Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: KWiyofOfiPcOcp6JpiAGgadTJJX4845AKX1LyC2SEi4=
Subject key identifier: 74:9A:43:44:D5:37:4E:42:F2:D2:EB:29:DC:73:D8:C4:CC:C1:23:6B
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 019D9C62FBDD7A877B5444CAD7E0D2B1203A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 0459
Signing time: Fri 17 Apr 2026 17:00:25 +0000
Manifest this update: Fri 17 Apr 2026 17:00:25 +0000
Manifest next update: Sat 18 Apr 2026 17:00:25 +0000
Files and hashes: 1: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: XCdV5naeYoaNJPdHH+infmJiFi4Yw0gSJEFbXbbxQag=)
2: _7yKofbHnJoEbJpKfmaDh_UzpU4.roa (hash: SGPyBt5E90o9ZLuMZHW0/rutTar66Sv5UUe187RDyyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:62:fb:dd:7a:87:7b:54:44:ca:d7:e0:d2:b1:20:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Apr 17 17:00:25 2026 GMT
Not After : Apr 18 17:00:25 2026 GMT
Subject: CN=749a4344d5374e42f2d2eb29dc73d8c4ccc1236b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d4:5c:c9:b1:26:8b:d7:ae:2b:1c:e4:33:35:
0b:92:9f:b8:1f:5a:17:1a:1b:21:c1:b0:c8:8a:61:
e4:79:52:92:bd:6d:77:86:4d:1a:cb:61:59:87:0d:
14:a7:02:16:46:79:ff:50:3c:a9:cd:d3:ed:63:01:
a2:c7:2d:39:cc:6f:77:8c:8a:12:75:3c:ad:dc:41:
d3:26:7f:6e:e3:87:c6:d7:e8:8a:e0:4c:eb:8f:75:
6a:15:b0:3c:3c:4b:31:ea:01:e0:20:be:83:da:fe:
ff:f5:c1:b3:57:e0:63:33:a2:d0:df:32:56:92:a2:
d9:33:5b:d8:59:2f:23:9d:bb:70:f6:11:b5:81:f2:
40:36:b2:9b:0b:5b:79:10:1b:2e:24:6f:e8:11:4e:
1c:e1:87:59:8e:70:13:b6:9c:f3:37:75:68:29:16:
1f:89:fb:47:0d:d4:dc:d6:b4:71:66:7d:dc:2a:da:
83:88:aa:46:43:9d:42:09:8c:9d:5e:ca:88:61:84:
e0:00:67:f0:71:ad:fa:14:c4:b5:f6:f8:f1:68:2d:
3a:0f:7e:28:69:a4:e8:25:10:dd:56:67:35:80:e0:
eb:f5:dc:93:93:b7:8b:b7:5b:49:a0:08:f3:a0:9c:
ff:cb:3d:43:2c:45:20:d8:ae:69:76:de:f1:79:3e:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9A:43:44:D5:37:4E:42:F2:D2:EB:29:DC:73:D8:C4:CC:C1:23:6B
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:97:b6:a6:db:2f:28:ff:07:fd:1f:17:e3:e8:4d:8e:36:67:
89:34:c5:90:45:47:e3:42:76:1f:64:ed:e3:49:a8:7a:48:6b:
da:50:8e:96:85:9f:a2:5e:17:57:fd:37:22:e1:ce:cb:c7:31:
06:a4:29:d1:e5:33:ee:34:ab:5e:0f:d5:25:2e:82:9b:e0:11:
59:16:1c:68:68:aa:c1:72:f4:43:d3:4c:a9:5e:38:40:65:1d:
54:7b:7e:d1:63:9f:3e:92:8c:b3:fe:22:e2:43:6c:c1:9b:d0:
a1:5b:93:c1:63:63:8a:e0:c3:98:d7:50:88:20:bf:ee:fc:44:
dd:66:0a:3c:84:ab:2d:af:28:1d:34:14:25:8e:35:d8:27:ad:
20:08:ae:f1:3e:14:59:3a:62:f2:47:31:f9:79:15:db:26:44:
6d:1f:12:16:08:22:11:41:fb:fa:4e:27:cc:14:c5:ff:9b:3b:
14:69:98:41:85:d7:c2:b6:b1:14:fe:c7:c4:d3:32:d2:7f:5b:
25:dd:1c:c3:3e:be:4f:f2:ff:70:4c:fb:8a:6e:ae:99:7c:3c:
95:40:34:a5:19:ec:49:a9:0e:fc:a2:bb:9c:a4:9f:5e:ad:a5:
40:0a:2a:c6:83:8d:c9:70:e5:9e:0c:a5:7b:ff:fc:47:82:08:
9a:39:93:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:30:14 2026 by rpki-client