Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json)
Hash identifier: 1tZl/Ygs0PWeY3Ynp2DfgBj0i7dx5U6/xGjbK5mXVGY=
Subject key identifier: 41:13:EF:2E:BC:37:B4:FA:A1:60:5B:10:BE:D3:2D:22:51:C5:7D:39
Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d
Certificate serial: 019DA34150EB613A22004A842DCD186D3309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
Manifest number: 07DF
Signing time: Sun 19 Apr 2026 01:00:59 +0000
Manifest this update: Sun 19 Apr 2026 01:00:59 +0000
Manifest next update: Mon 20 Apr 2026 01:00:59 +0000
Files and hashes: 1: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: eHTzXnMYmDQcKFou/KiPs91ApR2hnUYb1uvxNO2wc6c=)
2: xL9ifbNR1mOs9uO93ZIkaaIy3p8.roa (hash: VzaUpnGlk6PWKD7kHafESlUjnLnbyjchehYl4PxFAp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:50:eb:61:3a:22:00:4a:84:2d:cd:18:6d:33:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d
Validity
Not Before: Apr 19 01:00:59 2026 GMT
Not After : Apr 20 01:00:59 2026 GMT
Subject: CN=4113ef2ebc37b4faa1605b10bed32d2251c57d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:00:aa:82:06:a0:28:12:ac:38:f0:15:09:
45:8f:fa:bb:a0:79:63:1d:27:9f:8c:a4:c9:f3:fb:
39:f1:e8:3f:56:e4:eb:cc:06:1f:68:f0:10:f5:6c:
09:c1:81:41:f0:29:22:31:8e:69:c7:65:4b:1e:b6:
20:4c:78:a8:eb:90:23:fc:f9:80:47:24:44:c8:bd:
35:f8:d5:65:6b:88:03:3a:d1:85:e7:8b:de:b6:ad:
10:45:2a:80:63:06:d3:b7:9d:a0:6e:07:6a:84:bd:
a1:d4:33:fa:ac:bc:dd:8e:8d:fd:1c:5d:a3:9f:02:
c8:1c:ad:f4:88:a2:db:71:db:ae:cd:0a:78:bf:f9:
9e:f9:da:de:69:26:bd:69:84:a5:6b:7c:f7:ca:28:
89:15:5c:f0:b5:99:29:f5:ac:e6:f0:6c:03:cb:e0:
d4:46:cf:ac:25:d6:ce:16:d0:75:20:d1:80:cb:7c:
01:7a:b1:f0:3b:ac:ed:07:21:13:48:31:5a:8d:6e:
71:6f:a8:0c:46:dc:71:3b:cd:62:fd:04:16:cf:4a:
ac:bd:62:f8:40:66:60:6c:e1:31:df:84:b6:f3:ab:
0c:b5:9a:f0:03:dc:72:d1:88:d0:b6:53:c3:c1:15:
73:c5:b5:f0:15:c3:01:0c:90:8e:b6:0a:57:94:eb:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:13:EF:2E:BC:37:B4:FA:A1:60:5B:10:BE:D3:2D:22:51:C5:7D:39
X509v3 Authority Key Identifier:
keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2a:93:c5:94:c6:8f:52:06:e4:1e:ed:2d:c0:0a:0d:fb:de:
4c:0b:4c:e7:66:32:2a:91:25:ee:c0:eb:b3:9e:3e:9c:f7:43:
fa:c6:b5:00:33:62:6b:72:83:47:81:be:d5:65:55:64:13:94:
d6:e2:9b:22:6f:44:91:0c:3b:8c:5b:77:10:8a:27:ab:cf:ff:
2a:ad:22:75:47:c3:4c:0a:ca:30:4e:f9:b1:ab:00:f1:fc:c0:
0f:9c:fc:e6:97:f2:bb:13:e4:e1:49:e8:ea:d4:26:1e:1f:43:
c7:1f:e8:5b:65:9e:d2:da:f7:64:8a:4f:c9:2d:1a:f8:4a:04:
15:d4:e5:67:ca:15:ed:46:0d:c0:f7:b0:18:d5:e0:d9:61:2d:
02:5c:05:f8:0b:18:2c:6e:60:d0:f7:16:80:f8:b6:00:d8:50:
7e:1d:c2:4c:9e:a4:b4:cf:33:87:19:d6:26:dc:85:dc:57:70:
e9:4b:f7:ee:23:13:f2:9a:72:88:1c:30:25:3f:d0:fd:ee:44:
eb:5c:d0:1c:20:de:dc:35:3a:01:9f:d6:b9:ee:78:b0:43:09:
d0:81:80:21:57:bd:d5:b7:2d:17:a9:a1:8a:7e:74:1a:0f:9f:
fd:93:e4:b0:a1:2b:c5:0f:fe:79:82:43:09:45:5b:e8:77:fc:
b6:ff:8d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:27 2026 by rpki-client