Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
File: ZvEr0F_5yRriI48ykBy6rhwzcP4.mft (raw, json)
Hash identifier: DjSJITfCETWLhXgsGHxZNEX4XAJyUmd4EzldvyNySbE=
Subject key identifier: 53:F1:00:74:B6:D0:26:8A:06:64:6A:42:3B:FE:10:8E:01:A8:38:2C
Authority key identifier: 66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
Certificate issuer: /CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Certificate serial: 019D9D3F9BD30C401B8795F201F5A528B67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
Manifest number: 09B7
Signing time: Fri 17 Apr 2026 21:01:24 +0000
Manifest this update: Fri 17 Apr 2026 21:01:24 +0000
Manifest next update: Sat 18 Apr 2026 21:01:24 +0000
Files and hashes: 1: ZvEr0F_5yRriI48ykBy6rhwzcP4.crl (hash: +Lzn5BssCoItxq4I61xjU1CJ7hPtE3GdLAEjSFhjwLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:9b:d3:0c:40:1b:87:95:f2:01:f5:a5:28:b6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Validity
Not Before: Apr 17 21:01:24 2026 GMT
Not After : Apr 18 21:01:24 2026 GMT
Subject: CN=53f10074b6d0268a06646a423bfe108e01a8382c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:f2:67:b5:18:3b:10:27:71:09:24:54:71:
c4:16:66:b2:a0:c1:b3:0f:2e:50:f7:b3:7d:f8:3a:
0d:b8:e5:c3:1e:ee:de:90:6a:f3:96:5d:49:ea:f9:
63:81:e7:02:34:c0:f9:2c:d8:44:e7:c0:87:23:79:
39:03:b3:33:5c:d5:e0:aa:b5:2b:44:d5:e1:31:33:
dc:f9:b4:e7:20:64:e6:fe:1b:f9:4f:e0:50:a7:34:
52:8b:32:9c:4e:55:34:ab:24:8d:2c:15:2e:e8:94:
3a:6d:d8:d3:5a:61:7b:b7:0d:80:15:a3:25:f5:af:
71:fe:f4:2b:df:aa:64:9d:e0:ea:4d:e4:c6:6e:5f:
da:48:30:34:35:a4:b7:a8:bb:70:15:dd:8d:43:82:
75:c0:50:c1:01:45:84:d6:cb:c9:62:55:d5:06:c8:
bd:29:1b:44:31:06:dc:20:78:a3:a6:8a:29:79:c8:
31:8d:af:47:b5:49:00:b2:bb:29:18:9d:ee:af:f6:
6e:98:14:52:6f:bb:78:17:7e:49:04:67:11:f9:07:
cb:cf:ce:ad:63:48:2b:87:ac:aa:31:2b:fd:f0:2d:
56:3b:e4:5b:34:a5:43:db:91:49:5c:32:8c:0c:3e:
ae:ad:41:b9:14:36:c4:2f:4e:56:87:be:1e:e8:7a:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F1:00:74:B6:D0:26:8A:06:64:6A:42:3B:FE:10:8E:01:A8:38:2C
X509v3 Authority Key Identifier:
keyid:66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:51:1c:02:c6:50:52:53:b7:11:cf:ca:4c:20:90:c3:b4:41:
d8:1c:66:09:5c:36:dc:61:2e:e4:b9:64:32:c3:17:00:54:c5:
0f:f2:a2:75:dd:76:77:d9:04:a6:a8:e1:fb:ec:78:4b:c2:d4:
f5:dd:ba:f0:44:95:ee:54:e4:22:61:d7:4d:dc:df:b6:26:d9:
58:6a:0c:01:80:90:00:f0:38:fe:9b:96:f2:16:bc:8a:c6:0c:
8f:44:44:81:4c:05:c1:1f:1a:70:63:cc:66:b4:a6:37:2e:37:
a4:22:26:53:34:12:10:96:6e:ee:69:6a:12:56:42:b0:1f:53:
13:02:04:10:77:3c:80:6b:01:bd:03:2a:60:2a:e6:ca:7d:4f:
9f:df:d2:cd:ab:68:51:0e:89:5c:18:cd:73:3f:c5:c5:6b:2b:
2b:21:46:0f:c2:fc:68:79:fb:a2:be:65:ba:7e:33:21:23:25:
a3:cb:34:f9:22:17:ae:38:23:b9:07:15:67:18:44:94:b8:82:
43:83:02:a8:45:16:75:d2:a7:65:71:89:a8:e6:f0:1c:40:36:
9f:ae:de:f8:7e:9b:06:04:44:b3:0d:0e:fa:9a:15:5d:48:66:
92:29:dc:11:80:0b:50:68:f9:a1:8c:39:25:98:5a:1a:4d:f5:
85:d4:23:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:26:22 2026 by rpki-client