Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File: z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier: PmUSnZecmAsUEJBh3YQsxigBTPvHA65+iF7BY5aTpp8=
Subject key identifier: 29:C1:56:8B:8A:3E:E4:05:6D:30:67:73:A8:DD:AE:5E:60:51:AF:97
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer: /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial: 019CADC7406DEA924949AB17D2B09C4C520D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number: 07F1
Signing time: Mon 02 Mar 2026 09:00:42 +0000
Manifest this update: Mon 02 Mar 2026 09:00:42 +0000
Manifest next update: Tue 03 Mar 2026 09:00:42 +0000
Files and hashes: 1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: Y8wQB0uUvmf0YrXVJRgPyDIaEI/v82LenneOu6Iy3KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:40:6d:ea:92:49:49:ab:17:d2:b0:9c:4c:52:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
Validity
Not Before: Mar 2 09:00:42 2026 GMT
Not After : Mar 3 09:00:42 2026 GMT
Subject: CN=29c1568b8a3ee4056d306773a8ddae5e6051af97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:80:4d:59:0b:cd:b6:73:07:b6:47:60:a2:
3b:16:d2:a0:d2:89:c8:a2:99:a0:22:6f:eb:fc:35:
cd:ad:ec:d2:8b:f9:61:ee:6d:fc:81:5b:3d:a6:1e:
47:da:4a:78:f3:c1:1b:20:af:a6:89:89:3b:30:10:
1f:84:5c:15:a9:0f:e3:39:28:3b:ba:63:3d:fb:dd:
30:39:86:99:e0:f7:82:39:25:f9:38:cc:55:3a:d7:
1d:01:7a:83:ff:96:18:27:08:22:c1:51:3a:39:cb:
35:ec:d7:4a:96:c3:ee:77:46:83:a8:38:3a:c5:8b:
6b:c2:8d:3c:13:ac:28:60:96:b2:ad:51:76:d4:b1:
de:f3:ee:5d:e7:d3:ee:d0:75:dd:cf:0a:fa:06:73:
a6:64:8f:2a:f4:c0:9b:86:72:0c:6e:30:6d:75:96:
2a:1d:e1:a9:33:05:29:1d:ed:d0:dd:a3:e9:77:88:
f0:12:74:31:af:4f:f6:34:3d:5c:7d:78:48:6d:67:
28:e1:07:d6:37:e7:26:0c:d6:09:67:7b:b6:fa:d4:
a4:2e:a3:d6:b7:99:1a:5d:7b:47:c2:6d:0d:b9:fb:
5b:62:da:38:04:2e:84:93:65:c6:cb:f4:54:6c:71:
e7:df:43:aa:b0:0a:ad:2d:cc:98:de:a5:c2:8b:93:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C1:56:8B:8A:3E:E4:05:6D:30:67:73:A8:DD:AE:5E:60:51:AF:97
X509v3 Authority Key Identifier:
keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b5:d3:95:17:3a:cc:64:21:db:3e:2b:8c:8c:97:12:ad:06:
33:a7:82:06:db:1e:43:b6:de:35:e5:83:21:ce:89:6d:8b:c4:
1e:62:bb:88:7c:d8:20:cb:32:9e:92:36:db:e4:2b:e4:83:af:
4f:4c:20:f4:5c:4e:bb:c8:7a:23:97:a0:50:dc:2f:76:b9:21:
13:50:2d:91:4a:63:1e:3f:39:cf:36:e5:b5:be:8e:e4:1a:e7:
43:8a:1f:bf:c3:87:57:1e:58:fa:21:20:df:ff:ca:22:21:4c:
79:5f:19:1f:a2:ea:9e:74:38:5a:bd:da:b2:3d:4e:18:8c:93:
e8:8c:70:54:39:0a:9c:de:df:bd:02:cd:ce:a1:a9:3b:31:6a:
b6:5a:5f:ca:9e:42:d7:0f:5c:22:f2:d0:88:59:ec:03:c1:02:
e4:62:c9:6e:73:fd:79:44:8f:0f:5a:cd:aa:ff:9f:f3:29:92:
f3:08:97:e6:c6:03:8b:57:7b:31:44:d5:d8:3f:f3:41:34:d6:
48:0a:89:78:57:74:65:0c:8c:6a:ab:5d:ba:11:10:c5:c3:a3:
9a:03:dd:ae:c4:5c:b3:59:2e:ea:32:b9:fd:c3:6d:a5:0f:96:
3d:92:1f:50:e6:c4:69:dc:12:63:85:40:90:6b:b4:d6:89:4b:
d9:cc:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:29:37 2026 by rpki-client