Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: yfUF/33PYlZFmUPB+EGS3/Vvuze7Vy9uquhSViajrt8=
Subject key identifier: 4C:F6:89:A1:24:55:0A:2A:2D:BD:E4:E0:0D:01:F1:FE:50:2D:5E:E4
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 019DD0BE7908C4AECEE2DED896A45C08A4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 21:00:36 +0000
Manifest this update: Mon 27 Apr 2026 21:00:36 +0000
Manifest next update: Tue 28 Apr 2026 21:00:36 +0000
Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=)
2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: 1VkfPMXerkmnkTVJCYIOpq/cGZkTW99tMrv+IE4QaXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:79:08:c4:ae:ce:e2:de:d8:96:a4:5c:08:a4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Apr 27 21:00:36 2026 GMT
Not After : Apr 28 21:00:36 2026 GMT
Subject: CN=4cf689a124550a2a2dbde4e00d01f1fe502d5ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:f2:b6:05:f8:62:81:23:6e:3e:e2:26:3f:
de:e0:e6:2d:ea:90:61:fd:b4:b9:e7:99:5e:e1:4a:
5f:e5:14:f1:c3:e9:4c:f7:18:2d:16:e2:2d:16:b0:
63:59:47:ef:52:4d:c7:2e:5c:44:42:d8:db:fa:3c:
e9:a8:92:91:55:54:93:bb:82:0a:e2:92:4e:0d:35:
bd:7c:5f:5a:9c:b3:d7:de:f8:11:43:a3:fb:e5:e4:
a4:b6:6c:77:d7:1e:93:30:e5:81:39:ab:eb:be:e8:
57:3f:75:65:5c:ca:15:79:9a:48:7a:75:11:5a:c6:
09:9c:e5:34:c4:5e:7d:c5:07:9c:d7:3c:d4:f0:37:
5c:73:b3:d5:02:c2:7f:ed:9f:a4:06:8f:23:75:e1:
44:41:2e:a0:47:a0:2b:82:8d:b4:f1:d2:05:d7:22:
09:1d:e5:be:f7:f9:dd:e4:ad:5c:64:0e:32:53:6a:
a5:2f:3b:79:62:08:cb:eb:73:73:25:bc:e3:f8:ee:
07:f2:7b:fd:62:e7:99:54:01:0c:80:e5:cb:22:35:
88:84:47:55:9b:61:94:45:23:07:78:db:12:f5:ac:
cb:d9:08:da:f6:61:25:eb:3e:fe:d0:52:f4:fb:b2:
b4:95:ac:fd:b7:02:5c:69:79:b5:3b:08:96:18:31:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F6:89:A1:24:55:0A:2A:2D:BD:E4:E0:0D:01:F1:FE:50:2D:5E:E4
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ad:d7:e3:d6:2d:7a:0e:19:54:f6:ec:1a:33:d6:f7:cc:14:
72:62:f7:58:1d:74:8c:18:53:38:f4:1b:2f:ee:2a:28:8e:68:
e6:d6:57:0d:50:11:94:49:2a:a7:03:9f:9c:42:0a:36:3b:d1:
cf:0c:5f:5c:48:6c:57:9c:26:ec:b9:d0:c4:93:16:18:3c:3c:
da:72:8c:4f:30:a0:cf:a9:99:a7:fc:77:72:98:2b:6f:f3:bb:
e3:61:2b:84:d6:82:de:f9:c2:69:09:bc:f7:10:00:52:10:a3:
52:cf:43:49:4f:36:06:22:41:f6:ba:19:1b:1f:94:86:1b:b0:
6c:eb:e6:fa:d1:d0:f4:db:77:cd:5b:ea:11:f0:3c:eb:bc:45:
83:8a:b7:9d:76:a2:3b:21:e9:03:0f:f6:22:af:e3:c4:e5:30:
5a:0a:45:42:d4:fe:99:da:8e:e2:bf:3f:5e:22:3d:b3:9d:ce:
81:a7:2a:a0:35:f0:51:24:18:db:aa:ee:2a:cb:dd:6e:79:fc:
a0:95:79:67:38:7b:9a:d0:28:77:ce:6a:d2:70:40:62:5b:06:
18:86:b5:b6:bd:ce:63:1f:f9:7e:bb:56:b6:3f:83:b3:84:1c:
f3:d4:05:fd:93:e5:63:85:d2:61:76:98:37:77:0e:68:fd:75:
72:25:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:13:58 2026 by rpki-client