Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
File: cZhnMZJb6FUaUwka_m0Jct-jgH4.mft (raw, json)
Hash identifier: ezE4KKYcYT3mIJizEdtXvvywv/vZyHwQl4Df4GEHX0A=
Subject key identifier: 86:F5:18:A1:92:F1:98:EE:AD:65:B5:05:63:E7:3D:53:8F:CE:20:80
Authority key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
Certificate issuer: /CN=71986731925be8551a53091afe6d0972dfa3807e
Certificate serial: 019D98BE05F976ED4285017438745D9D0DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
Manifest number: 0984
Signing time: Fri 17 Apr 2026 00:01:23 +0000
Manifest this update: Fri 17 Apr 2026 00:01:23 +0000
Manifest next update: Sat 18 Apr 2026 00:01:23 +0000
Files and hashes: 1: cZhnMZJb6FUaUwka_m0Jct-jgH4.crl (hash: F6n72+hVgLwPW/ODziLSnRF2xWnS6+dZ63FXN9IFmoI=)
2: deQ3iUYI2zhDS5WVofbw_0r7MdU.roa (hash: aWouu4WFuntFUTMgXaNZBkCjMzZT9CqQafzXFsbJDvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:be:05:f9:76:ed:42:85:01:74:38:74:5d:9d:0d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71986731925be8551a53091afe6d0972dfa3807e
Validity
Not Before: Apr 17 00:01:23 2026 GMT
Not After : Apr 18 00:01:23 2026 GMT
Subject: CN=86f518a192f198eead65b50563e73d538fce2080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:1b:5d:ae:85:6d:c5:80:9b:57:8e:94:53:
55:63:93:c3:c0:fa:1b:57:dc:2f:d3:07:a3:34:74:
8a:1a:83:78:78:bb:e7:7b:78:03:ab:2a:67:16:d8:
1f:a1:2a:99:f6:96:bf:82:82:56:05:b2:da:9a:c9:
01:e2:2d:b5:1a:16:54:82:af:e8:ee:35:0d:1f:75:
ba:2d:d6:b5:aa:f5:d5:97:51:52:fa:84:84:93:1f:
62:6e:5e:95:95:08:84:4c:b0:69:92:20:c4:a4:34:
2e:6c:18:4d:fd:76:99:94:f1:cb:3e:ef:ca:e7:f4:
d9:cc:50:19:a4:92:20:3b:c3:3e:45:3f:52:a2:77:
17:1c:18:6a:f1:40:b2:e9:be:58:48:70:6b:2e:dd:
3e:2c:70:c3:6e:77:9b:9f:94:05:87:e0:63:34:39:
83:ba:34:0e:15:4d:2a:95:74:b0:4d:22:95:6d:23:
fe:ed:85:dd:75:8b:a8:23:10:e3:1f:0e:5b:b4:a4:
de:c7:b3:8f:b7:2a:e3:b3:6f:bf:49:97:ae:b9:99:
ac:d6:1f:5b:5a:0f:af:0a:a4:c7:db:34:92:ea:ad:
2c:ac:dc:41:d4:ea:d4:d2:43:b8:ae:e4:74:2b:29:
0e:37:70:68:91:13:19:b1:d9:b7:67:28:59:59:5e:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F5:18:A1:92:F1:98:EE:AD:65:B5:05:63:E7:3D:53:8F:CE:20:80
X509v3 Authority Key Identifier:
keyid:71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4e:af:90:4d:6e:8e:e0:eb:b2:dd:0c:a7:4b:5c:93:98:89:
c9:a5:24:39:80:c2:4b:ff:17:a5:36:38:cf:fc:ee:2b:c9:b2:
96:6e:11:bc:12:34:eb:c0:24:76:af:e7:be:04:9f:7a:2e:e0:
10:7d:6b:19:17:19:72:b3:9c:43:a9:4a:1b:4f:3d:1b:cd:76:
a7:a5:99:b1:62:45:fb:70:d4:3f:b9:06:96:09:8c:74:00:27:
06:a3:be:2c:8d:7a:a9:ef:64:c3:7a:e9:f5:9c:b1:13:23:82:
37:aa:80:45:b3:fe:36:ba:77:9a:5a:00:3d:e3:a9:8a:b7:b3:
46:c9:80:ec:fd:85:1e:a2:08:3e:2a:9d:3a:c2:ce:0c:97:20:
d5:53:28:fc:8c:6c:ba:89:16:1c:89:e7:e8:6c:67:12:82:c8:
2e:ce:e0:e8:4e:90:c0:54:f7:54:d7:d5:06:d8:87:b8:f7:2d:
cb:d8:ce:87:c6:00:ae:76:53:85:44:92:31:1c:26:56:0a:68:
a7:4c:cd:32:cd:f6:83:c7:52:d9:bf:41:30:04:36:51:19:a6:
4a:14:db:00:f3:78:ff:9f:dd:e0:98:54:7f:fb:d3:f8:94:3b:
c4:4e:f5:88:e8:1d:d3:35:e8:50:05:4d:b6:a0:3d:c7:85:fc:
72:cb:01:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:42 2026 by rpki-client