Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
File: RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json)
Hash identifier: QUYApFIKzoAiBYghAnc1W7lB+SJntWLtVkEgLjehS8A=
Subject key identifier: 69:53:12:79:1E:1F:C5:A1:B5:04:DA:B3:A7:FD:B0:C9:B7:2C:BF:32
Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
Certificate issuer: /CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Certificate serial: 019D9A3E94014775DED47002C409BA1D947A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
Manifest number: 0D78
Signing time: Fri 17 Apr 2026 07:01:25 +0000
Manifest this update: Fri 17 Apr 2026 07:01:25 +0000
Manifest next update: Sat 18 Apr 2026 07:01:25 +0000
Files and hashes: 1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: J01eBJ/ThQQ80RhSOYcj+AsmxSN2N/TQhwJ58c09InM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:94:01:47:75:de:d4:70:02:c4:09:ba:1d:94:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Validity
Not Before: Apr 17 07:01:25 2026 GMT
Not After : Apr 18 07:01:25 2026 GMT
Subject: CN=695312791e1fc5a1b504dab3a7fdb0c9b72cbf32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:9c:0d:22:30:a6:eb:05:47:24:6d:94:01:
8f:09:0b:47:ac:d3:0d:36:5f:a3:6d:59:e8:6a:3a:
cc:5c:b7:79:ee:64:07:1f:a1:22:eb:d1:92:57:94:
79:d4:bc:30:51:ec:63:e2:38:38:e5:e6:af:fe:6a:
da:14:1c:89:84:e8:3f:4d:7f:69:3f:15:10:ef:61:
ab:dd:03:8e:2c:77:a9:0e:e6:29:13:29:71:2c:61:
e7:e0:c4:33:f4:c7:2e:8c:a7:66:3e:99:8a:f9:f7:
c0:38:c2:87:5f:cc:0a:96:47:e5:1d:9b:3c:fd:03:
4a:d7:e0:4d:78:df:f5:1a:da:06:7d:17:65:c0:35:
8d:fe:e3:02:4b:88:54:1c:8f:52:f1:ac:9c:fc:0c:
0f:24:ef:02:17:1e:c1:77:5e:fe:f9:64:bd:c6:d4:
26:11:48:63:16:fd:e3:fe:69:64:07:e1:62:52:a5:
1a:0a:8d:65:e8:18:20:e2:37:3b:c0:87:e2:ca:51:
80:71:6d:8d:f7:de:03:26:3d:42:59:1f:0d:3b:5d:
a5:21:9a:00:14:94:a2:6f:0d:d0:9a:1d:d2:3e:08:
f6:f0:2c:4e:e4:dd:62:a6:c2:d3:c5:89:b0:67:e7:
84:1e:5c:de:44:e9:26:b8:be:e4:30:90:df:c4:04:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:53:12:79:1E:1F:C5:A1:B5:04:DA:B3:A7:FD:B0:C9:B7:2C:BF:32
X509v3 Authority Key Identifier:
keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:54:30:0f:d5:93:30:72:e5:09:30:d2:76:df:0a:69:87:ce:
4c:c5:22:05:fc:2d:dd:c2:f8:0e:df:28:a7:4d:b2:aa:48:da:
ee:26:86:c6:9e:f5:bd:96:4e:13:0b:99:a1:e4:71:0f:a8:0d:
ca:53:b3:14:6a:98:85:f7:2f:60:d7:7e:23:9f:cd:28:b7:81:
36:14:eb:c0:bc:4a:99:51:32:a1:48:77:64:4b:e7:c5:b4:9b:
f5:43:92:54:bb:61:07:e4:73:24:c0:96:22:d0:16:ff:03:79:
ea:fb:fe:fd:3c:73:f1:0d:30:75:22:c9:b7:58:4f:2e:59:17:
2e:3c:b6:5c:4f:25:7d:84:ca:02:6b:1a:f5:3e:cd:2c:c2:0d:
a8:8f:0e:4d:59:a9:b4:fb:e0:cf:de:ca:b7:56:a8:7b:7e:a6:
53:8a:d6:a0:69:cf:3d:1e:a0:53:96:46:7c:51:d8:6b:89:9d:
4a:87:a4:84:13:58:98:88:6f:20:a9:33:e6:da:f2:38:0b:cf:
b8:e9:1d:47:9d:74:b4:b1:a7:8b:7c:31:a4:76:e7:97:db:59:
99:3e:aa:65:72:3b:f0:b9:92:a9:ba:9b:39:db:4c:f3:c6:f1:
0e:71:49:3d:c0:55:e4:d0:7d:cb:90:7a:d1:a9:c3:8d:70:b5:
1a:b9:ce:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:00 2026 by rpki-client