Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
File: ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft (raw, json)
Hash identifier: FMdj6AyN7UOlvPMWrcOUZY6R2QmN16+XrGrwzgiMd/s=
Subject key identifier: 7A:AF:FA:1E:32:4A:D7:C6:D4:7B:E0:E9:0A:26:17:0C:8F:37:02:05
Authority key identifier: 66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
Certificate issuer: /CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Certificate serial: 019DCED0289770E66E0715808C5D9149FAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 12:00:41 +0000
Manifest this update: Mon 27 Apr 2026 12:00:41 +0000
Manifest next update: Tue 28 Apr 2026 12:00:41 +0000
Files and hashes: 1: J17vSIqgoHZS2f6yqb_8iHjCu5I.roa (hash: ZkWmb6GvJuOMu21GNU2YeN23B5AtCQQY8+AStJbeGm0=)
2: XPQJlFedERmTF9acUC88HcZi7Y8.roa (hash: Np32ynKS0t+KcWpS0Dq9Cf6zaeFo8lW4iSnM2fxcrEY=)
3: ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl (hash: BwVchnhby+tl6+5LO/aJ6oEI1sYNRbV5PBWuA3hwGuU=)
4: ipCoEXo6uW0pr_TclF-YMNfjy1o.roa (hash: Vq4dXFhds74U9HS3KjpxidXdPv7ObFMg2YYb+3p543I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:28:97:70:e6:6e:07:15:80:8c:5d:91:49:fa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6682890b7ed23347478d4d65db0948c3db23ebe7
Validity
Not Before: Apr 27 12:00:41 2026 GMT
Not After : Apr 28 12:00:41 2026 GMT
Subject: CN=7aaffa1e324ad7c6d47be0e90a26170c8f370205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:4e:90:c2:60:94:0d:89:cd:16:09:22:c8:
1a:f9:4a:05:2b:0a:62:66:28:80:99:de:97:35:f3:
b2:2e:76:ab:2b:21:2a:e9:1b:8c:fb:d3:4c:cc:3c:
ae:5a:6d:65:6b:cc:f5:5e:05:34:56:86:64:65:7a:
1c:47:81:00:e7:2d:ab:e4:54:9d:75:b6:c8:ce:ff:
46:cb:ab:52:b8:ac:fd:3a:a5:fe:37:9d:96:77:54:
fa:ad:2d:23:8b:f9:0e:0f:e9:91:44:de:8e:90:dd:
b3:e2:a5:5d:7c:30:14:d4:e1:91:f0:dd:01:de:b0:
8e:9a:c8:39:5b:d2:a9:42:5f:78:f9:f3:1c:c7:49:
81:8a:e6:89:c1:3d:1f:6e:6c:f0:2a:3c:9f:f6:77:
b1:9f:cb:41:53:b9:0b:eb:91:c6:b3:29:2d:2c:61:
2b:23:0e:7b:f2:49:13:a5:56:ba:c5:2c:e0:83:f9:
26:7a:44:3a:b1:3b:26:05:4a:58:cb:e3:1b:71:b1:
7c:f8:4b:aa:2f:b0:dc:a6:93:b8:61:59:5b:12:78:
11:49:5e:b4:7a:71:d3:4a:a1:3f:18:2e:8f:7f:3c:
73:aa:27:04:8a:4f:a2:2c:e1:00:c5:d5:14:22:d9:
3d:ac:b8:c8:5a:b0:f5:5a:ce:98:91:33:ab:57:bb:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AF:FA:1E:32:4A:D7:C6:D4:7B:E0:E9:0A:26:17:0C:8F:37:02:05
X509v3 Authority Key Identifier:
keyid:66:82:89:0B:7E:D2:33:47:47:8D:4D:65:DB:09:48:C3:DB:23:EB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoKJC37SM0dHjU1l2wlIw9sj6-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a981d-67f5-484e-be1b-ff64a9ba597c/1/ZoKJC37SM0dHjU1l2wlIw9sj6-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:5c:c7:30:6d:71:b8:c2:f6:9c:06:43:41:60:ee:ec:84:be:
6e:5c:57:b9:93:b4:65:7b:09:d2:ab:9d:bc:e8:ed:db:bd:70:
28:03:74:90:9b:75:35:d0:5e:35:b7:aa:6a:54:8a:ff:99:33:
d4:6a:80:06:3f:e6:77:07:7e:ad:80:e0:d1:39:f9:1a:1a:ac:
ac:ba:3c:5e:cb:2c:79:3d:d6:d3:60:f2:9b:6a:04:b3:66:47:
40:cd:da:73:a8:08:ad:3b:c4:ac:c0:74:32:fc:57:7f:4e:a2:
36:15:49:9f:70:94:e8:42:63:08:fb:6b:7a:b2:50:8d:d2:30:
5d:38:5c:54:e8:cb:5f:f8:fe:f0:68:8c:62:6a:2d:ba:48:78:
71:03:71:7d:fc:ec:47:77:b4:d8:2d:9a:58:e0:6b:ae:50:c0:
4e:aa:e3:db:1b:fc:74:73:f7:fa:cc:40:0e:cd:fd:fb:54:3f:
05:6a:c2:91:12:1c:52:d8:40:ff:df:08:b9:69:ec:3a:99:e3:
98:c1:e8:ad:e8:5e:ad:07:8e:d2:17:ce:8a:61:21:a5:48:6e:
02:51:99:b3:5a:5b:4e:9f:71:89:69:f0:72:75:cf:91:6f:39:
df:b5:53:5f:fa:f4:7b:16:ef:97:e9:27:5c:9e:b2:f5:53:65:
4a:2b:b3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:06:27 2026 by rpki-client