Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
File: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft (raw, json)
Hash identifier: NlBarTjog5gtSujyAPxQJ5Sdw5jqRdgifA6aGA4NEjw=
Subject key identifier: 58:03:99:5C:B7:E4:66:BA:8E:B3:3B:0B:91:3C:C5:D7:F0:69:84:44
Authority key identifier: CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
Certificate issuer: /CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Certificate serial: 019D9A3EC54A1065CA77FD96A6ACA3329AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
Manifest number: 0B9E
Signing time: Fri 17 Apr 2026 07:01:38 +0000
Manifest this update: Fri 17 Apr 2026 07:01:38 +0000
Manifest next update: Sat 18 Apr 2026 07:01:38 +0000
Files and hashes: 1: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl (hash: oBbEHpl93BpABAUHb4AwAIP4x6veIc1IfN8+O5o3K9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:c5:4a:10:65:ca:77:fd:96:a6:ac:a3:32:9a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Validity
Not Before: Apr 17 07:01:38 2026 GMT
Not After : Apr 18 07:01:38 2026 GMT
Subject: CN=5803995cb7e466ba8eb33b0b913cc5d7f0698444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:23:c8:1f:c2:63:79:0d:e7:49:7c:fc:bc:
24:d7:d5:11:41:79:10:7c:0e:f7:3a:9b:a2:21:60:
9b:0f:6d:de:b3:f0:65:d2:39:9b:37:b6:b4:7d:c3:
86:05:0d:7b:d6:84:7d:86:6c:54:3a:6d:34:c2:aa:
1a:2f:11:dd:46:0b:6c:1b:af:51:51:07:37:bb:71:
aa:cd:51:f7:ad:e5:52:ff:0e:6e:e0:c4:23:fa:2e:
11:94:e0:07:a1:6f:8e:3e:ce:83:e3:a1:76:fc:9d:
14:ed:12:4f:3c:fe:c1:24:e9:d6:c8:c9:65:32:02:
7e:05:a2:59:e3:83:0e:f2:3e:6f:22:04:1e:8b:18:
67:bb:28:62:75:d3:1b:1c:35:bd:06:58:a8:57:ed:
06:ba:c9:d0:37:d2:06:47:0d:29:33:e6:2d:79:2a:
4a:52:9c:63:fc:6a:29:13:47:90:d6:86:2c:39:b8:
c7:fb:d2:b1:21:2e:3f:df:7a:bc:1d:e3:0f:73:09:
eb:69:e7:d7:e4:cb:df:06:5d:39:a2:c4:03:4a:08:
56:d8:b2:d5:52:db:3c:94:65:e3:d0:07:41:3c:31:
12:af:e6:19:38:f6:50:97:ed:ce:97:28:7a:cf:c3:
e7:81:96:f3:e3:44:59:82:3e:bb:91:7b:75:37:fe:
04:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:03:99:5C:B7:E4:66:BA:8E:B3:3B:0B:91:3C:C5:D7:F0:69:84:44
X509v3 Authority Key Identifier:
keyid:CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b1:b6:50:fb:ba:33:69:df:4b:a9:ad:09:43:3d:7d:72:da:
d3:90:81:c3:d4:0b:9a:6e:76:fe:66:f7:25:1b:42:77:2e:96:
4c:d5:98:e9:a8:f8:df:4e:14:62:a7:3d:86:17:9c:89:ba:74:
1d:fb:aa:04:f1:1e:56:b4:80:fe:13:0a:02:b4:3c:fb:1a:d4:
ce:37:5c:2a:5b:aa:7a:31:07:35:78:73:ab:2f:f4:3f:94:9a:
9e:1d:03:3a:03:6f:0b:ca:34:01:7d:7c:5e:ed:33:05:a5:f7:
e2:cb:f8:9e:6e:cd:92:5c:09:24:75:bb:ab:c0:c9:eb:c0:78:
04:1d:9e:9c:1b:d9:00:07:7e:b1:a4:12:34:14:28:a9:4f:c8:
96:b6:40:09:ec:4a:0b:34:61:f7:f6:e4:c9:23:4f:59:b6:74:
c4:47:97:4f:83:e2:91:b7:f9:6b:91:91:56:fd:60:a0:87:40:
c1:52:d2:2a:c6:42:85:79:6b:91:88:53:da:e3:60:68:81:e5:
68:06:a8:2c:2c:72:15:fb:ce:35:7b:33:83:e8:a1:cf:fd:30:
2e:4d:af:8b:e5:53:1d:9a:41:77:50:be:89:97:db:d1:ad:87:
65:25:0b:c2:ae:d1:e0:07:97:2c:62:32:35:2e:59:c3:96:36:
03:ae:92:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:23:03 2026 by rpki-client