Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
File: c_JZnZXskZMn_2h0LWxJwqalSIg.mft (raw, json)
Hash identifier: SDJ19qjDD11PxUYXZWMStQ5cKM3/4FkWp4nTQpkqBdo=
Subject key identifier: B9:EF:7F:40:E8:D3:04:A2:4B:5D:EF:4C:B3:26:B9:6C:C0:58:2D:05
Authority key identifier: 73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
Certificate issuer: /CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Certificate serial: 019D9AE27C3FF10E0D43C2EFA0664E3EA519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 10:00:27 +0000
Manifest this update: Fri 17 Apr 2026 10:00:27 +0000
Manifest next update: Sat 18 Apr 2026 10:00:27 +0000
Files and hashes: 1: c_JZnZXskZMn_2h0LWxJwqalSIg.crl (hash: E1wcNXUjdjoFeQNGe3jJwIBAFCcAk9u/x+yBId+GyMk=)
2: lWnR0ekIz7F2D525B-XOkrpQ0YQ.roa (hash: TEzMU5Zsy6F06BlZcKBW0crSHPdy9jGsr3EscjQ6Tys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:7c:3f:f1:0e:0d:43:c2:ef:a0:66:4e:3e:a5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2599d95ec919327ff68742d6c49c2a6a54888
Validity
Not Before: Apr 17 10:00:27 2026 GMT
Not After : Apr 18 10:00:27 2026 GMT
Subject: CN=b9ef7f40e8d304a24b5def4cb326b96cc0582d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:0b:36:d9:42:9e:20:4e:cf:58:9c:d3:59:
3c:05:ad:9c:34:db:b6:f3:af:ca:04:8d:19:d1:be:
04:1b:35:00:9c:81:6c:9e:1f:1c:4f:73:a6:32:e0:
77:48:c7:92:19:c9:19:da:de:8f:f9:88:21:46:51:
fb:40:a9:75:01:63:a9:63:79:a7:19:d2:2f:be:ca:
65:86:75:56:41:e4:51:38:f1:d7:16:41:16:b1:05:
e3:7a:d2:9d:a7:7b:26:ff:07:ef:f9:8c:84:f8:d9:
e8:cc:a0:96:0f:7a:92:aa:55:92:97:04:e4:c9:e5:
09:fe:96:94:e6:bb:61:93:57:90:ea:93:e4:36:dc:
16:83:ed:b4:d7:f0:06:4e:89:fd:5f:8a:ba:85:1c:
1f:06:5a:dc:fa:61:09:54:57:dc:d3:f0:ed:8b:da:
6d:02:3d:22:4b:6f:44:07:68:6f:50:5a:eb:38:9e:
f8:38:b9:1c:de:ce:04:78:4f:6b:5d:34:38:dc:47:
08:8b:8e:8d:67:02:30:5d:74:c2:59:5c:05:48:cd:
b5:c0:bb:0a:eb:3e:28:bb:28:a0:32:4c:1a:57:6f:
46:a9:83:1e:4f:ea:ca:f9:b8:c6:46:0b:f5:22:e0:
40:70:1e:ec:4b:39:63:6b:b8:44:04:13:a5:63:68:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EF:7F:40:E8:D3:04:A2:4B:5D:EF:4C:B3:26:B9:6C:C0:58:2D:05
X509v3 Authority Key Identifier:
keyid:73:F2:59:9D:95:EC:91:93:27:FF:68:74:2D:6C:49:C2:A6:A5:48:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_JZnZXskZMn_2h0LWxJwqalSIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/510765-e22a-4a5c-be17-18309d8a4c63/1/c_JZnZXskZMn_2h0LWxJwqalSIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9f:8d:19:62:5a:a9:ee:86:c3:b8:09:52:7a:e2:21:aa:e0:
9d:66:c3:6a:5f:c4:ce:56:fd:d8:7b:05:72:ea:63:43:de:97:
bb:9a:6e:ac:e3:46:32:9b:f2:f7:09:af:08:67:fe:c1:6a:18:
af:dd:8c:37:c3:d1:79:06:75:2e:f4:ba:3f:3a:59:6a:eb:95:
0b:d5:c7:08:b9:89:b8:29:22:f5:4f:c3:35:7c:e3:bb:86:ed:
2a:ac:93:b3:20:11:a0:c8:92:24:bb:48:d0:d5:11:15:44:b4:
61:72:f7:83:24:e6:52:6d:27:05:ce:df:ee:43:5e:21:3e:63:
b3:bd:00:52:5b:bd:4f:cc:54:f3:5a:f4:4f:72:e3:6c:be:86:
bd:f6:bf:70:0c:81:9a:ed:af:ce:2f:7d:dc:bc:33:cc:4e:0c:
91:7e:19:3d:48:d2:68:47:1e:04:54:1b:96:78:b1:c7:88:e2:
db:36:3a:9e:06:28:bd:c8:88:da:2b:68:97:5c:b7:7b:ff:c0:
b0:bc:b4:ac:85:9e:0c:ff:b6:f5:72:e9:f2:d3:0e:13:cf:79:
88:2c:0d:e1:bd:65:a6:b2:b7:d7:37:41:d0:eb:60:ee:0d:74:
ec:d7:85:89:75:3f:89:73:d3:dd:b5:e4:c7:28:e6:50:30:a2:
9f:16:84:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:06 2026 by rpki-client