Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
File: Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft (raw, json)
Hash identifier: NPdjpSRv9+gBKMPVT3UogDIIbbRV6+m5XQWR3upWB8Y=
Subject key identifier: 46:95:A3:F6:20:31:D9:59:03:29:97:64:42:0A:6D:4B:5F:85:30:8A
Authority key identifier: 67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8
Certificate issuer: /CN=679bd78e3819770c116e577bacfad1993392bdb8
Certificate serial: 019DA378605BB5217FD38AEAFBCC001E897A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
Manifest number: 1325
Signing time: Sun 19 Apr 2026 02:01:08 +0000
Manifest this update: Sun 19 Apr 2026 02:01:08 +0000
Manifest next update: Mon 20 Apr 2026 02:01:08 +0000
Files and hashes: 1: Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl (hash: nvXHgStObot3HJqFGfPID8jvOFDIeg5rqCabGasFJ0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:60:5b:b5:21:7f:d3:8a:ea:fb:cc:00:1e:89:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679bd78e3819770c116e577bacfad1993392bdb8
Validity
Not Before: Apr 19 02:01:08 2026 GMT
Not After : Apr 20 02:01:08 2026 GMT
Subject: CN=4695a3f62031d95903299764420a6d4b5f85308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:9c:b6:ec:08:8d:71:91:86:32:86:59:b7:
d8:38:7d:0c:fa:d5:21:86:e9:41:bb:cd:52:90:2d:
15:7e:97:f8:0b:c9:0a:80:ff:57:b2:26:4b:e3:6a:
7c:99:0a:aa:a1:96:f7:d7:c7:a6:2c:17:a1:3f:6a:
ed:a2:71:2e:3f:40:43:a7:9d:db:42:94:9b:1b:e1:
28:83:ed:63:5f:db:75:ea:ad:41:47:8e:7d:b0:90:
38:ff:0d:a3:54:1c:5e:0c:2a:79:43:88:51:c6:50:
72:38:95:23:85:81:e6:b6:e5:c7:96:02:e2:89:f7:
d5:bf:97:75:cf:e9:f4:14:4b:af:be:21:98:de:8e:
34:56:e2:ac:3c:0f:cd:14:93:b4:e9:a7:d2:c8:1d:
a6:4d:15:04:e8:fc:d0:96:ae:95:ea:0c:5b:2b:b3:
10:bb:7b:cb:7b:bf:61:66:14:5d:f7:6f:1d:3c:5d:
4b:dc:6f:9c:39:c2:63:35:30:2a:e3:c5:92:a1:26:
0e:3f:8c:e6:3b:f6:fb:3f:07:8a:0e:ae:1d:cc:57:
8e:ac:02:a8:a6:30:5d:bb:ec:76:3c:ec:b2:94:76:
aa:c7:a1:eb:e6:d3:98:c6:da:7a:2b:4f:54:10:9a:
c1:10:bd:76:ae:7b:98:66:48:a6:be:f7:69:a3:16:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:95:A3:F6:20:31:D9:59:03:29:97:64:42:0A:6D:4B:5F:85:30:8A
X509v3 Authority Key Identifier:
keyid:67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5a:42:5c:b0:be:85:9b:01:63:5b:1e:38:cc:63:d3:3b:41:
c5:a4:8e:67:9b:99:bf:c7:ee:ae:ff:5a:ab:c5:6d:b2:38:9c:
aa:ca:d9:d7:48:6b:53:93:67:43:95:33:9d:17:86:16:74:5a:
33:24:c5:5d:78:ac:0d:ea:3b:24:8a:54:61:5f:88:9a:4f:e9:
d7:7b:67:e5:b9:ce:47:14:08:e3:36:0c:ea:05:2f:a0:39:a7:
37:45:a7:1c:4c:11:62:9b:39:77:aa:03:c3:39:73:74:48:94:
87:52:06:4f:b5:0d:5f:19:8a:52:34:6d:81:b0:0d:ce:fe:db:
60:1d:f3:71:3c:19:8a:ac:0d:95:4b:de:40:60:f8:ee:d8:26:
75:19:ab:46:88:09:38:31:a1:a9:0a:74:fd:d2:25:8b:d0:09:
6a:d3:e4:2b:9e:2c:3b:be:1d:81:b1:d2:5a:52:32:03:ed:47:
65:0e:d4:de:54:df:d1:70:0c:f8:94:5c:5f:63:08:02:51:f2:
a8:f0:b5:6c:b5:1a:73:96:2f:3d:4f:4e:77:51:ce:95:9d:94:
28:68:69:09:ba:be:e7:00:68:22:bd:9c:92:18:03:96:dd:8d:
c4:11:e7:26:d3:99:14:fa:83:09:2c:31:25:37:19:91:7f:06:
ac:bc:d5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:05 2026 by rpki-client