Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier: nTq4z+aHWPQioZyS5Xw/KfaE/tfwKhpVwH3omy70lPs=
Subject key identifier: 4B:D6:B1:74:E2:D0:43:0A:02:EC:2C:05:5F:59:AC:EB:9B:DC:96:20
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer: /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial: 019D98F48BC02DD1BACF8BAE70DF87E2D6C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number: 11B8
Signing time: Fri 17 Apr 2026 01:00:56 +0000
Manifest this update: Fri 17 Apr 2026 01:00:56 +0000
Manifest next update: Sat 18 Apr 2026 01:00:56 +0000
Files and hashes: 1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: uEvRJMUkPNwSqYsMbW+2UQ3BPEa2LtyQses8Fub63SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:8b:c0:2d:d1:ba:cf:8b:ae:70:df:87:e2:d6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Validity
Not Before: Apr 17 01:00:56 2026 GMT
Not After : Apr 18 01:00:56 2026 GMT
Subject: CN=4bd6b174e2d0430a02ec2c055f59aceb9bdc9620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:93:e6:cc:75:df:4e:33:b4:cc:75:84:b4:
38:93:5d:2b:47:53:0f:f3:ab:84:f2:68:41:06:06:
0e:c7:91:af:28:16:d7:96:d3:58:70:ab:a2:cb:ab:
6e:15:bc:75:ee:04:81:f1:11:ee:7e:e0:3e:8c:b1:
bd:f7:f9:01:26:b8:79:54:f2:6f:a5:a3:d7:a9:51:
87:1e:9c:cb:ca:7b:70:a6:99:40:6d:0c:c6:5f:5f:
eb:77:05:f0:d6:aa:5b:66:5a:d8:5e:0f:f2:8a:b9:
94:29:15:60:08:55:c9:a0:03:56:61:00:a1:55:7d:
5a:06:49:0d:ea:34:fe:46:2c:5c:dd:03:dd:f6:c6:
2b:73:c8:46:10:e4:17:0b:65:d1:4c:fe:ef:7c:70:
be:a5:e3:04:e6:f9:fa:3b:07:eb:30:12:87:47:34:
df:a1:26:d9:fd:93:63:b3:ea:29:18:3e:0f:c1:4f:
6e:b7:6e:a8:07:a0:97:94:fd:f8:3d:c6:54:99:c6:
a7:66:0a:81:01:31:8d:29:d7:5c:56:c9:30:fb:33:
87:2d:74:2f:23:f9:5b:98:d5:9e:77:f8:c1:f1:91:
4e:19:13:0d:8a:40:fe:5b:0d:51:65:f9:ec:92:d2:
62:f6:c6:24:55:55:3e:ff:26:63:f8:8a:db:2e:0f:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D6:B1:74:E2:D0:43:0A:02:EC:2C:05:5F:59:AC:EB:9B:DC:96:20
X509v3 Authority Key Identifier:
keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b3:84:c6:62:1b:d1:6f:68:5b:84:2d:c7:ce:23:0e:3c:0c:
a8:8b:aa:08:b4:59:df:a6:6f:89:c8:36:e9:41:44:52:3f:9a:
7d:bc:f1:c9:af:03:a1:aa:7e:22:4d:9b:99:23:21:e9:12:5c:
a9:b9:20:e7:f7:5b:94:0f:fc:62:b4:8d:24:b8:63:8e:ad:27:
0d:a1:d4:7f:8d:4c:6d:a1:30:10:91:88:d6:61:0a:9e:a2:a6:
de:09:f8:05:c5:40:e2:88:f0:a8:c3:88:c8:f9:8b:69:09:5f:
34:cd:b8:d4:0b:c6:c3:de:21:65:e0:77:82:25:3b:75:fd:af:
da:fd:1c:3d:85:ee:17:3b:32:13:aa:f1:da:46:bb:a9:aa:9a:
78:28:34:74:86:86:dd:36:7a:d4:85:9e:2e:69:2f:cd:11:52:
36:d2:82:5c:a3:6e:53:66:4c:ad:a9:6e:ca:fa:66:9f:d2:84:
57:78:09:26:91:b9:b8:a9:97:e2:97:fd:23:68:4b:08:95:de:
9f:e5:9e:da:29:14:5b:54:00:b1:08:b9:c6:51:24:c5:f4:2e:
83:4b:08:3c:bd:01:cb:7b:bd:4f:22:1d:07:a5:e1:76:5b:3e:
06:38:b6:e3:03:33:86:22:5c:e7:a3:7b:f0:60:b6:29:f5:44:
d1:79:1e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:56 2026 by rpki-client