Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File: zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier: dAYILpDLxljOAY/ezVpvIRG/uB8mSrFdsfM+Sv+NSx4=
Subject key identifier: 51:8C:30:5F:1A:EA:BE:A1:11:EE:F4:B3:47:62:B8:B1:FA:1E:CC:92
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer: /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial: 019D9CD0F24643ABDA2F98823E09FDA88D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number: 1554
Signing time: Fri 17 Apr 2026 19:00:32 +0000
Manifest this update: Fri 17 Apr 2026 19:00:32 +0000
Manifest next update: Sat 18 Apr 2026 19:00:32 +0000
Files and hashes: 1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: NNBVaAsF6nVFuTnCdj8E0sRZM+zCg+UZUNIjhR0w+zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d0:f2:46:43:ab:da:2f:98:82:3e:09:fd:a8:8d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Validity
Not Before: Apr 17 19:00:32 2026 GMT
Not After : Apr 18 19:00:32 2026 GMT
Subject: CN=518c305f1aeabea111eef4b34762b8b1fa1ecc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:42:dc:d1:54:83:d0:43:39:ec:b9:ca:b2:
9a:ff:16:20:29:54:6d:fd:b6:d6:02:75:18:bb:f7:
c4:51:2f:ef:90:07:02:e1:e3:46:35:6d:0a:56:b8:
60:1c:16:b4:d0:79:05:2e:c2:90:1e:59:eb:4e:df:
21:2c:04:7a:30:1b:da:ed:e0:6c:1b:89:d2:2e:08:
6e:0f:3f:1d:1f:74:c3:02:ca:ce:93:42:d0:03:21:
62:e9:eb:2f:1b:de:2e:c4:05:b6:49:75:fb:40:94:
81:25:32:ec:8f:79:80:e0:b4:13:44:8e:cb:35:b7:
04:e7:f9:3d:33:ec:9a:d3:2c:24:3d:70:ae:87:23:
10:78:57:12:e3:30:3c:4c:a8:f3:41:a1:45:c5:9f:
37:46:c4:fa:96:fb:05:36:3a:93:7d:a6:40:7f:93:
c8:bd:0d:53:d4:5b:2c:8a:7c:72:14:e4:c0:3e:14:
be:0b:4a:81:32:d2:6b:62:7b:a8:ae:40:2e:cf:5b:
a2:b3:c2:6d:f3:b2:8f:c9:44:af:32:4c:33:04:e0:
88:91:f4:ad:ca:dc:48:d8:fd:55:62:f2:c1:72:b0:
38:ab:e8:f1:38:6b:40:9c:95:05:d3:c1:a8:05:e8:
5b:d8:f0:24:b6:c6:20:7a:c9:7c:0a:bd:27:c6:91:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8C:30:5F:1A:EA:BE:A1:11:EE:F4:B3:47:62:B8:B1:FA:1E:CC:92
X509v3 Authority Key Identifier:
keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:80:32:fa:f2:ba:e5:55:a7:8d:b9:a0:96:60:c7:00:5d:a9:
8c:46:72:b6:75:72:c1:da:72:e5:3a:dd:e9:ea:dc:e5:8b:b2:
a2:76:d9:56:8f:ef:aa:c5:4b:73:dc:ce:d6:71:a9:86:31:35:
78:63:16:a0:6c:d0:ce:42:aa:ee:3d:e0:c0:db:b2:b3:e2:c3:
6c:8c:ec:35:69:18:06:2e:86:aa:f3:12:98:ce:48:81:f4:91:
95:9f:16:be:f8:31:14:7e:7e:69:5c:e9:a5:aa:aa:76:43:49:
ee:0a:28:14:4e:ab:df:74:69:19:b6:60:2a:9b:6a:12:12:e9:
c3:26:99:4a:5b:9a:5b:65:7d:11:ac:b6:0a:28:ca:54:46:17:
5b:3f:f6:0e:11:e9:4b:e2:22:c8:32:40:81:af:84:bb:5a:96:
c0:cd:ee:d8:c4:55:d1:33:c1:04:e8:8f:93:d5:61:c7:c3:0e:
b0:23:0f:0b:c4:5a:4f:a3:de:29:51:27:5b:c6:4c:76:6a:9b:
5e:5a:8e:d1:4f:ca:7b:18:b3:21:cd:2f:be:bb:8e:3a:a6:6b:
aa:f3:a9:f2:35:45:b9:0c:7a:24:39:fa:78:58:2e:b0:bf:6b:
df:aa:77:0f:6d:5b:64:f6:f3:29:7f:39:54:66:06:29:1b:d6:
b5:0b:e5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:08:32 2026 by rpki-client