Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier: 2gxDx8++w013u2t7AButVA7F68diiEjZ7ajahsqjevQ=
Subject key identifier: 88:84:6F:D7:E9:3E:29:76:7D:CD:E5:DD:E8:F0:B5:58:BC:C4:15:D5
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer: /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial: 019D99995AE17EFC2FCD6E9C3D1027BF0D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number: 146A
Signing time: Fri 17 Apr 2026 04:00:57 +0000
Manifest this update: Fri 17 Apr 2026 04:00:57 +0000
Manifest next update: Sat 18 Apr 2026 04:00:57 +0000
Files and hashes: 1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: ndmUKp86ccdhDFcDI48xt6gDJb7C8YthqXtYbUJD6Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:5a:e1:7e:fc:2f:cd:6e:9c:3d:10:27:bf:0d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
Validity
Not Before: Apr 17 04:00:57 2026 GMT
Not After : Apr 18 04:00:57 2026 GMT
Subject: CN=88846fd7e93e29767dcde5dde8f0b558bcc415d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:98:18:59:20:4b:2c:76:26:5d:ff:88:6e:
60:59:2c:85:77:95:4b:98:ef:53:e1:93:ca:fe:6f:
95:3b:f8:d7:1f:6e:8a:6b:78:20:6d:26:08:56:8d:
90:4f:23:c1:e4:0a:2d:4a:f5:77:b3:0e:c8:db:a4:
cd:d1:5b:63:5f:94:6f:d1:b4:06:c4:c7:76:43:14:
6e:d0:4d:e7:9f:2c:68:bf:e3:c0:b7:dd:43:57:64:
4e:bd:29:01:7e:42:2b:81:5d:53:a2:3b:79:00:67:
1a:42:b3:e2:78:fa:42:0c:95:78:c3:0e:b6:24:7e:
b6:4c:db:a5:44:d0:72:6e:66:10:66:c4:5b:60:e5:
c4:b7:45:1f:72:d0:13:1e:13:5c:1d:5c:2a:04:eb:
a1:86:be:f1:50:ee:6c:bf:f2:5d:c9:71:2a:94:71:
52:56:b8:bc:db:df:d8:a8:2a:72:fa:80:79:16:5d:
73:41:c0:ed:09:df:2a:d8:ad:2c:bb:a6:41:7e:d3:
98:d1:77:1a:4a:a3:77:47:b1:28:c6:4b:51:d5:a0:
df:23:87:06:f2:c5:00:00:3c:54:6d:3f:c0:26:2b:
11:12:aa:80:d2:ec:56:f2:db:07:e4:bc:ea:62:24:
27:9a:df:3b:50:05:5c:68:a2:df:18:b6:e4:00:f5:
8f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:84:6F:D7:E9:3E:29:76:7D:CD:E5:DD:E8:F0:B5:58:BC:C4:15:D5
X509v3 Authority Key Identifier:
keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0f:fa:4a:64:d8:a1:52:06:d9:34:f9:88:b4:bd:1d:a6:a3:
f0:c4:f7:ee:3d:b4:7b:bf:a8:f5:52:02:4c:a2:67:bf:f6:30:
92:3c:17:b7:bf:e5:97:bd:a6:01:20:5f:af:5f:83:df:5e:20:
27:e3:af:7a:eb:27:d7:51:0b:72:ff:cf:5b:29:91:af:51:8b:
27:79:1e:e1:ff:d0:3f:a4:39:f9:2f:c8:e3:60:38:f2:6b:ed:
69:f4:08:8c:33:73:51:e5:ab:ec:f1:cc:2c:f3:47:1c:87:18:
97:81:b5:56:29:73:cd:b4:0b:79:f3:42:0c:1a:a9:c5:63:fa:
3c:4e:b7:bf:07:a1:33:c8:08:25:2d:d3:d6:13:93:28:e2:78:
26:82:03:09:ae:23:1b:73:be:79:bf:5d:63:31:2b:bc:78:a8:
8e:20:49:ac:ce:dc:4b:01:a1:dc:76:92:5a:ec:74:f9:d9:3b:
e5:ff:54:fa:6f:3c:05:94:e6:e4:a8:61:d0:66:80:2c:7c:7c:
22:07:12:b5:c6:3a:91:98:f7:28:ab:44:f5:c3:da:95:f2:1c:
f1:c8:6c:12:bb:0c:f3:09:57:72:18:d5:28:e0:f8:46:e9:75:
03:e2:ec:69:35:2d:98:ea:45:9c:83:b0:38:be:0b:d2:c4:ad:
94:0f:05:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:18 2026 by rpki-client