Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
File: o_fz-CX46MJWXq77Zud0TJKV3Mk.mft (raw, json)
Hash identifier: Bs1GmUcr84uhxpFJ3z8DLgaATfYlZQEF/+L7B81iGvA=
Subject key identifier: 9B:74:1F:1B:4D:24:0C:24:1F:94:81:28:C6:8C:A0:D8:17:A4:69:EE
Authority key identifier: A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
Certificate issuer: /CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Certificate serial: 019D9AE30F0CE15D21B88A8F18A198AC9D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 10:01:04 +0000
Manifest this update: Fri 17 Apr 2026 10:01:04 +0000
Manifest next update: Sat 18 Apr 2026 10:01:04 +0000
Files and hashes: 1: o_fz-CX46MJWXq77Zud0TJKV3Mk.crl (hash: FaQJsUrj2I7y8BRQwiv9BMHN636A0koOq/Ne5LtB6XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:0f:0c:e1:5d:21:b8:8a:8f:18:a1:98:ac:9d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Validity
Not Before: Apr 17 10:01:04 2026 GMT
Not After : Apr 18 10:01:04 2026 GMT
Subject: CN=9b741f1b4d240c241f948128c68ca0d817a469ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:34:85:ca:fa:ba:da:9d:65:1a:fd:c7:89:
af:51:db:ce:90:67:8d:fb:5d:ca:d0:cf:e3:97:a4:
bb:74:a7:10:48:29:1b:0a:33:50:63:96:80:47:62:
53:ce:f0:c4:6b:b8:2f:08:22:a5:df:52:61:2a:19:
5b:38:ff:85:98:c0:b4:87:bb:4d:b2:0f:59:02:61:
01:13:21:b2:8f:8e:8f:80:3a:ff:ad:d7:d9:4f:4e:
ac:ce:a0:65:6b:ea:ad:f6:20:0f:04:92:ca:69:bd:
63:67:85:93:2b:12:de:d1:27:16:d8:3b:9b:13:ad:
86:0b:95:c2:ce:ae:98:c5:25:bd:b7:50:37:30:3f:
80:b1:54:4a:1c:67:28:a4:d8:48:1d:66:a4:8b:f2:
ec:ef:3f:eb:b2:b1:07:98:07:ad:e2:ba:72:b2:01:
8f:fa:ef:fe:ad:10:90:4e:ab:6c:dc:bc:e5:0d:bf:
1e:d4:15:68:5c:86:a9:c9:58:52:80:18:9d:f9:7f:
2b:5a:56:02:3d:9f:db:17:f5:ec:9e:b9:fa:f2:13:
c4:65:82:8b:10:f5:2d:04:63:7b:cc:66:fe:f1:ca:
92:de:ff:1b:2d:11:94:44:e7:e7:10:28:00:97:78:
47:9e:05:53:58:c8:1d:6b:44:ff:06:47:f4:89:d9:
86:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:74:1F:1B:4D:24:0C:24:1F:94:81:28:C6:8C:A0:D8:17:A4:69:EE
X509v3 Authority Key Identifier:
keyid:A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7c:71:51:f0:a8:38:db:20:03:60:07:35:93:57:9f:24:5c:
be:39:b1:1c:80:27:d8:2f:ec:25:d1:fe:13:78:8d:af:59:89:
d3:0d:cd:8a:ca:52:56:c1:da:eb:2c:4a:33:cf:ec:e9:48:16:
8c:76:f4:b3:8d:d1:bc:77:3f:b8:59:84:11:8f:82:37:f1:af:
67:9d:95:46:23:ed:ab:a6:25:d2:98:37:5e:41:c7:92:25:b6:
81:2c:37:fb:e9:1f:87:1a:c4:c2:f6:98:d3:94:27:cd:c4:b4:
43:0c:1a:06:fd:64:35:4a:7e:59:40:76:2c:ff:1e:ab:42:3d:
4c:11:25:1c:3d:f9:81:79:fa:82:a6:a4:23:6f:5c:e9:d3:a9:
10:f2:3b:40:7f:70:58:94:9e:36:21:42:97:34:54:bf:19:ea:
77:72:b1:64:a1:f4:5b:96:78:66:6c:87:8c:f1:99:b3:6a:5b:
21:15:b6:48:2b:76:e7:13:c4:aa:34:6f:6d:83:e2:c2:30:15:
64:ae:62:87:1f:4c:1c:f1:a9:b2:92:47:2c:11:25:fb:c3:55:
b4:1b:47:b5:a1:71:42:cb:1c:c5:d9:a9:56:32:f1:ba:8e:7f:
4c:29:08:a6:85:cb:d2:4b:e4:02:c2:c1:3e:93:14:85:70:02:
de:91:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:21 2026 by rpki-client