Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: svDzptp2MixlUuJl/mrSA+aQB8vPvgu7pQmEOQBGOFU=
Subject key identifier: DE:82:2B:7A:FE:42:13:BB:64:72:52:57:41:66:CB:73:98:F2:CD:5B
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 019DCE62D76FB238C1004FFC9B0CB6D596D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 1393
Signing time: Mon 27 Apr 2026 10:01:17 +0000
Manifest this update: Mon 27 Apr 2026 10:01:17 +0000
Manifest next update: Tue 28 Apr 2026 10:01:17 +0000
Files and hashes: 1: HY8y2aUxH2zl7Z8uEFKyCs4_DZE.roa (hash: pgB+L4R4Q18tDhMP8CyO3Aai8GigL3mxjQcI8MoXdXI=)
2: cKZJLTzeqYRhpsddyswZAoLcpsE.roa (hash: HgvgjBFasTjpcgFlyoecgapQ0MDuq029z3qYeWnH2Zk=)
3: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: sgDCsGvAzWvuyHjJOj6XQ2fEc3oUzpjAsIc0+Eu8rjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:d7:6f:b2:38:c1:00:4f:fc:9b:0c:b6:d5:96:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Apr 27 10:01:17 2026 GMT
Not After : Apr 28 10:01:17 2026 GMT
Subject: CN=de822b7afe4213bb647252574166cb7398f2cd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1a:67:08:43:fb:25:59:a0:9d:e6:af:f3:f5:
f7:80:de:53:85:0a:8a:e0:19:b5:b3:b3:aa:c1:9b:
f8:73:9b:05:e8:78:95:47:cb:cf:7c:dc:21:97:9e:
27:52:37:83:a5:4f:97:7f:f9:0c:28:1b:06:7a:5b:
70:ea:43:fa:3c:f6:fa:fa:f9:d5:0b:86:72:e6:f6:
cc:67:2c:0e:1c:fe:11:5d:72:25:0c:3a:70:86:cf:
d2:27:b1:7d:27:b3:cc:27:e6:53:8f:86:8d:12:00:
a0:0c:1f:84:93:8d:5e:7b:92:73:c0:64:90:fb:69:
98:30:f7:ac:de:ab:6a:60:16:05:32:e5:71:d8:16:
36:50:62:b6:01:33:e0:d8:73:d2:6e:e0:d2:c0:18:
9a:62:af:28:b4:90:fb:e4:26:a0:a7:27:2d:71:d5:
e4:42:87:21:bd:13:2e:83:dd:30:e1:f0:9e:24:dc:
a1:c6:b5:34:af:98:9c:9d:3a:49:46:e3:14:71:4a:
91:ce:44:e8:2e:a0:ec:19:d7:8a:ef:d5:6a:32:19:
a8:37:a2:87:ff:66:27:96:3f:08:6f:cd:0a:ff:1e:
c3:54:69:98:23:25:45:cd:0c:a4:6e:fa:71:31:b2:
73:71:20:91:10:ff:33:24:1b:4b:df:02:19:28:ad:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:82:2B:7A:FE:42:13:BB:64:72:52:57:41:66:CB:73:98:F2:CD:5B
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:56:27:0c:c4:db:62:eb:d2:8e:d5:44:c2:39:a4:2a:a9:16:
b9:27:38:d5:a4:fe:6e:bf:6a:7d:46:c9:3f:1c:7d:6a:1a:4a:
9d:3d:16:81:fc:97:7e:6c:bd:8c:0b:af:6e:61:2f:25:f5:b7:
d5:ad:37:61:ae:73:1d:62:6c:8f:8b:33:fe:93:9f:f8:96:44:
1c:cc:b5:27:39:5a:a6:10:9d:a7:60:8f:89:5a:9d:1c:b9:8c:
22:16:bf:f1:b9:8c:74:35:8d:12:31:8b:a2:49:d5:6e:48:04:
83:88:d0:95:9c:96:92:92:39:27:ce:55:d4:14:cf:c2:2c:7c:
4b:ff:85:3c:1f:5a:19:cc:07:5c:32:0a:04:26:62:d4:b6:c8:
26:2f:80:b9:17:a2:dc:12:a8:a4:70:40:26:34:f1:c3:33:65:
98:5f:14:88:fd:96:bf:ed:1b:71:f8:17:d8:67:9a:29:07:eb:
39:ee:09:b7:76:36:85:5d:f5:c5:7a:c0:2c:30:b7:43:c8:94:
8e:50:a8:48:99:c7:83:39:70:8b:68:43:2e:a9:0c:e3:42:f3:
fd:17:4f:57:17:35:ba:06:ff:60:2b:a2:e5:24:d0:5c:55:50:
ea:bc:dc:d9:34:a4:a4:7d:af:90:94:8d:19:db:61:0e:aa:83:
10:88:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:53:59 2026 by rpki-client