Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File: 0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier: HTSSgpg/KOS1itWW4rrTLkHKHsJ3Zc5+Jg/EVuTDxLM=
Subject key identifier: DC:92:38:56:7A:1A:69:D1:AE:C2:47:58:CA:FF:82:FC:FA:14:99:B8
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 019D99D05FD6094B40AFEDC3C746C90D7686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number: 1813
Signing time: Fri 17 Apr 2026 05:01:03 +0000
Manifest this update: Fri 17 Apr 2026 05:01:03 +0000
Manifest next update: Sat 18 Apr 2026 05:01:03 +0000
Files and hashes: 1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: rEIygAcd42x42rqI0I4hNAfYogLxW4SteR38GI2R61I=)
2: 3dnL_zi3FNnTaz0mdMUS2sR8-h4.roa (hash: yjPFLmbKjZ2sKMH0GGDX4iM6oXsyBOBi8BX/jG36XcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:5f:d6:09:4b:40:af:ed:c3:c7:46:c9:0d:76:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Apr 17 05:01:03 2026 GMT
Not After : Apr 18 05:01:03 2026 GMT
Subject: CN=dc9238567a1a69d1aec24758caff82fcfa1499b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:fa:bd:94:b5:91:05:bc:92:2a:16:ce:4f:
8a:59:40:7e:45:a4:4c:9f:45:86:15:8a:e5:cd:8f:
ef:7b:e5:80:7c:db:bf:80:b7:05:59:15:f2:33:a0:
68:60:86:fc:70:55:71:16:01:3e:c5:6f:7a:29:5f:
4b:6c:9e:f7:52:6f:96:15:70:bc:3e:41:0b:09:15:
1f:9d:68:e6:f6:44:65:ab:5a:08:df:59:80:d8:83:
f3:ac:26:4b:fd:12:b1:db:6c:d8:5a:58:35:64:9a:
92:9f:2e:f1:6e:31:84:2a:af:ef:f4:9b:02:aa:d2:
f4:b3:ee:8a:23:85:30:53:4e:95:a7:f4:a9:0c:cf:
5c:1b:3f:b6:7e:d5:24:e0:56:07:27:44:a3:73:af:
0e:67:d8:e3:cb:aa:93:de:50:64:01:b4:39:56:7e:
6b:90:0b:2e:29:81:c9:2c:26:7e:e3:8c:44:fb:6a:
58:1a:53:6b:0f:d1:38:d4:4b:23:7d:67:ba:3b:01:
2c:14:78:82:3e:4d:d0:00:aa:c3:75:07:ba:8c:15:
e4:41:c1:fe:b2:58:a9:7a:a9:43:f1:d9:c3:86:fe:
9f:0b:5c:71:6a:54:99:53:82:ac:75:a7:0f:19:3b:
19:52:c5:e2:3d:93:29:08:4e:af:20:be:54:a6:4e:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:92:38:56:7A:1A:69:D1:AE:C2:47:58:CA:FF:82:FC:FA:14:99:B8
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8a:26:5f:15:fd:f1:42:1d:1a:8c:46:0e:a4:35:89:23:bb:
a4:77:ad:eb:f7:4f:b6:24:85:90:ff:0e:49:c7:76:6e:51:29:
4a:3b:86:3f:2d:1c:eb:28:86:26:7e:ff:e2:02:51:e8:5c:14:
2c:ea:9b:20:16:33:68:a6:34:c9:71:04:e8:8d:95:21:5a:45:
b8:64:50:0a:82:b1:ef:3d:03:f7:ff:59:dd:5c:0f:07:36:9c:
c7:5e:0b:3e:78:da:eb:9f:9e:c9:be:7c:09:54:c2:ab:90:d7:
31:5f:fc:d0:82:d2:b6:c5:74:fb:83:92:62:f3:4a:ca:ad:87:
31:f6:a1:df:71:9b:0f:f9:d2:c2:e7:b6:c8:20:57:71:1f:c4:
85:ee:43:ab:bb:80:1c:54:bd:ff:1e:2c:8b:47:01:61:ec:bf:
76:16:60:42:f7:0e:34:f8:37:ef:2e:bd:f8:92:68:16:3d:fa:
f0:b2:53:31:c7:a0:93:5f:aa:bf:f9:ba:e3:92:70:6c:60:ca:
97:1c:58:7f:0e:48:d5:3d:c3:b7:38:42:40:9f:4f:f2:42:65:
fa:af:86:f4:32:44:ef:e3:25:3c:32:14:96:c1:17:22:d7:ff:
54:9b:21:63:17:7e:5a:11:9c:cd:40:1e:9d:19:c7:06:03:9d:
f4:3a:09:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:12 2026 by rpki-client