Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File: z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier: 12tLkSHUEXa7LNVsYSZYScQ6mXADEaHmKrpciKvpg1U=
Subject key identifier: FA:30:BF:C3:A5:C7:55:5B:48:1B:CD:E6:60:67:3C:74:DA:75:11:C2
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer: /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial: 019D9D3ED0949B9AA5B95D7D670DB4868942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number: 086D
Signing time: Fri 17 Apr 2026 21:00:32 +0000
Manifest this update: Fri 17 Apr 2026 21:00:32 +0000
Manifest next update: Sat 18 Apr 2026 21:00:32 +0000
Files and hashes: 1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: EIrfYwvVdAEc3pnWQrBWW5DB6b573EWfg4TZvK14axc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:d0:94:9b:9a:a5:b9:5d:7d:67:0d:b4:86:89:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
Validity
Not Before: Apr 17 21:00:32 2026 GMT
Not After : Apr 18 21:00:32 2026 GMT
Subject: CN=fa30bfc3a5c7555b481bcde660673c74da7511c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:c1:86:b4:04:44:e7:fd:c4:46:f4:9b:a0:
5c:86:86:07:15:06:40:22:f8:00:3d:53:a3:0d:75:
be:31:c8:65:3c:29:43:af:a2:7a:dd:e5:68:fe:26:
42:09:11:cd:b6:aa:88:32:52:a9:2c:1e:e4:dc:0f:
a3:df:33:ba:a3:07:e9:9b:bf:38:08:6c:36:7d:1a:
f2:1f:4e:c0:7b:12:9f:a4:ff:6a:94:fe:32:41:b3:
ed:96:b2:87:fe:fc:ee:49:ad:e3:23:ce:da:bf:ec:
d2:08:56:fa:dc:5e:ea:89:8b:ac:46:46:b2:6e:3c:
7b:b0:f1:ec:45:93:10:1f:cd:cb:13:eb:bb:26:fa:
9c:d5:28:9d:73:da:d5:a0:b3:a4:89:a6:65:00:93:
db:44:ca:cb:de:78:b3:00:91:87:be:a0:a3:37:e1:
57:c7:79:b1:fe:e0:90:fe:23:c5:1b:ac:5d:df:42:
b7:50:ab:b7:c2:54:84:fb:17:72:7d:6c:5a:61:12:
c6:4f:0f:0b:93:5b:77:81:98:8a:aa:29:38:2f:19:
ad:04:2e:35:9d:37:8a:10:d5:dc:25:54:f2:bf:61:
1e:e8:b0:c3:b2:3d:6e:f1:47:48:2d:85:0b:1e:23:
41:d0:73:17:ff:7e:64:ad:62:01:a4:54:32:f7:97:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:30:BF:C3:A5:C7:55:5B:48:1B:CD:E6:60:67:3C:74:DA:75:11:C2
X509v3 Authority Key Identifier:
keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8a:16:fd:97:89:3f:5e:c7:1d:30:8e:c2:04:ea:dc:6c:d7:
44:0e:5c:4f:82:6d:62:00:b9:58:59:2c:45:e9:7a:0d:7b:a9:
4e:95:84:b7:c8:99:fa:ca:74:17:3e:c6:3f:c2:43:3a:e6:3c:
56:06:98:b9:b0:4d:53:9a:07:29:d0:62:31:2f:25:ca:85:d6:
fc:03:0a:63:17:9e:70:d6:b4:2b:35:be:2f:c3:0a:d6:60:52:
86:17:21:b6:c0:d4:56:72:88:36:05:bb:0c:77:35:df:b4:91:
b0:2a:94:3d:83:94:a9:e7:ce:8d:5b:d1:a4:c2:65:34:bd:dd:
80:e6:84:08:a3:20:34:2b:bd:96:05:fb:f2:09:7f:bd:0f:3d:
45:fb:9f:a2:bc:1a:0b:88:64:cb:2a:dd:cd:a0:07:86:00:76:
73:61:1e:67:19:86:5c:f1:fd:57:36:fa:5b:94:af:84:66:cc:
99:d7:4e:6c:b7:56:a8:6b:d6:47:b2:40:fa:50:a8:14:80:0c:
55:eb:97:76:41:a1:cb:29:d9:17:57:23:2c:e5:4d:7c:bc:98:
d6:52:ce:ba:c6:69:13:76:07:76:b1:92:56:39:72:69:bc:08:
e5:ed:06:85:86:7f:d0:b2:f4:21:bf:8e:ed:76:c4:f1:f0:4e:
6d:c2:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:06:01 2026 by rpki-client