Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier: PpcJLp4pOusqd40Gdo/9HYYQxr5GsHzh/qnBLF9Dynw=
Subject key identifier: 21:37:F0:AF:F3:5E:A1:81:1F:E4:CE:0B:0A:D9:36:2A:E7:D3:16:9A
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial: 019D9A752ED1CCC4D2767727F30AAF0BDFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 08:01:03 +0000
Manifest this update: Fri 17 Apr 2026 08:01:03 +0000
Manifest next update: Sat 18 Apr 2026 08:01:03 +0000
Files and hashes: 1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=)
2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: FkV4Kz3eTjx8pPOrTxj17ICgZ5fh6PwsG8zPs6xyjIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:2e:d1:cc:c4:d2:76:77:27:f3:0a:af:0b:df:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
Validity
Not Before: Apr 17 08:01:03 2026 GMT
Not After : Apr 18 08:01:03 2026 GMT
Subject: CN=2137f0aff35ea1811fe4ce0b0ad9362ae7d3169a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:1d:8e:57:11:d9:1f:84:0e:28:6a:5a:9c:
4b:85:04:df:c1:91:72:44:71:6a:d6:90:c1:6b:0d:
eb:af:df:74:9f:fd:ad:f7:32:7c:33:db:1b:b0:fe:
3b:b3:26:91:1d:eb:eb:8b:48:a2:6f:a3:e8:57:30:
ec:c6:b4:f8:2b:e7:6e:aa:b6:34:db:ff:ec:f8:47:
ae:95:f6:7e:7c:05:a8:f3:35:45:8d:09:8a:04:bf:
3c:c5:c4:b9:15:cc:92:42:02:14:bd:31:5b:60:69:
9e:5b:3b:29:25:b6:bd:5f:7c:49:d6:3c:ee:f0:1b:
0d:04:fd:9f:30:44:41:99:e8:d9:4d:05:08:7a:9c:
9a:63:30:8c:0b:5d:94:a2:f2:28:43:f8:80:19:3d:
30:82:df:0a:f7:e0:74:a3:f3:f9:3f:57:ce:9d:51:
66:bd:90:92:5b:8e:5e:69:1d:b1:b0:88:dd:64:10:
f5:f9:95:ad:e9:7f:44:bd:ac:b6:ae:58:c5:e1:28:
ae:0a:1b:c8:b3:46:61:59:4a:19:6b:77:1f:1f:70:
4b:84:e9:d2:36:84:c3:12:86:8c:2f:bb:bf:15:d0:
2d:87:de:96:67:41:b2:37:85:4f:14:e3:a9:62:f5:
22:76:52:1b:c4:e9:30:b3:bc:ba:53:4c:8b:f4:88:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:37:F0:AF:F3:5E:A1:81:1F:E4:CE:0B:0A:D9:36:2A:E7:D3:16:9A
X509v3 Authority Key Identifier:
keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1a:8c:03:c7:1d:78:29:0c:10:b4:02:94:32:e2:b3:dc:a9:
52:4e:2b:21:e1:76:66:21:33:77:28:b3:b7:c3:cb:08:31:dc:
8a:cd:9a:71:57:89:82:05:10:4c:55:7c:2c:18:1e:89:0a:83:
1f:d7:ab:3b:39:a9:f3:57:bc:5a:cb:d6:55:27:3d:11:af:29:
1b:bb:83:3c:84:cf:48:4c:ee:2b:07:67:5d:d1:05:bd:f7:fe:
71:c3:07:6c:7f:ec:3c:b8:5c:69:53:b6:c9:e3:43:d9:f9:9b:
7f:8d:6b:92:ac:e0:7c:eb:de:db:34:53:07:55:63:9b:88:ef:
4b:94:ae:ed:c5:30:a7:72:0d:4a:3f:dd:d9:6d:1b:5c:2b:aa:
2e:d1:f2:b5:f0:21:00:c2:5c:37:58:8c:44:4d:fe:79:83:b6:
c1:1d:37:8d:da:46:75:89:43:67:49:3f:dc:09:ae:16:66:66:
12:01:51:3b:0c:63:98:45:50:25:36:32:35:b1:9d:10:03:ae:
c7:b3:44:79:6e:8c:7e:83:d5:3b:c5:cb:09:3a:39:3b:cc:e7:
23:4d:5d:7d:14:8e:67:b1:07:ec:e5:fd:12:d5:71:9b:d2:96:
1a:14:31:fe:ec:4d:92:cd:06:d7:84:1d:52:52:7b:23:08:94:
d3:39:f7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:24:31 2026 by rpki-client