Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
File: zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json)
Hash identifier: yusuvUYY8xcOAlWsYmDscI4Tdvkhd3/tsfRVQj4z6ak=
Subject key identifier: C8:A3:61:9F:2C:77:B3:31:BD:2D:92:1C:34:24:95:2A:E0:64:30:D7
Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Certificate issuer: /CN=cefe18ac971c82a777f7db19ffab334a32537703
Certificate serial: 019D9A3E9F6DC28466296687E58EAD886113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
Manifest number: 1374
Signing time: Fri 17 Apr 2026 07:01:28 +0000
Manifest this update: Fri 17 Apr 2026 07:01:28 +0000
Manifest next update: Sat 18 Apr 2026 07:01:28 +0000
Files and hashes: 1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: oMkQTFtQgOcNa2aHtdQOmmZpl01wBLNenRs4NfMPyro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:9f:6d:c2:84:66:29:66:87:e5:8e:ad:88:61:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703
Validity
Not Before: Apr 17 07:01:28 2026 GMT
Not After : Apr 18 07:01:28 2026 GMT
Subject: CN=c8a3619f2c77b331bd2d921c3424952ae06430d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8c:bb:80:36:06:5c:f0:2c:91:e1:1c:09:6a:
b9:1f:44:5f:7c:2f:67:c4:61:69:4f:83:5e:8e:43:
4a:26:2f:64:ec:8b:90:2e:38:9c:85:a5:b8:73:5b:
3f:1c:55:13:b4:1a:72:97:d9:49:76:37:ae:ff:0c:
19:a5:22:3c:d7:ab:e8:ab:e9:b6:4b:e6:40:ee:e1:
5c:9d:43:33:b6:e0:5e:a3:34:c7:4e:51:f8:ef:52:
24:80:5e:1f:3e:65:b2:62:46:3a:dd:dc:4f:4c:d5:
62:60:17:c9:7a:22:45:2b:89:b5:3a:df:c1:5d:5f:
f4:13:25:05:48:10:e3:10:26:17:c1:2d:e5:5c:34:
ab:00:fa:9a:d7:96:87:24:46:0f:26:6a:37:50:a3:
ad:c9:9c:7f:61:04:40:99:24:37:64:26:0e:f1:99:
8f:ad:3b:88:a5:21:42:5d:8b:73:3e:2f:a6:7d:ce:
77:5f:00:a6:d3:e4:01:62:ca:0c:12:95:5c:d5:6f:
48:4a:1f:fd:73:46:1d:da:87:0c:39:ae:2c:8d:d9:
26:8e:23:6a:66:2c:c5:d5:3b:1e:1f:6b:1c:32:91:
53:47:05:d1:9f:09:ed:f1:74:e8:35:15:0b:6a:05:
9b:69:b0:a8:07:88:86:9a:08:5c:1a:45:da:26:79:
39:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A3:61:9F:2C:77:B3:31:BD:2D:92:1C:34:24:95:2A:E0:64:30:D7
X509v3 Authority Key Identifier:
keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:47:95:a0:07:82:b1:fd:46:b9:2f:08:2b:10:92:5a:8e:72:
49:e5:c4:3e:3c:48:31:b9:b5:0a:1a:8d:81:6d:c7:80:ae:16:
dc:ff:e6:1e:c4:c2:8d:fe:52:0c:20:a5:a7:1a:4c:73:0b:e2:
19:b5:03:64:2f:fb:90:a7:10:e0:67:10:f8:bd:57:3a:19:18:
7e:ce:ce:4f:e9:8e:d7:88:c9:2c:f7:ec:18:30:ec:e8:24:5b:
01:1c:7e:6c:be:f5:a6:4f:75:65:b2:93:b4:29:b5:65:ab:80:
fe:3d:0f:57:be:88:c3:79:4b:d6:99:9e:9e:5e:d4:02:2b:42:
47:20:b3:06:c5:ef:ec:90:7f:1a:54:20:0a:78:2f:f7:4d:4d:
d1:54:df:98:47:25:dd:84:37:5d:e6:48:87:52:ba:24:73:2c:
ba:06:4e:da:94:b7:28:68:eb:69:bb:92:cc:91:53:01:6a:a8:
1f:d4:5e:a0:2a:e0:25:23:90:4f:4d:95:39:ef:a8:fd:96:6c:
57:0b:b8:bc:5b:6e:fc:bf:85:ed:b0:86:c9:5c:31:dc:83:2a:
9d:47:6c:10:98:5b:e5:55:6a:d9:91:40:63:bc:cd:a5:bd:5e:
b1:17:de:9d:ff:61:3d:cc:a2:4f:a0:3b:c6:87:79:0c:1e:38:
cd:e5:b0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:28 2026 by rpki-client