Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: aBdo+3xrWruyv+Tankca3Jpk1FxV+lPz4h9TbFSM2Nc=
Subject key identifier: 8F:83:1A:94:EA:E0:43:9B:53:B9:21:B7:07:4E:74:56:39:34:2A:2A
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 019DA48B04A00357890DAF65580E8FE520A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 1254
Signing time: Sun 19 Apr 2026 07:01:07 +0000
Manifest this update: Sun 19 Apr 2026 07:01:07 +0000
Manifest next update: Mon 20 Apr 2026 07:01:07 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: 7r9DdTEvAonJB3LQMuvDP5JlvEdn4pe7LwFpUbodYaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:04:a0:03:57:89:0d:af:65:58:0e:8f:e5:20:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: Apr 19 07:01:07 2026 GMT
Not After : Apr 20 07:01:07 2026 GMT
Subject: CN=8f831a94eae0439b53b921b7074e745639342a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:41:ba:33:14:47:2a:b4:99:4e:60:f2:07:21:
84:c4:ba:4e:e1:97:17:38:a1:97:02:37:d2:66:89:
29:3b:40:aa:8a:f8:83:f2:f3:91:d9:b3:e9:e8:2d:
f5:e0:c8:e2:c1:ef:bc:15:66:5b:d3:69:8f:eb:f8:
25:19:12:74:66:2a:a8:41:b6:06:a7:2b:a3:67:57:
e5:13:74:70:c6:fe:fa:fe:ec:95:5c:4a:93:3f:c9:
f6:9b:61:a8:89:d4:9f:e3:74:71:8c:c5:a2:e4:fe:
9a:19:ed:93:e5:b4:08:ac:9e:cd:dc:74:99:38:39:
a0:58:5c:b2:b0:0b:69:99:88:b9:20:82:85:a5:f9:
43:98:28:91:ae:d3:16:5e:05:39:8f:c9:10:a9:c3:
b4:f0:b2:2d:6d:3b:ac:cd:38:08:cf:e0:54:02:34:
e4:c0:34:a9:20:1b:bc:ff:1e:02:43:74:31:54:00:
66:f5:43:12:21:71:1a:55:11:a8:34:88:84:41:32:
ab:c3:33:96:fd:62:8e:e8:ee:b0:3e:e4:1f:8f:96:
d1:ad:0a:92:8d:78:ef:09:10:aa:6a:d6:d0:26:e4:
16:be:ec:90:79:99:1d:91:a0:ff:40:c2:57:92:5a:
0b:5b:18:05:32:c1:08:1f:ec:3e:dc:78:ed:93:55:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:83:1A:94:EA:E0:43:9B:53:B9:21:B7:07:4E:74:56:39:34:2A:2A
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d5:d8:75:d7:4f:15:ed:f7:f3:bc:65:35:b1:3b:82:7c:51:
b3:23:9b:ef:31:31:4e:92:16:90:a8:18:57:4d:50:d7:f2:56:
06:3d:49:ab:4b:15:c9:d8:ab:fe:ff:3d:79:75:39:74:f0:a8:
f9:cf:b0:c3:d7:3b:44:92:3e:d1:89:d7:73:3c:2a:4b:f0:94:
d3:09:6f:01:ea:cb:a6:ca:1a:6a:fa:71:31:1c:9d:33:ec:ac:
6f:cc:6c:62:60:ce:1a:66:b8:ad:b1:34:7d:52:15:52:19:7f:
be:97:c9:1c:c0:3a:52:fc:99:da:a2:a3:b6:6b:7a:15:b6:1e:
e5:ed:26:a6:e8:08:f4:12:41:a5:6d:0f:29:77:b9:ac:e2:fc:
ad:e9:a0:45:1c:45:7b:26:87:b0:be:03:d3:96:78:aa:0a:12:
77:92:86:bf:ed:d1:5f:6d:e2:c7:2e:f7:fe:e2:ec:1f:e4:33:
1d:9a:14:fc:1d:1d:2d:5b:8c:3e:c4:ba:d2:dc:c1:6e:d5:77:
98:3b:ca:1b:ae:03:ca:0d:ce:5b:30:36:9b:68:94:81:a3:60:
4f:d4:fc:77:6c:fa:1d:76:00:bf:1a:e0:eb:7d:ed:1e:ae:db:
0b:29:1f:df:d0:3b:43:af:40:64:08:06:bb:52:c5:99:4b:6b:
6f:bd:60:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:38 2026 by rpki-client