Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
File: Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json)
Hash identifier: YlkcTHEj81jU3CI9uJb7MZHO2PF4Z5j5tfby4+isips=
Subject key identifier: 72:1A:A2:85:EB:FA:96:6A:F1:8E:C3:02:A8:3A:66:B5:4B:D8:42:A1
Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
Certificate issuer: /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Certificate serial: 019D98F51CAB24FDB6E93F53A1AA1C2B503E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
Manifest number: 0CCD
Signing time: Fri 17 Apr 2026 01:01:33 +0000
Manifest this update: Fri 17 Apr 2026 01:01:33 +0000
Manifest next update: Sat 18 Apr 2026 01:01:33 +0000
Files and hashes: 1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: WhdF6AS1GAC7A3IqsrXa+zucb//bVmQYk+K6kkS+IZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:1c:ab:24:fd:b6:e9:3f:53:a1:aa:1c:2b:50:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Validity
Not Before: Apr 17 01:01:33 2026 GMT
Not After : Apr 18 01:01:33 2026 GMT
Subject: CN=721aa285ebfa966af18ec302a83a66b54bd842a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:62:16:a0:b1:30:0b:0a:ec:eb:96:53:db:
3d:31:d8:7d:2d:f7:f0:7f:18:7f:49:c0:26:d3:8d:
09:19:26:31:23:81:21:5e:d2:96:ec:71:cf:c4:3e:
49:eb:56:b5:f7:3a:97:a9:87:4b:5f:9f:92:b2:26:
67:5d:26:b9:81:aa:0b:b9:cf:72:75:8b:27:48:de:
ab:0a:16:41:33:1c:a7:50:dc:6b:ea:cf:49:01:d8:
fc:36:7f:c0:52:e9:94:fd:bd:40:5d:92:7d:0a:14:
07:9f:0a:fa:1d:f4:4f:15:c7:40:b8:5f:ee:77:23:
4d:7b:0e:92:38:cd:a4:0b:42:b0:e5:cf:ab:68:32:
f8:03:16:7a:de:c7:13:59:33:48:75:62:f2:7d:83:
54:7b:6c:a1:1e:ca:00:5b:5f:8b:21:e8:16:e9:92:
9a:26:1d:c2:21:28:fc:03:66:8c:fe:3c:bb:52:4d:
e0:cf:15:a7:ab:2f:ab:a7:38:5d:1f:ea:32:71:8f:
ea:20:f9:7e:25:55:a4:98:1c:55:85:71:1d:5e:e6:
d9:c5:87:38:23:1c:1a:82:2e:76:61:7c:98:42:ae:
d2:63:52:3a:4f:17:10:d6:a8:43:69:92:d0:df:f6:
fd:b2:6b:35:98:f2:c2:ea:f1:e4:50:a4:af:ba:1b:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1A:A2:85:EB:FA:96:6A:F1:8E:C3:02:A8:3A:66:B5:4B:D8:42:A1
X509v3 Authority Key Identifier:
keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:88:f8:71:4c:c2:bd:d1:03:f1:0c:71:ec:1f:f0:01:b6:72:
63:a6:ae:17:50:92:34:f8:06:4b:5a:70:18:9a:33:ba:7a:39:
58:5d:ce:ac:30:e8:77:80:8a:0f:98:b6:23:9f:be:8d:98:df:
78:ff:7f:ad:5d:62:b5:ee:ac:5a:ca:b2:32:21:2e:bc:88:a8:
8b:82:c3:08:cb:d3:31:f2:f3:c9:07:f4:df:fd:d4:b6:03:eb:
52:89:67:e2:08:91:4d:8c:85:af:d9:c9:b6:38:00:ce:7d:ff:
e2:e9:ec:da:e3:e9:c6:7c:e1:cf:5c:fb:2e:e8:0d:89:8e:a6:
04:d6:fb:4a:bb:e5:cb:24:2c:ee:ba:e9:a2:54:7e:75:b4:fa:
90:2f:b2:68:81:df:aa:d3:a8:e5:01:fd:f8:20:6c:b6:fd:41:
6a:a8:00:01:f5:af:90:75:69:3a:79:a2:f8:15:3a:c8:56:47:
9f:aa:3a:8a:68:1e:9e:d4:57:8a:e4:2c:e7:c3:c9:fd:87:00:
e9:a1:5d:6b:45:98:84:86:65:3b:fa:5b:e6:d3:83:45:0c:2c:
52:08:bb:1e:03:66:8e:9b:38:be:0a:a2:39:51:62:35:4e:30:
3f:98:c1:bd:99:b4:24:1e:3e:9c:7a:e6:a3:e0:14:2e:10:64:
58:1e:19:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:00:52 2026 by rpki-client