Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
File: z9rC7BEEwkXZyrqOthY46drxADk.mft (raw, json)
Hash identifier: whCxTY3p9IaL8VplA7kWWtY97fpe+FN4g7QoUrOecU4=
Subject key identifier: D3:B1:DE:D0:F7:23:E8:C1:09:FF:66:91:2D:2A:A0:09:B3:5A:CA:3C
Authority key identifier: CF:DA:C2:EC:11:04:C2:45:D9:CA:BA:8E:B6:16:38:E9:DA:F1:00:39
Certificate issuer: /CN=cfdac2ec1104c245d9caba8eb61638e9daf10039
Certificate serial: 019D98F47AD8D8CBD72502C7838AB93F27A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
Manifest number: 13FE
Signing time: Fri 17 Apr 2026 01:00:52 +0000
Manifest this update: Fri 17 Apr 2026 01:00:52 +0000
Manifest next update: Sat 18 Apr 2026 01:00:52 +0000
Files and hashes: 1: z9rC7BEEwkXZyrqOthY46drxADk.crl (hash: Epn+qWhqlUQ6tLY4zmpll8yTGPrqsDqh8oWU3QZ1msA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:7a:d8:d8:cb:d7:25:02:c7:83:8a:b9:3f:27:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdac2ec1104c245d9caba8eb61638e9daf10039
Validity
Not Before: Apr 17 01:00:52 2026 GMT
Not After : Apr 18 01:00:52 2026 GMT
Subject: CN=d3b1ded0f723e8c109ff66912d2aa009b35aca3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:fc:35:36:0e:b0:93:8b:85:80:13:07:54:
b5:72:55:a3:97:ce:b6:14:db:11:0c:e5:18:55:b7:
ee:e5:b2:0a:df:56:a6:b8:ca:eb:b4:d8:8b:58:2c:
12:f9:c2:6e:ba:f3:57:17:a6:86:11:02:75:5e:4c:
14:6b:3e:96:31:fa:38:2d:ad:5f:b8:0e:c4:58:83:
03:c4:63:13:56:64:f7:65:fd:41:c2:a3:cf:b0:15:
ef:13:4b:64:40:91:5a:ef:52:f0:c2:d0:66:75:50:
71:94:e7:6f:ff:60:e9:5f:67:c7:28:be:0c:18:b5:
48:5c:33:0c:c6:ba:6e:23:39:b7:73:a1:53:20:2c:
50:9a:21:cb:e4:3e:52:6f:84:7a:9f:95:6a:25:e6:
7f:d5:db:31:cb:ed:99:f6:ab:22:e9:82:5d:23:5e:
49:39:c8:fa:e6:e6:d3:4b:6d:60:26:d8:1b:da:31:
3b:a1:a2:b2:ea:96:61:04:fd:ee:cd:51:47:e6:de:
03:9d:61:76:60:22:b5:f9:e7:32:72:20:95:5b:ea:
de:bb:54:18:98:26:31:07:5e:4b:40:f1:f8:34:fe:
c9:8a:85:8e:a5:13:4c:e7:e6:7b:3b:14:4c:7c:c4:
3b:2a:59:6a:5f:50:6e:e4:17:cb:cc:7c:3a:8c:4c:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B1:DE:D0:F7:23:E8:C1:09:FF:66:91:2D:2A:A0:09:B3:5A:CA:3C
X509v3 Authority Key Identifier:
keyid:CF:DA:C2:EC:11:04:C2:45:D9:CA:BA:8E:B6:16:38:E9:DA:F1:00:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:22:c1:07:19:79:ef:77:d0:5c:30:dc:df:33:cf:4f:5e:1b:
5c:55:9a:3c:3f:ee:b1:74:ba:ee:bc:76:78:10:0a:da:ea:02:
36:86:86:8b:7d:a0:58:37:1b:71:f6:b0:fb:22:07:1a:26:ff:
3b:b8:a8:e0:9c:1b:80:40:3c:87:fc:32:07:26:ad:da:51:c8:
e8:6c:23:8d:76:c1:64:ba:a6:ca:ab:fa:45:a4:a8:1e:54:ca:
90:51:5f:e0:5a:cc:ac:ee:98:eb:cd:b8:e0:7e:5d:74:9b:90:
a7:87:ae:46:6c:aa:f4:7c:0d:22:25:9f:de:c3:67:81:79:e8:
71:a7:41:09:6a:94:ab:7a:7d:3a:6b:d0:c6:e6:6b:f2:cf:7c:
1b:c5:89:19:36:db:da:08:ca:48:95:5a:9b:e9:d7:cd:e3:cd:
36:bd:66:de:8a:92:46:e6:35:b3:3b:fd:c0:7c:56:87:72:0c:
be:a9:1f:46:03:9b:1b:49:74:b5:9a:44:02:33:01:ac:4b:90:
fc:79:e9:a5:a1:54:e4:b1:f9:9a:52:d2:59:62:98:ed:a8:7f:
c1:db:b1:b3:1b:24:a1:1e:97:ce:83:10:5b:78:ee:c1:09:2b:
6d:cd:b4:b6:01:e9:59:f8:8c:f8:ab:92:5a:b3:e8:d5:ce:58:
24:c9:84:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:06:05 2026 by rpki-client