Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
File: Z42bouOWhCO-_F7tBXGbMABX18s.mft (raw, json)
Hash identifier: tO1Wf8wBCqcO+tru/cCZOhif9zD0P5eVh6LTw7DIlXo=
Subject key identifier: 0B:A6:62:8C:3F:22:26:A1:77:9C:C6:F9:71:7B:12:60:F9:B8:50:BF
Authority key identifier: 67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
Certificate issuer: /CN=678d9ba2e3968423befc5eed05719b300057d7cb
Certificate serial: 019D98F5164D91F6C78494A9FF4A9476C7AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
Manifest number: 05B7
Signing time: Fri 17 Apr 2026 01:01:32 +0000
Manifest this update: Fri 17 Apr 2026 01:01:32 +0000
Manifest next update: Sat 18 Apr 2026 01:01:32 +0000
Files and hashes: 1: Z42bouOWhCO-_F7tBXGbMABX18s.crl (hash: paXqjfaJ/hwFeBhm5KTPhKU7q4kIXtBJicNsDn3atSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:16:4d:91:f6:c7:84:94:a9:ff:4a:94:76:c7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678d9ba2e3968423befc5eed05719b300057d7cb
Validity
Not Before: Apr 17 01:01:32 2026 GMT
Not After : Apr 18 01:01:32 2026 GMT
Subject: CN=0ba6628c3f2226a1779cc6f9717b1260f9b850bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:aa:82:ed:88:c5:40:ec:95:80:6c:f2:8b:75:
e9:fa:95:b6:be:d2:e2:3c:fd:ff:9c:a0:58:fd:bf:
05:92:cc:22:6d:42:89:3c:75:8a:c2:1f:ea:85:cd:
3f:1f:77:78:fb:c5:91:d0:1e:af:97:bf:ac:85:3a:
c0:2e:f0:f8:05:d7:ef:ba:9c:eb:2c:7d:b8:8d:e2:
d9:ad:88:6d:a3:2d:d6:ad:58:c6:05:e7:2e:1f:b0:
f7:72:ef:c4:a2:34:4a:96:3d:a3:c3:68:f8:af:60:
db:7a:0a:28:7d:6b:c3:43:9d:c6:47:d8:ef:24:f6:
62:ed:a0:94:59:8a:fc:bc:ae:9e:df:7c:ec:91:ff:
f9:5b:5d:1a:a8:85:52:08:0c:69:0b:e6:0d:36:b2:
5a:ee:07:36:38:bd:6f:34:84:8c:cf:3c:83:f0:e8:
3c:6a:94:f1:d8:3f:1a:8f:08:99:5b:28:db:46:98:
78:40:4f:6a:de:2e:11:86:aa:bc:95:55:15:a6:a3:
ad:fe:d4:fe:c6:7d:fa:69:fb:b7:93:4e:13:59:03:
fa:d0:73:bf:74:c6:85:18:90:fa:7b:e2:30:6a:e2:
7b:01:10:53:e3:70:fb:ca:98:ba:5f:0b:a4:cf:84:
f3:0a:91:a6:67:d1:49:f3:f6:7f:26:f5:f5:c6:fe:
35:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A6:62:8C:3F:22:26:A1:77:9C:C6:F9:71:7B:12:60:F9:B8:50:BF
X509v3 Authority Key Identifier:
keyid:67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:99:a9:b9:39:e6:1b:8b:bf:c0:7d:e9:63:a6:23:b8:e9:af:
6c:44:1e:de:92:5a:aa:3d:d5:a1:27:12:b0:48:e2:d8:38:ed:
34:00:09:73:0c:d8:16:42:28:9c:89:ee:4a:ff:ec:07:b8:8a:
12:16:6f:18:c9:4e:ea:13:8d:35:5f:f6:f1:a3:f0:ed:a2:3e:
2e:ed:97:99:ce:cf:34:1c:40:5d:88:58:3c:06:35:62:56:82:
8e:47:41:16:80:63:6c:f5:d6:d0:29:d2:03:24:06:bc:b8:a0:
38:92:39:c7:79:82:a7:d7:c3:71:4a:0b:76:04:06:67:3e:3f:
a4:0b:4f:ac:f2:06:69:38:20:5d:5a:28:db:7f:4f:91:34:34:
f0:67:66:63:82:0c:09:b9:1e:df:75:61:3e:42:5d:13:20:f5:
d6:0f:80:fa:43:a0:b2:af:26:7c:ed:ad:e8:f3:42:49:81:52:
0e:52:9a:b8:70:05:ba:06:23:bb:49:09:5b:fc:7a:4b:fc:41:
83:2a:35:6e:a3:79:95:42:c4:d3:a4:b4:90:f8:87:24:47:3b:
ed:f6:7d:be:b4:67:f5:77:4d:b3:c5:67:6f:c6:ea:63:47:5c:
30:37:4c:f2:13:68:08:e6:b6:05:d2:b4:a4:37:51:4e:89:c3:
74:ae:4f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:07 2026 by rpki-client