Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
File: zfDoJMYqWSimUCFO8z6Md-fB_40.mft (raw, json)
Hash identifier: TiBEbxTo+RBklqame3wBCFl+E8eoE2kUrKheXLANUMs=
Subject key identifier: B8:7B:88:CD:43:E3:87:D4:19:C2:84:18:F6:B5:A7:FA:B8:F2:89:67
Authority key identifier: CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
Certificate issuer: /CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Certificate serial: 019D98F5390B4F8DC495FFFE9DE6E3416DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
Manifest number: 1262
Signing time: Fri 17 Apr 2026 01:01:40 +0000
Manifest this update: Fri 17 Apr 2026 01:01:40 +0000
Manifest next update: Sat 18 Apr 2026 01:01:40 +0000
Files and hashes: 1: zfDoJMYqWSimUCFO8z6Md-fB_40.crl (hash: TjzUYFCBfvgKK3/c0/BDE6hPQKgkaNqxj3Qg3t4oadk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:39:0b:4f:8d:c4:95:ff:fe:9d:e6:e3:41:6d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Validity
Not Before: Apr 17 01:01:40 2026 GMT
Not After : Apr 18 01:01:40 2026 GMT
Subject: CN=b87b88cd43e387d419c28418f6b5a7fab8f28967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:aa:94:81:b7:c3:e6:1d:83:f1:4b:56:11:4d:
ed:cf:a4:7b:9f:20:b0:85:6f:b8:92:88:b8:54:2e:
bf:36:c6:c6:d4:bd:70:d2:6f:9d:8e:4f:6f:2c:f9:
fb:2b:6f:69:9d:8b:90:f8:23:01:dd:5c:fd:4a:ec:
83:7d:ec:28:cd:08:0e:e7:b7:81:58:0a:cc:3c:42:
98:56:44:55:b8:30:12:b7:f6:48:d9:04:94:73:15:
a8:1f:58:04:b5:4a:82:a4:bc:67:69:99:06:6f:28:
3f:56:06:c3:6a:b4:54:ef:c0:67:f8:68:13:a6:e5:
e8:2b:74:97:c6:e6:91:99:b7:4f:18:f9:0b:06:50:
0a:3d:a1:fa:0d:ae:1e:21:04:a5:a2:41:10:54:79:
e4:57:ba:1f:56:a3:4b:09:fc:da:f1:38:82:f2:74:
28:06:b9:eb:9e:f7:e0:32:fe:7b:32:be:27:be:e3:
f8:5c:9c:c1:ba:57:ab:f7:09:6f:92:40:f9:0e:fd:
3a:8e:50:47:f3:1c:ce:32:22:8a:25:44:bd:e5:eb:
82:27:39:58:42:0e:4b:82:0f:df:af:6d:b1:f9:ff:
3d:ea:c0:81:fe:c9:8b:91:29:78:d7:3c:ae:0e:d9:
4c:09:a4:e9:e9:0d:cb:8d:7d:ca:07:d2:6a:fb:72:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7B:88:CD:43:E3:87:D4:19:C2:84:18:F6:B5:A7:FA:B8:F2:89:67
X509v3 Authority Key Identifier:
keyid:CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a5:58:54:f4:f7:fb:bf:a6:b4:50:3b:2a:42:46:d8:35:51:
d8:e6:ff:93:38:8f:db:19:f2:98:80:7a:cf:97:bb:90:12:48:
18:41:ea:ca:f6:e8:5d:fd:6a:78:8d:c8:68:4e:8c:a7:40:c1:
65:5e:53:85:5b:15:97:66:3b:b2:1e:0b:33:58:01:4d:12:de:
90:43:7c:d6:5f:25:8e:c3:ba:0c:8a:f6:da:c0:29:93:09:a8:
13:1f:10:5d:40:ff:31:96:c7:e0:4f:17:15:ce:32:be:ce:d6:
1f:1c:8d:11:72:a2:21:7e:31:96:76:b7:a0:be:e5:bf:79:3b:
be:65:5f:76:ea:3b:0d:7c:81:cc:aa:7f:6a:68:ab:f0:ca:20:
84:65:7f:e0:96:cf:af:9d:a1:23:a7:df:0b:30:a6:94:4e:1e:
5d:41:25:32:2e:b9:86:b0:e9:44:c5:30:e4:69:37:5c:8f:e2:
ab:25:24:93:67:fc:f6:4b:97:5c:db:c4:2d:73:6f:bf:07:1e:
5b:ca:0c:33:84:1d:dc:0f:e5:04:72:2d:17:cf:46:5a:fd:de:
ff:46:12:8c:58:f0:99:0e:cb:e3:2b:a7:cd:4a:89:57:19:79:
be:ed:29:1d:6e:8c:03:41:27:7d:2c:05:37:1c:f9:37:a1:d3:
4c:96:94:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:38 2026 by rpki-client