7d:5f:ee:17:6f:eb:e3:2e:47:70:14:b4:f6:22:c2:2d:5b:
dd:8d:c1:34:c8:ee:df:b3:12:c2:dd:9d:73:68:90:c0:e1:50:
0c:da:81:9f:96:0f:62:b0:1d:17:23:30:5c:de:09:04:20:67:
27:a5:cf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:12:56 2026 by rpki-client