Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
File: ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft (raw, json)
Hash identifier: lVTZBTZrQFlLGGAhJG+J/iCWPru9Qk9pJ3a5Zg6BlJk=
Subject key identifier: 3B:33:09:BF:D9:29:8E:E9:2C:E3:87:B1:43:C3:A7:4E:AA:63:39:D7
Authority key identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
Certificate issuer: /CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Certificate serial: 019D99621E3DA0C1B09B5F8AB634777E94AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
Manifest number: 1236
Signing time: Fri 17 Apr 2026 03:00:37 +0000
Manifest this update: Fri 17 Apr 2026 03:00:37 +0000
Manifest next update: Sat 18 Apr 2026 03:00:37 +0000
Files and hashes: 1: ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl (hash: pVM9TxUVoE//7to96/gm2uNF/9X0eyw/yjpwGJzKNiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:1e:3d:a0:c1:b0:9b:5f:8a:b6:34:77:7e:94:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Validity
Not Before: Apr 17 03:00:37 2026 GMT
Not After : Apr 18 03:00:37 2026 GMT
Subject: CN=3b3309bfd9298ee92ce387b143c3a74eaa6339d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:12:3e:93:7e:6c:75:e5:46:14:43:fc:69:
aa:19:c7:db:b9:74:a8:a3:20:4b:63:b0:cf:f3:4d:
2c:3f:fe:e1:bf:b5:55:01:bb:f8:99:10:59:84:8e:
71:8b:16:4a:7b:c6:50:05:2f:6f:8a:cd:9f:2d:eb:
20:96:6a:ed:f3:aa:a6:8d:45:3c:73:d0:b8:36:36:
2e:de:a1:a7:25:68:b6:ac:4b:12:7c:7d:56:16:43:
a7:e2:0e:a5:36:38:ae:78:87:e9:a8:3c:df:d1:7c:
f9:f8:af:ad:cf:52:c5:04:10:38:bc:0e:42:47:4f:
3b:4e:83:e8:1d:d1:0f:50:85:78:aa:4c:15:88:12:
06:6e:fd:63:e9:80:99:f4:42:60:16:85:6b:03:81:
7b:90:82:73:c6:f3:ad:7d:c0:1c:24:05:84:70:bc:
fe:40:c7:e9:e7:98:97:6c:86:e9:04:21:46:b6:38:
64:57:e5:9c:58:e8:0c:e0:ee:11:90:d1:e7:e8:7b:
ff:ca:d0:9c:70:31:75:e9:39:08:b7:ae:8b:85:e9:
f3:aa:9d:7e:65:56:75:0b:ad:ca:ef:77:74:a4:1a:
15:54:e5:94:d7:96:32:2a:52:6b:01:43:c5:df:8b:
c2:12:4e:f9:ae:5f:fe:74:1e:c3:4a:f3:25:da:00:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:33:09:BF:D9:29:8E:E9:2C:E3:87:B1:43:C3:A7:4E:AA:63:39:D7
X509v3 Authority Key Identifier:
keyid:65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:33:55:84:7d:43:25:cc:10:bd:c2:7b:d6:e3:1d:64:d7:3e:
b4:88:4e:8c:8e:68:4b:26:b9:54:be:6f:4e:fd:a9:0e:f3:31:
40:0e:29:68:52:86:71:2b:3c:b9:9c:3b:b8:f1:ff:e1:d7:6c:
4e:51:5d:fb:17:cd:6f:7c:b2:0d:56:26:3b:f4:03:16:6e:13:
66:b9:40:23:8b:19:05:f7:5d:40:17:9e:22:dc:b0:31:8b:3c:
96:0d:34:00:da:8a:c5:8e:08:9f:4a:75:02:7a:f3:7f:d5:b2:
92:6b:e5:03:1e:79:77:11:64:88:7b:fd:6e:be:e2:f0:58:0a:
34:12:c1:49:f1:2f:3c:bd:33:8c:a3:c1:6e:7b:42:35:81:d8:
8b:33:72:fa:9f:54:59:0a:12:22:37:5e:15:ff:52:4a:6a:85:
58:ac:09:39:e9:d2:32:c6:4b:3e:6e:16:4f:b2:b8:12:61:8b:
8d:a6:e3:48:c2:b3:95:cf:23:2b:ed:27:d8:80:b1:e0:0c:3e:
9d:49:fc:85:fc:50:04:59:bc:31:93:a7:cf:54:25:a2:94:e0:
2e:08:4a:83:f3:9c:99:63:95:ba:65:82:52:a0:90:68:0d:ef:
59:07:b8:07:4b:8a:75:fb:f6:84:87:aa:2f:ef:a2:00:9c:70:
28:9c:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:53 2026 by rpki-client