Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json)
Hash identifier: tOVgb6rwWX4/6fWW9SG0yGugH41DKlXRAM103lqO4ro=
Subject key identifier: 51:17:93:3D:F2:BB:57:CE:8D:DD:4A:75:06:B0:C5:53:24:DB:44:BC
Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Certificate serial: 019D9A3EDB1FD75F381A469524547A974728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
Manifest number: 0D0F
Signing time: Fri 17 Apr 2026 07:01:43 +0000
Manifest this update: Fri 17 Apr 2026 07:01:43 +0000
Manifest next update: Sat 18 Apr 2026 07:01:43 +0000
Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: uEw7EEphNTlzk8JpNFLP6z8F5G1OxBrZvc5szGvnAPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:db:1f:d7:5f:38:1a:46:95:24:54:7a:97:47:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Validity
Not Before: Apr 17 07:01:43 2026 GMT
Not After : Apr 18 07:01:43 2026 GMT
Subject: CN=5117933df2bb57ce8ddd4a7506b0c55324db44bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:78:d3:fb:bf:34:48:bc:b4:86:6c:de:ff:2d:
1d:aa:b5:73:55:23:8c:00:5b:4a:40:2b:0c:d0:5f:
10:66:c6:73:2d:a7:bb:0e:5b:a7:80:b2:7d:ba:4d:
69:70:49:fc:e4:db:46:6a:f3:ba:07:5c:58:e2:2b:
d4:0d:00:80:96:64:15:27:2c:9a:79:bf:f8:f4:1d:
3c:38:59:aa:cb:62:a5:f2:38:8c:17:02:2c:18:85:
f8:b0:ea:70:ab:cd:54:2e:bd:64:5b:3c:3a:42:da:
f0:ec:86:68:a6:45:8d:12:b2:f7:78:de:27:55:15:
6d:68:e2:5c:0b:08:48:5d:b1:80:ea:a4:6b:58:4b:
0c:0e:67:b2:34:e5:0b:ce:db:7f:6e:96:c7:44:07:
2a:c2:97:4e:84:07:2d:da:fa:db:2f:43:fd:8d:af:
5d:9c:e2:73:36:ca:01:83:22:98:ff:4b:dd:0e:57:
44:6d:3e:9b:6b:d0:61:23:f8:fa:b9:c2:65:c0:47:
d6:55:4e:bb:b7:ed:23:ca:51:89:4f:7f:b9:fe:15:
30:ce:1d:74:a5:ef:11:e3:3c:ba:61:ab:23:ad:d0:
e8:17:2f:bb:7a:5f:be:2f:17:d0:0a:bc:6a:4d:75:
2e:6b:0c:96:9a:52:48:ad:b8:f2:d2:bd:25:02:ce:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:17:93:3D:F2:BB:57:CE:8D:DD:4A:75:06:B0:C5:53:24:DB:44:BC
X509v3 Authority Key Identifier:
keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d0:9e:64:fe:7d:2b:73:b8:b3:b3:95:f9:a5:f9:1e:a9:30:
2a:34:43:14:98:ca:dd:33:46:f4:f3:80:e3:77:c8:cf:95:26:
05:a7:5a:cb:a6:05:32:c8:fa:04:3c:a2:a7:fb:fc:a0:9d:b5:
63:4d:92:9c:25:46:e7:e7:1a:74:77:be:d4:29:9c:9b:b1:9e:
5f:43:c3:d7:40:54:13:a9:14:76:ed:6d:81:aa:ea:1a:91:e0:
61:e5:b1:40:85:a4:25:a3:ee:22:6a:27:9a:0e:06:a2:3c:8f:
b3:b0:a1:b9:e6:2a:d1:94:7d:69:40:95:bf:3b:ff:f2:21:26:
72:81:97:6c:e9:b5:08:58:87:7b:31:18:a9:ad:95:93:f3:c0:
a6:a3:25:6a:36:c2:28:3c:b9:0b:fa:ff:91:66:59:2d:bd:e0:
92:3f:5b:46:9f:70:5a:cd:f5:c0:ee:5f:63:94:ba:46:19:bd:
d6:38:34:9e:41:9b:aa:0e:3f:ec:ff:26:62:24:b3:60:85:c5:
10:8b:8c:a1:0f:aa:fa:55:8a:9c:6b:8e:33:53:de:b2:54:21:
5d:2a:6a:64:d0:09:6c:f9:cd:c9:30:fd:47:7e:42:1b:c2:50:
81:ce:91:55:77:69:e9:40:1a:ac:95:60:50:66:06:05:00:a6:
fb:83:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:49:38 2026 by rpki-client