Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
File: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft (raw, json)
Hash identifier: urLPxyGSPk3U18uEgRayNpN9LJ32q1fLH4W5NxG2rwo=
Subject key identifier: CC:E6:68:D9:A4:07:1B:A1:4F:BE:54:0E:CC:E1:C2:EA:21:DC:14:1D
Authority key identifier: CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81
Certificate issuer: /CN=cda104577266ec9b146736c8cc9da7366b1d9781
Certificate serial: 019D9773CD78C930E08D6D14839A8FF5D344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
Manifest number: 18BD
Signing time: Thu 16 Apr 2026 18:00:41 +0000
Manifest this update: Thu 16 Apr 2026 18:00:41 +0000
Manifest next update: Fri 17 Apr 2026 18:00:41 +0000
Files and hashes: 1: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl (hash: 3s+4H9Z4w9R7K7wfkoWV26LpTrpE2p/TCg6VAckjxdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:cd:78:c9:30:e0:8d:6d:14:83:9a:8f:f5:d3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda104577266ec9b146736c8cc9da7366b1d9781
Validity
Not Before: Apr 16 18:00:41 2026 GMT
Not After : Apr 17 18:00:41 2026 GMT
Subject: CN=cce668d9a4071ba14fbe540ecce1c2ea21dc141d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:0f:fe:0d:2f:3f:d8:80:30:0e:0c:2c:66:
88:d2:2a:6f:99:59:12:da:a1:8a:94:e3:d6:76:7e:
b2:d7:db:44:30:3a:4b:0d:38:6b:4c:6e:99:81:38:
e8:23:dc:ad:99:37:8e:36:a6:f8:09:28:71:37:28:
56:35:74:1c:8a:98:85:6f:f2:af:6b:e7:7f:23:9a:
10:28:b2:46:80:8f:f7:90:0d:58:c2:43:20:d0:95:
db:9d:cd:e0:91:8c:fb:52:fa:3d:cd:1b:53:69:83:
3a:41:4f:90:37:df:9c:ed:74:15:5e:17:8e:df:27:
cb:e5:bb:e4:07:91:39:9c:d1:d1:83:06:91:e1:bd:
48:31:0f:5e:9e:a9:70:28:cf:04:7e:12:b6:f8:98:
28:54:be:b6:f9:e7:d5:fc:31:6d:fe:9f:48:06:95:
41:30:bf:bc:3a:b0:54:b9:3b:95:0b:d5:db:5b:4a:
f1:da:f0:59:e3:a2:54:76:dc:22:1a:2b:c0:4b:e1:
e1:06:96:1c:ee:cc:7e:4c:c0:2e:b5:6a:99:4c:aa:
5c:65:b6:70:8b:64:45:92:51:41:1d:27:77:d1:86:
16:ce:c6:2c:13:c3:0f:da:40:4b:18:50:5b:3c:26:
0c:b1:a5:a2:7c:96:a5:28:b1:ab:8b:fe:51:a6:bb:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E6:68:D9:A4:07:1B:A1:4F:BE:54:0E:CC:E1:C2:EA:21:DC:14:1D
X509v3 Authority Key Identifier:
keyid:CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1c:c3:dc:7c:b7:f1:90:7f:c6:7d:10:2d:23:16:9e:db:45:
60:59:b7:c7:a7:fb:0e:fb:0a:06:f4:3c:c5:52:21:c2:7c:f2:
bf:c2:24:1c:17:5c:0f:91:fd:9b:d9:aa:96:f6:3f:3c:03:14:
47:5c:d1:af:c5:2d:d5:36:f0:b7:6d:bc:65:24:7e:65:34:5b:
be:91:78:b7:63:b2:a1:f7:fc:a9:d1:91:50:3e:ab:8c:59:c2:
19:0b:76:f5:bb:5d:86:1c:49:7c:6e:87:cb:2f:6b:c2:d4:07:
a2:8c:32:67:e2:72:28:11:cd:b9:64:35:00:62:0a:84:ca:72:
e6:ad:19:86:61:54:6a:40:3b:cd:1b:69:c8:09:44:58:b0:41:
a9:ce:c4:84:24:d4:bf:1b:15:79:61:ae:a1:d8:74:57:19:d2:
03:fd:1a:e3:20:d3:8f:46:a5:00:57:93:fb:8c:9d:61:84:eb:
52:9c:62:94:de:54:2f:3b:5c:53:1b:f8:08:c8:61:e2:8d:48:
d6:15:95:ce:46:d2:c4:aa:9e:44:12:e2:37:d9:37:b8:2a:47:
4a:3e:a5:c7:c6:04:d0:6b:93:1d:6d:3e:8c:a8:25:2d:e2:58:
4b:bf:76:fb:86:28:8a:f4:5e:ad:fe:03:c3:05:9a:b6:ae:93:
d5:d1:63:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:40:52 2026 by rpki-client