Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
File: z2wawDKfN1f-h9q2IGq8FXHES7A.mft (raw, json)
Hash identifier: Ri6Zzhg+fYCvyoJPzDAtsaxTbWXjGL1QcLM+lsttxkQ=
Subject key identifier: 11:F8:E2:42:F3:4D:94:55:88:ED:C6:40:23:16:38:48:DD:04:5C:15
Authority key identifier: CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
Certificate issuer: /CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Certificate serial: 019D9A3E74ADDF60E50951C01AEC77839AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 07:01:17 +0000
Manifest this update: Fri 17 Apr 2026 07:01:17 +0000
Manifest next update: Sat 18 Apr 2026 07:01:17 +0000
Files and hashes: 1: z2wawDKfN1f-h9q2IGq8FXHES7A.crl (hash: 3IPRx9pW1lsYdzPWQWSoG9dy6bCFThKpX5ND9qPg78Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:74:ad:df:60:e5:09:51:c0:1a:ec:77:83:9a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Validity
Not Before: Apr 17 07:01:17 2026 GMT
Not After : Apr 18 07:01:17 2026 GMT
Subject: CN=11f8e242f34d945588edc64023163848dd045c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:01:34:50:cf:f2:7f:51:db:da:fa:fe:e0:
54:4d:c3:75:27:10:00:56:f8:be:c3:aa:5e:12:e4:
f4:78:47:ef:df:68:1f:1d:04:8e:f1:72:16:55:ab:
9d:90:2c:91:6a:e0:58:4f:c4:1c:07:a7:ba:6f:61:
fd:23:7a:ea:80:86:ce:bc:a6:a2:c9:28:2b:af:51:
03:f2:ec:a6:c7:17:9f:29:9b:da:72:94:54:f0:1b:
47:2e:a1:b7:b0:68:d2:8e:16:d9:27:dc:c8:85:ea:
25:23:d7:af:dc:f1:96:c6:34:d0:d7:9a:2d:c8:24:
88:24:e3:4f:b7:d6:e9:69:4a:37:6b:2c:01:a5:10:
da:b4:22:43:5c:7c:27:33:49:6e:d3:52:95:97:3f:
14:6e:41:20:55:64:36:14:49:79:2d:84:85:2e:22:
64:6c:70:9e:1d:b8:43:b0:7f:f4:e1:04:b1:b6:d8:
3d:aa:11:65:74:9b:39:59:f9:64:50:8c:3f:35:a8:
0b:f0:61:23:15:b8:e9:f1:a4:c3:d7:33:84:67:5a:
14:13:06:f1:f8:b9:88:ec:1e:99:2a:30:67:7c:6f:
78:cd:5b:ff:1a:94:d5:c1:56:55:aa:e7:31:ca:be:
52:a7:fd:b9:30:ce:9b:d9:99:3a:86:77:8a:06:a1:
04:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F8:E2:42:F3:4D:94:55:88:ED:C6:40:23:16:38:48:DD:04:5C:15
X509v3 Authority Key Identifier:
keyid:CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2b:07:84:dd:65:c8:a2:63:43:7b:04:01:3a:aa:e0:28:29:
b9:21:b5:55:6d:b5:62:c2:d6:48:a5:10:ed:29:87:c4:64:1f:
37:95:62:10:96:97:15:0b:fb:da:32:e8:97:d0:31:e4:2e:18:
ed:b8:99:d0:db:f4:de:47:37:30:fc:89:a7:70:70:23:00:97:
4a:61:e4:ed:f6:8e:a5:48:a7:3a:0c:74:57:88:fe:70:25:bc:
72:02:48:3f:75:84:c0:8c:92:c0:16:bf:c1:52:a3:4f:3a:e7:
ce:db:1b:bf:99:97:e6:54:78:e7:f1:3f:a0:90:79:8a:eb:59:
d3:85:5c:f8:13:41:c7:7e:af:e5:e5:f9:e7:db:65:6d:19:00:
f0:03:ea:8a:4d:e8:44:18:c0:58:6f:ed:1a:ba:ab:97:4c:8c:
ca:a5:e1:f8:a5:60:ff:80:13:90:a8:f3:c4:00:a4:41:89:72:
12:19:97:54:09:42:72:51:85:06:94:eb:fa:66:33:54:12:e2:
07:b7:b3:cb:c2:75:2f:f3:f9:28:a2:18:2a:35:9c:61:b4:ee:
7c:5f:49:69:39:33:ad:a7:54:06:15:71:21:6e:1b:11:3c:63:
c6:59:ad:5c:04:5a:eb:81:ea:6b:9e:e5:aa:99:69:92:81:88:
82:f7:a8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:25 2026 by rpki-client