Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
File: ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft (raw, json)
Hash identifier: e+iZ9K6gI1SemZHHF11pRqmu7Yk2BW55mV4AWFxQpT8=
Subject key identifier: 30:E7:74:A8:3C:15:66:C3:2A:89:4A:D1:A5:A1:4D:0D:03:15:3D:42
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial: 019D973C8CBF857E6F5EA374B4B005B42364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 17:00:20 +0000
Manifest this update: Thu 16 Apr 2026 17:00:20 +0000
Manifest next update: Fri 17 Apr 2026 17:00:20 +0000
Files and hashes: 1: ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl (hash: /f6w8LgAL7PIFAC582NLLKNk7X1VehNO3kxqT38KqZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:3c:8c:bf:85:7e:6f:5e:a3:74:b4:b0:05:b4:23:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
Validity
Not Before: Apr 16 17:00:20 2026 GMT
Not After : Apr 17 17:00:20 2026 GMT
Subject: CN=30e774a83c1566c32a894ad1a5a14d0d03153d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:a2:d6:cb:2c:1b:a2:4e:a0:5d:be:c7:9f:
5d:3c:86:24:dd:2e:ae:87:72:0b:5b:22:e0:f5:66:
a3:69:76:2f:e8:54:19:bd:41:96:4a:39:9d:c3:55:
a6:54:7e:c9:b3:f8:ef:24:8b:c2:48:90:2a:5f:97:
c4:c4:9a:31:e0:ef:be:7a:22:76:68:e7:29:9b:20:
b4:9b:03:42:80:3a:1e:21:4b:62:d3:97:28:d7:b4:
2e:13:73:05:d1:e0:fe:19:1f:d1:f2:45:0b:3d:d0:
13:b8:b6:8e:a6:e5:ff:fa:ff:cf:37:af:a8:f1:5b:
41:3d:20:9d:e9:21:65:fe:1a:28:48:01:56:af:e0:
96:6a:0e:2f:f0:a9:39:b0:47:a7:f5:1c:53:79:7f:
2d:37:eb:d3:8c:b5:46:4f:03:00:c5:e4:a8:d2:27:
4a:94:3f:eb:4c:aa:7c:09:20:81:2c:d4:fc:a5:41:
80:39:61:61:90:6e:da:90:6d:8c:d6:30:cd:bc:39:
f7:a6:ad:30:f1:3b:0b:b6:f3:48:78:3d:df:a7:e1:
8a:12:b6:69:b5:a9:e7:f2:a5:49:f0:69:41:d4:21:
51:02:7c:67:92:a4:32:09:67:da:06:3e:88:bd:91:
c4:23:66:5f:89:1b:0b:46:8a:9c:1a:58:3c:6b:78:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E7:74:A8:3C:15:66:C3:2A:89:4A:D1:A5:A1:4D:0D:03:15:3D:42
X509v3 Authority Key Identifier:
keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:54:cc:b3:89:10:19:6f:aa:20:90:5c:40:91:fc:54:35:9d:
47:0a:64:eb:df:ce:7f:b0:87:a4:74:28:e7:ae:55:a4:61:8e:
6c:9e:f3:bc:7d:a7:1d:6a:68:cc:b1:8f:b7:ef:9e:c0:4e:2d:
fa:06:5d:af:48:28:48:7a:a9:43:1e:fc:33:80:65:03:42:4c:
67:2c:39:91:07:7c:eb:d3:2b:9c:b5:4a:32:26:e6:66:f7:67:
00:bc:76:41:5a:29:34:21:9d:8a:6b:0e:04:c3:26:c9:a8:3f:
7d:67:54:25:a7:c9:ae:6f:22:76:f8:c6:a9:c5:b8:8d:0e:a5:
7d:d4:71:b4:7f:31:33:31:97:60:78:ba:26:f9:88:a9:da:7f:
48:01:88:35:19:2c:f2:bd:71:36:ff:26:a8:19:46:82:5d:1f:
84:c6:cf:7d:86:61:ff:9d:72:18:e6:2c:32:bc:b8:b4:ed:14:
2c:2f:fa:f4:ca:ef:4f:5b:b3:9a:43:44:09:33:ed:a4:97:87:
12:47:1d:25:af:b5:87:9d:8b:a0:f8:a6:c6:27:d6:71:8c:62:
3c:3e:03:45:0e:0d:9b:c7:54:63:fc:2c:cb:fa:4d:53:7e:b3:
44:78:36:6a:08:5f:b7:57:ef:70:0a:cc:2d:f2:4b:1b:10:26:
a0:45:aa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:21:52 2026 by rpki-client