Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: egO5+HbquyrtFSLP/UWKfhf8F1tcxsGZSy7FrcWswiA=
Subject key identifier: BA:27:BD:1B:55:F5:3C:7B:7C:B3:85:8F:2C:72:C6:05:B7:FC:C2:8E
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 019D98F4642F4DC61FD2DA9D7722AEB4F436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:00:46 +0000
Manifest this update: Fri 17 Apr 2026 01:00:46 +0000
Manifest next update: Sat 18 Apr 2026 01:00:46 +0000
Files and hashes: 1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: 0DFhqRZl/TFmRTG5LE8QK0ylRkWGPmZ4EUYJdi5pEWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:64:2f:4d:c6:1f:d2:da:9d:77:22:ae:b4:f4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Apr 17 01:00:46 2026 GMT
Not After : Apr 18 01:00:46 2026 GMT
Subject: CN=ba27bd1b55f53c7b7cb3858f2c72c605b7fcc28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:6d:3f:46:b8:64:15:c2:b2:d3:82:e6:7c:
6d:d0:85:af:c2:4e:fe:ef:71:ed:41:e1:9a:6a:18:
aa:9f:c6:cd:3c:7a:e2:b3:84:72:f8:68:a5:08:a1:
46:04:72:a1:30:5c:72:95:29:55:41:12:8b:dc:95:
12:e5:0c:37:df:94:a2:1f:79:69:95:8d:ac:83:1f:
39:13:13:4f:45:ad:0e:5d:97:7e:cf:5b:61:53:99:
b6:08:46:dd:61:b9:56:17:59:90:8c:05:14:ed:0e:
11:36:20:a7:e1:5d:68:3a:00:aa:e5:de:01:ca:e9:
f0:69:6e:13:36:76:79:3b:59:31:95:69:b0:1a:b2:
07:14:7f:e1:8b:ce:e7:24:77:17:a7:c1:69:47:19:
12:6f:a3:fd:fb:5c:8e:4a:c8:b6:c7:08:ff:9a:0a:
fd:e3:05:e1:55:1f:75:8f:20:e6:64:df:8f:11:f2:
05:60:eb:fe:a4:80:06:24:7b:23:d5:05:7f:9a:b0:
4d:17:b5:07:96:57:22:1a:b1:34:57:df:76:d1:fd:
80:d4:e6:63:64:62:90:8f:7f:15:04:01:1d:5a:e2:
20:d9:60:58:c0:c1:0b:6b:9e:fe:50:45:6a:75:41:
61:e4:9d:25:37:6f:25:04:39:e7:cd:e1:93:93:e8:
4e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:27:BD:1B:55:F5:3C:7B:7C:B3:85:8F:2C:72:C6:05:B7:FC:C2:8E
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:40:d4:96:e4:b3:88:30:16:34:bd:f1:90:24:35:0a:bd:c7:
ba:46:31:55:f3:b6:ef:38:37:7c:a4:90:14:59:b0:37:ab:43:
bf:9a:fa:f0:be:54:19:ef:0d:ff:3b:77:25:a5:88:17:06:31:
79:4a:e8:7c:fe:31:08:2e:f8:21:d9:8b:23:23:03:df:01:79:
30:68:3f:5d:0c:66:2f:b4:7b:fb:ac:be:52:8d:41:99:27:93:
f6:03:68:5b:8e:c2:1d:17:6a:98:a3:ee:1f:7c:15:95:b2:9a:
a0:d3:81:7f:e6:20:a9:76:ad:ae:4c:75:27:35:75:eb:9b:7c:
bf:60:26:3b:b3:16:9a:9d:49:4c:e6:a6:36:a1:61:73:10:7f:
9b:9e:0c:48:44:ef:2f:0b:b4:c2:87:91:68:0e:66:25:ad:66:
3f:25:08:a3:27:84:9a:42:d8:1b:18:d9:b8:bd:ce:bb:bf:cb:
53:6f:77:d1:b5:5d:e7:1a:98:94:86:2b:04:bc:1c:0c:9d:04:
0d:7a:66:70:ed:c9:b1:ae:62:0d:b9:e8:f3:71:bc:13:05:de:
b8:d8:7f:b4:42:e5:0a:31:19:7b:a2:12:98:4e:12:f1:87:09:
d9:ec:ea:cc:e2:ce:15:83:5c:53:4c:9c:a9:36:76:8e:ca:65:
2e:6f:e2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:01:24 2026 by rpki-client