Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
File: ZUlVDFrmZAApGGz8nep06Rp7Yec.mft (raw, json)
Hash identifier: qn6i4+dlR1X4HMaYSlTgeChW/Ih9MM/InHxECF3Ke1A=
Subject key identifier: D5:EE:A6:89:F1:FE:90:56:88:68:47:A2:1F:CE:94:11:3C:69:4A:86
Authority key identifier: 65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
Certificate issuer: /CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Certificate serial: 019D984F91013D060E0E342B535339271D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
Manifest number: 0598
Signing time: Thu 16 Apr 2026 22:00:44 +0000
Manifest this update: Thu 16 Apr 2026 22:00:44 +0000
Manifest next update: Fri 17 Apr 2026 22:00:44 +0000
Files and hashes: 1: ZUlVDFrmZAApGGz8nep06Rp7Yec.crl (hash: sxcbDfOzWCnAm7rHaHifbzdjTosMXRhGgpIuRVOQ6H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:91:01:3d:06:0e:0e:34:2b:53:53:39:27:1d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Validity
Not Before: Apr 16 22:00:44 2026 GMT
Not After : Apr 17 22:00:44 2026 GMT
Subject: CN=d5eea689f1fe9056886847a21fce94113c694a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:b7:2e:20:1b:15:b9:59:51:11:59:7a:19:
3c:1b:f9:86:cc:95:a6:7f:f2:d6:9d:73:0f:22:d5:
45:51:4a:d4:af:5a:59:98:d7:c3:03:11:05:b8:3d:
17:ee:99:b5:a9:d8:46:dc:49:5a:ab:03:76:74:ff:
13:6a:a8:25:1f:54:98:71:99:1b:26:ba:0b:38:cc:
ac:40:01:9a:1a:57:1c:99:b8:e1:00:aa:d2:94:35:
53:ea:bd:cd:b2:3d:dc:05:c2:f1:e0:ce:39:3b:37:
3a:a9:97:55:bd:d3:33:bc:20:70:07:56:e8:1e:5a:
1a:04:76:81:7b:1d:92:4e:49:ec:91:db:4b:c1:11:
7f:e8:28:97:be:e8:dd:48:16:7c:4d:8b:87:b2:ec:
17:96:80:1c:a3:cd:1c:02:1c:77:6e:e8:e3:cf:3b:
6d:5b:50:96:a9:27:be:3a:0a:3e:42:4a:00:c6:17:
27:02:cb:e7:a9:01:88:5a:bc:95:86:66:72:62:13:
1e:ab:5c:fd:df:c0:ee:5b:3f:39:7e:da:f0:b3:62:
86:9c:97:d0:cb:3e:e2:79:88:18:49:f6:9d:65:d0:
db:2a:3a:e5:d9:ee:96:d9:7e:31:42:fe:7b:9c:13:
66:78:cf:85:9c:99:68:cc:62:12:de:b8:27:c9:dc:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EE:A6:89:F1:FE:90:56:88:68:47:A2:1F:CE:94:11:3C:69:4A:86
X509v3 Authority Key Identifier:
keyid:65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:de:17:cb:2b:42:24:0a:11:02:a3:d0:ef:72:f3:cb:ee:e1:
54:59:60:2b:28:e8:b8:ea:95:fc:8e:b8:d2:82:95:ac:e7:7a:
4f:00:e4:b9:42:9a:ba:97:ef:dc:a2:15:92:91:02:ba:56:64:
b6:12:38:d9:2e:90:f7:0f:8d:72:ff:3a:72:6f:54:e7:d9:9e:
01:97:99:1d:fd:48:dc:ba:1c:5b:e2:6c:be:66:a9:f2:39:78:
14:5c:6c:84:f8:8b:b2:7d:4a:3c:d9:5a:55:be:d6:c5:a4:a8:
42:8f:4f:6a:54:8d:4a:24:0a:df:7d:6f:74:6f:d9:09:97:2d:
cc:88:63:fd:1e:c6:51:14:a4:18:66:de:2a:ca:c6:aa:5b:aa:
58:bb:39:e9:2c:fb:2d:b2:b0:08:46:cd:f3:b9:67:40:04:e2:
fa:cf:5f:a1:3a:1e:e1:ae:2b:db:3c:1e:54:53:e6:6a:aa:d5:
b6:e6:49:c5:5b:14:fe:d1:b3:88:32:44:e0:90:11:15:6d:1a:
34:2a:81:d0:03:cb:1a:99:87:d0:5d:eb:14:9c:34:b0:00:00:
9d:fc:93:19:dc:4d:8b:12:62:3a:12:24:9b:ff:57:f1:aa:07:
32:18:6d:42:19:1a:ee:83:16:1d:12:76:6d:70:c0:b4:ce:68:
e0:0d:08:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:36 2026 by rpki-client