Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: hgzOweyxr6FS/Ux7wr6Ix92knJpvGDBZXtvHMN2KDQU=
Subject key identifier: B5:88:AE:77:50:E5:4D:FF:7C:1A:60:AD:54:1D:64:3C:42:DD:47:33
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 019D9AE2A15FC54B388C8E361EBEE7184D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 02F8
Signing time: Fri 17 Apr 2026 10:00:36 +0000
Manifest this update: Fri 17 Apr 2026 10:00:36 +0000
Manifest next update: Sat 18 Apr 2026 10:00:36 +0000
Files and hashes: 1: WKKdAS92LVILbjnTiiXNrRI_064.asa (hash: WU7xtDYPq+tmZfgD8wJKGXUqlisupARfwtckbBQ0ds0=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: N0hiGbpOgFN9AYzTtMD2jHG5lz7Fd06r+1W63uwjQ3k=)
3: ymjEj-AVl-jhoYqun7KK_jww1EY.roa (hash: Lravz6mXezUcFlH14r837C4PlhGpAXXPBKh9Ost0iM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:a1:5f:c5:4b:38:8c:8e:36:1e:be:e7:18:4d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Apr 17 10:00:36 2026 GMT
Not After : Apr 18 10:00:36 2026 GMT
Subject: CN=b588ae7750e54dff7c1a60ad541d643c42dd4733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:d5:85:d5:f3:2e:31:e9:22:3f:7c:35:49:
4a:b9:6d:90:a3:1a:ab:07:7d:f1:18:eb:51:8a:1c:
16:05:47:a2:ae:18:ce:3e:91:6c:54:0e:9f:06:fc:
e8:ae:85:65:c0:58:34:c6:d3:0f:89:20:61:5b:bf:
d5:73:46:ee:9b:0f:bd:11:84:cc:a1:fe:7b:48:55:
19:73:41:16:d4:a7:f6:7d:23:31:9c:68:39:0c:90:
58:20:27:01:0f:c9:0c:cc:85:dc:a7:12:31:9e:54:
a8:5b:78:dc:1c:21:d9:c6:bc:9e:56:50:8a:45:4a:
50:67:e3:3d:06:1c:f5:aa:ab:d2:f0:d2:3d:b5:db:
54:e2:29:28:7b:57:70:f8:0c:73:95:75:b2:f2:7f:
16:2a:10:ac:13:cd:8f:71:16:a1:53:c1:79:0e:b7:
85:71:4d:59:bc:c4:e9:01:2d:a9:55:d7:4c:77:b0:
7d:9e:a3:fe:30:84:7d:54:92:ca:86:42:82:ba:78:
59:a6:48:0f:67:d8:4e:ac:f7:e3:27:36:a6:26:7a:
ec:f6:5f:9a:0a:68:89:fb:8f:c0:52:72:6e:63:73:
06:06:cb:65:ff:b4:6a:22:a7:7d:77:2a:18:0f:83:
52:47:7f:22:6d:07:60:6b:c1:a5:ef:fd:e6:90:3f:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:AE:77:50:E5:4D:FF:7C:1A:60:AD:54:1D:64:3C:42:DD:47:33
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:20:2f:1f:07:07:29:62:69:ed:5c:cf:6f:6e:85:b7:07:ba:
d2:4f:7d:3d:d3:7d:37:2e:9d:80:91:fb:4a:c0:3f:17:66:02:
f5:37:63:63:3b:2c:b2:3e:5f:bb:ba:c0:63:e8:54:6a:23:9c:
06:d5:6b:94:54:f5:1b:4f:1a:7c:1f:78:3c:5e:be:6f:1a:67:
b5:89:ca:51:b8:6c:f2:b1:0a:1d:e7:71:23:d1:ff:f7:cd:b1:
fc:57:ed:63:68:6d:ce:70:52:0b:57:59:a4:9f:1e:c0:86:74:
3d:8c:01:c1:d3:c1:22:f4:f8:6d:f3:52:f4:53:97:01:dc:7f:
fd:85:63:37:3b:ae:d0:22:34:f1:88:4d:cb:12:fe:5f:4b:93:
cc:e2:f0:59:00:f8:cc:88:44:2d:96:77:61:c2:d1:e9:6e:70:
eb:59:19:b4:db:11:08:58:e4:9d:9c:09:03:d9:5d:c9:7f:13:
69:98:52:c9:02:69:eb:5a:a4:90:3a:ea:3c:d1:a8:ce:81:b5:
38:cf:25:6c:a5:7c:73:c3:00:26:60:cd:16:c6:ae:a1:cc:ec:
d3:a3:45:3c:31:eb:8e:28:01:d8:b8:4a:1f:9d:a6:67:28:01:
40:ca:b9:5a:ec:db:1b:41:24:90:11:20:d7:b8:57:82:8b:d9:
84:a0:1e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:47:56 2026 by rpki-client