Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier: oJ6q1rVVFheVwn8F8vgKI55gAeITt+6Uei4dcZPFFJw=
Subject key identifier: 63:BF:E5:E9:5A:E3:66:9E:66:9E:D5:60:CB:22:B9:49:8D:49:B7:00
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial: 019D9B508137412BC98C32DFE2CD38CD1260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number: 1582
Signing time: Fri 17 Apr 2026 12:00:37 +0000
Manifest this update: Fri 17 Apr 2026 12:00:37 +0000
Manifest next update: Sat 18 Apr 2026 12:00:37 +0000
Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: BSz9YzIhyeZJyRFi2UobCw2AqIV6f35cJEqkKdyPntQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:81:37:41:2b:c9:8c:32:df:e2:cd:38:cd:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Validity
Not Before: Apr 17 12:00:37 2026 GMT
Not After : Apr 18 12:00:37 2026 GMT
Subject: CN=63bfe5e95ae3669e669ed560cb22b9498d49b700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c2:1f:38:f6:d1:27:47:bd:36:93:0c:97:f3:
5c:eb:3b:a4:dd:46:c5:a8:b2:96:e4:44:ee:01:bd:
75:68:c7:1e:6e:1e:ac:fa:6f:03:a7:c7:24:6f:48:
2d:c6:f6:c6:b2:f7:0f:bd:fb:76:65:53:94:22:58:
da:16:13:42:6e:f1:b5:f2:9c:12:53:07:3a:61:5f:
c1:27:f2:93:10:26:1b:13:dc:75:a8:ab:96:a5:f5:
06:a3:b4:f9:77:99:82:11:f3:8b:1d:6b:23:36:58:
24:cc:cd:05:2d:89:70:ad:bc:a5:23:44:2d:14:95:
47:0c:6c:25:a3:df:a6:e4:65:ac:67:e7:66:43:9e:
2b:f7:fa:b1:7b:cf:94:93:53:94:e6:10:e6:bd:1c:
61:0e:8c:e8:64:45:f6:d0:83:96:3f:00:0d:ed:94:
b3:d8:7d:b4:1c:a9:f3:41:f3:2e:45:c1:ea:de:79:
e4:1d:c4:dc:e6:ec:18:36:70:7e:54:bb:ae:91:f5:
8f:74:b8:dc:e4:46:7f:8a:b8:10:6c:17:fd:be:3c:
bf:51:41:99:90:73:df:00:57:12:77:18:16:1c:1c:
c1:61:b3:3e:da:c3:23:b7:57:2c:b4:47:eb:83:97:
9c:2f:49:1d:44:d2:68:04:f6:67:6b:bc:0d:89:b8:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BF:E5:E9:5A:E3:66:9E:66:9E:D5:60:CB:22:B9:49:8D:49:B7:00
X509v3 Authority Key Identifier:
keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:df:36:84:04:7b:26:83:97:9a:f2:da:d8:da:92:b8:02:e9:
93:f3:d9:d1:3c:5e:77:84:15:de:92:32:db:34:e9:af:79:39:
6e:e4:d8:c1:80:3e:ff:25:30:dc:32:cb:37:59:25:8a:14:d3:
62:8b:f9:3b:a5:8e:49:92:52:eb:c7:32:c8:55:2e:45:1c:62:
8b:52:ee:6f:14:fb:33:8b:30:7d:52:b0:21:c7:8a:cd:a6:4a:
ce:bf:3f:9d:5b:e7:f4:15:41:8d:8e:fd:73:db:92:e3:3d:cd:
49:c7:af:b5:9c:7a:78:e3:e4:5d:26:58:4a:9b:75:18:39:a4:
ca:3b:ca:5b:15:b2:2b:e0:73:e7:e1:58:ce:f6:eb:58:7b:3c:
d6:14:65:68:10:e6:f4:5f:54:6c:5d:43:7c:73:d2:0b:ea:60:
bf:56:84:13:64:ea:fd:41:f3:f2:ca:4b:99:0f:e8:a2:39:54:
6a:44:c8:67:2f:ca:6e:90:14:86:f2:43:be:31:98:56:c7:aa:
48:b0:cc:a0:6f:05:74:6f:4e:4e:fa:67:4d:8f:95:52:d0:67:
7a:fc:8c:63:72:e8:61:4f:96:2e:94:0c:85:b5:3f:fb:3b:53:
20:60:0c:cc:bf:8a:67:23:ec:22:dc:fd:51:94:bc:d4:e4:ee:
b9:06:16:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:34 2026 by rpki-client