Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier: o+o5q/uInTfJqQCtyIddNVrZ+dITcicT0XVCf7wyiWM=
Subject key identifier: D3:49:47:18:26:29:5B:46:EB:CA:38:41:FA:EF:75:E4:0D:40:28:F5
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 019D9961E7487B67AA8A32238AA043A32200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number: 0FB7
Signing time: Fri 17 Apr 2026 03:00:23 +0000
Manifest this update: Fri 17 Apr 2026 03:00:23 +0000
Manifest next update: Sat 18 Apr 2026 03:00:23 +0000
Files and hashes: 1: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: g/ejkSY/w2mzWhC5MxyiG3PsBARIb85aBWfwhyOTsH4=)
2: avC4TDy0YNmu43wu3PPZQnyz3tY.roa (hash: SjlTG6q/Qs6sxucjwFRvD4MugPMGQX1MddPjbQLIX8o=)
3: pqWAwtSrVWHhYeLyoOZYwb_89MY.roa (hash: UtepypB/1E+cJ1/s4IJjEbaQqJ0MlYB18cpRtSY7yhY=)
4: u0N0v0cqXVFGT5AQTDctFWn93WM.roa (hash: IuAcsweM8Zm44/Mf/txoK9/5Poy7ZOdXCqud2LmxB9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:e7:48:7b:67:aa:8a:32:23:8a:a0:43:a3:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Apr 17 03:00:23 2026 GMT
Not After : Apr 18 03:00:23 2026 GMT
Subject: CN=d349471826295b46ebca3841faef75e40d4028f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:ab:5c:e4:de:30:99:a0:09:79:6a:9e:4b:
95:0e:a1:a3:93:15:b9:db:c5:bd:33:f3:cf:d1:a3:
ea:84:44:42:da:84:88:4c:b1:4b:4e:99:94:7a:ef:
53:66:cf:02:fe:f6:87:79:77:eb:d1:93:5a:29:1d:
42:8c:2c:bc:7b:36:0e:d4:65:54:d0:b3:d9:e1:f2:
be:93:dc:d1:1e:77:1f:e4:fb:ed:3c:f6:c7:5d:ac:
32:39:21:be:5b:a5:de:0b:bb:fd:43:5c:fa:f3:63:
6b:c9:9c:7c:5e:7e:6a:e5:8d:e6:86:77:5a:74:ec:
fa:0d:06:8d:fe:00:42:6f:7b:46:64:6f:d7:3e:7d:
d3:86:12:42:27:d5:da:db:b8:d5:5b:c9:4a:5d:83:
7c:0a:9f:6b:a8:0d:fd:79:49:51:19:5f:2a:db:a8:
08:76:a7:70:bc:c5:68:2f:dc:4b:ca:60:9e:77:d1:
d4:af:72:25:87:c0:02:30:af:cf:15:3e:4f:5b:fd:
57:7b:00:09:a8:48:d7:d7:43:b4:4c:f7:a2:c8:ac:
0e:c9:a4:fe:ac:9e:37:e3:3c:2f:cf:28:93:da:f0:
c6:aa:19:72:23:15:a2:f3:45:c4:96:4f:ab:87:35:
ca:bd:69:35:90:53:c7:7b:a8:00:b9:51:b9:2c:1c:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:49:47:18:26:29:5B:46:EB:CA:38:41:FA:EF:75:E4:0D:40:28:F5
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e6:c7:e6:62:ce:94:d9:4d:e9:60:af:b6:08:64:f6:f7:33:
a9:d8:e8:f9:da:01:71:cb:dd:62:bc:45:36:6c:e7:f0:3e:13:
33:44:cc:1c:4c:bf:5f:d5:df:6e:f7:c5:fc:50:88:ec:ca:26:
34:e8:1d:15:d0:7f:79:43:ac:16:d2:83:f9:75:df:e7:b7:f9:
5f:a3:f4:39:86:0a:89:19:a1:f2:ff:96:4b:06:07:5e:31:9b:
6e:fc:f9:a9:8f:9f:78:31:b3:50:0f:29:c7:21:be:bc:c6:8b:
a2:00:d0:f9:b2:98:ad:a6:d8:21:5e:dc:fd:45:b8:54:a1:37:
53:fe:10:32:93:49:c4:7d:b8:b4:ed:d7:5c:02:24:2b:3d:7a:
11:cb:ef:d2:7c:c6:bf:e6:4a:f8:08:14:b7:4c:5b:2b:e1:48:
49:14:fc:9a:03:c7:8d:4f:14:ef:15:44:30:89:68:e2:26:78:
1e:cf:90:34:aa:4f:fe:3e:9e:a7:cb:87:aa:fb:bd:f8:8a:fa:
c1:8f:b3:8d:8a:a8:8f:13:5e:47:a9:5e:af:3a:70:c6:13:bc:
c7:f1:a5:a9:8b:27:14:91:b2:8a:5c:d6:fb:c7:bb:77:bf:e0:
6b:20:3f:4f:69:a4:3f:aa:a9:08:47:d6:ad:7c:fe:01:86:50:
b8:bd:8c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:12 2026 by rpki-client