Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: otbSo6Shc4ir9acbXmmxnS60gh+V7Loj+aIB0FDuqfg=
Subject key identifier: F6:0D:94:98:8F:ED:8C:6A:B4:CD:47:0E:9B:2E:BA:50:A8:D9:31:4C
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 019DA30A895C3117B81DB7BC64B71646AF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 18C2
Signing time: Sun 19 Apr 2026 00:01:09 +0000
Manifest this update: Sun 19 Apr 2026 00:01:09 +0000
Manifest next update: Mon 20 Apr 2026 00:01:09 +0000
Files and hashes: 1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: Js0K5AybpwIyIq7cz0iq8bNiDM8nr6h48/WVQNO75Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:89:5c:31:17:b8:1d:b7:bc:64:b7:16:46:af:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Apr 19 00:01:09 2026 GMT
Not After : Apr 20 00:01:09 2026 GMT
Subject: CN=f60d94988fed8c6ab4cd470e9b2eba50a8d9314c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:77:6d:df:35:23:a2:52:26:25:e7:18:8e:
91:5b:0f:f3:59:79:30:aa:73:57:36:5d:5d:e4:8a:
a5:e1:09:3a:d8:60:2a:82:bd:b9:f1:64:0a:eb:88:
d2:bf:b7:d2:51:16:8e:da:82:ee:6b:fc:50:6a:97:
33:a7:83:0a:6c:87:95:95:a5:76:29:c8:0f:4e:e0:
70:07:15:1f:55:12:80:1f:5b:a7:4c:2b:d9:a8:eb:
f6:a5:e6:c2:2f:23:68:3f:5e:4c:0b:3f:0d:22:43:
01:20:ff:0f:18:eb:96:73:c4:96:7a:70:b6:5c:bc:
6d:2e:b7:8b:7e:25:63:c1:e5:f8:20:96:e8:d9:1d:
37:c4:66:8c:5e:9c:dc:b9:66:76:0f:55:cc:c0:eb:
89:98:35:78:de:12:21:52:ad:ad:ca:83:bc:1b:cf:
80:6a:9b:8d:04:a5:c2:ad:be:bf:04:fd:e2:e4:ad:
63:63:ed:e9:eb:af:0a:53:99:ec:40:89:30:dd:db:
79:15:8e:73:7d:5e:31:d3:48:7f:e5:33:7b:ba:57:
e7:0e:32:20:9e:ca:5f:a8:af:5a:1f:ec:5a:f8:90:
67:0b:9c:d8:f9:cc:0e:77:0e:5d:78:88:f5:e0:7c:
51:0e:57:25:c8:c4:12:7d:68:a4:39:31:e5:52:17:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0D:94:98:8F:ED:8C:6A:B4:CD:47:0E:9B:2E:BA:50:A8:D9:31:4C
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b2:da:cd:64:97:1b:04:71:8c:15:a0:1e:ca:77:ca:1f:31:
12:f2:b1:42:09:4a:5f:b4:4b:56:8c:22:cd:30:f6:29:31:e8:
b5:e5:73:43:a5:a7:ab:c2:ba:81:a0:7d:76:94:56:2c:51:9b:
b2:4e:4c:df:a9:3a:f9:51:b3:9a:9a:e0:9f:56:b7:8d:ff:dd:
fe:cc:8a:0c:63:7e:6a:35:fb:17:e1:a2:9d:8d:d6:52:a3:fa:
29:a3:f8:1d:dc:ed:fe:9f:91:0f:0f:6e:72:a5:1e:5d:b8:7a:
78:d5:7b:8c:12:63:80:47:f3:79:c2:3b:22:6c:ea:e4:35:02:
66:cb:bc:9d:f6:7c:ce:b3:00:70:60:3b:14:1c:3a:b3:52:f3:
0b:6b:eb:e7:68:16:7e:42:b2:cd:a6:fe:cf:24:d0:fa:41:66:
42:be:24:4e:7a:59:7d:58:27:aa:6c:85:15:dc:58:b6:85:33:
52:35:1d:4a:c3:bf:4c:fc:08:67:76:ef:8b:2a:51:64:89:bb:
fc:54:a0:94:34:2f:ab:17:7d:b1:fa:81:50:6c:23:4e:78:2c:
60:2f:a4:55:90:02:7e:aa:d1:73:13:d9:96:f7:ef:d9:e5:07:
60:cf:12:21:55:72:4b:5b:89:5f:8e:6a:d4:fc:18:da:6e:af:
a3:03:de:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:42 2026 by rpki-client