Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
File: _ZTgRMvlw1KV-rxEWALakFgTtzI.mft (raw, json)
Hash identifier: ATavRYG/FUCH97d+nE0hMukvaiJyrwNT0RQusE90SK8=
Subject key identifier: 80:27:76:F1:05:D9:04:37:22:40:E6:2B:65:49:DF:DD:0A:E5:10:27
Authority key identifier: FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
Certificate issuer: /CN=fd94e044cbe5c35295fabc445802da905813b732
Certificate serial: 019DA52F83268837C190B2324CCB4DC16F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
Manifest number: 0525
Signing time: Sun 19 Apr 2026 10:00:47 +0000
Manifest this update: Sun 19 Apr 2026 10:00:47 +0000
Manifest next update: Mon 20 Apr 2026 10:00:47 +0000
Files and hashes: 1: _ZTgRMvlw1KV-rxEWALakFgTtzI.crl (hash: uZtOpS/FguhcsIh6zHATgXzYtRwNRkDGx8DCqf0N30Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:83:26:88:37:c1:90:b2:32:4c:cb:4d:c1:6f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd94e044cbe5c35295fabc445802da905813b732
Validity
Not Before: Apr 19 10:00:47 2026 GMT
Not After : Apr 20 10:00:47 2026 GMT
Subject: CN=802776f105d904372240e62b6549dfdd0ae51027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:e3:cd:be:81:83:d9:9b:e6:c0:24:09:00:
24:fd:35:25:14:2e:03:b8:b1:bb:8c:05:35:e5:39:
0f:9c:d4:db:7d:e2:6e:7f:b9:30:25:38:cb:7d:ee:
29:e9:6a:bc:4f:7b:a6:28:f5:99:9d:cb:f1:24:cb:
b2:b0:91:eb:d3:f2:3d:e9:44:1f:0e:7e:e2:5d:6b:
f0:a0:dd:e8:59:99:5d:86:ad:78:46:9a:9c:34:3a:
32:1c:13:50:64:07:09:55:4c:83:80:82:a1:91:80:
28:b5:68:14:ed:98:06:b6:a9:66:f5:d3:aa:a4:bc:
90:10:c9:bc:37:85:bc:61:dc:e9:e6:86:ff:b7:58:
c7:9a:50:0c:de:dd:5c:e3:d3:7e:de:25:2c:28:11:
fc:46:01:c8:7f:7c:8b:22:08:db:10:52:7e:5e:4e:
95:a0:24:a0:6c:99:8a:51:cd:b8:13:3c:84:1c:8c:
4d:de:a0:58:07:cf:0f:da:84:60:3d:d6:5b:6b:85:
b1:9c:75:2f:fc:4a:16:1d:e9:47:6e:50:ec:71:e0:
0d:e8:90:af:1f:a1:9b:a6:ef:6c:fa:7c:8f:6c:71:
a6:75:c8:ba:cf:18:9b:2c:0b:9c:c6:f3:04:76:36:
d9:df:20:79:fa:dd:59:69:7e:f3:94:31:d8:d1:42:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:27:76:F1:05:D9:04:37:22:40:E6:2B:65:49:DF:DD:0A:E5:10:27
X509v3 Authority Key Identifier:
keyid:FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:44:bb:a5:3f:80:dd:a0:14:65:b9:b8:d1:8f:48:0e:20:2e:
ae:9d:63:b2:54:41:97:f7:5a:3e:98:7f:c7:7a:8d:2b:70:d5:
a7:d9:00:05:ce:4c:75:3b:90:70:09:eb:e0:18:58:71:a6:83:
94:f8:af:c4:9b:fd:5a:48:b8:72:b5:07:55:ca:2c:64:a1:96:
9a:08:e0:fd:3d:8c:cb:4d:b3:06:34:dc:d6:95:87:e6:7f:3c:
b8:8e:51:63:a4:47:5f:37:57:e6:40:ef:33:5b:c7:84:30:fd:
d5:e3:9a:e6:5d:54:8f:f1:a4:e1:dc:a1:fc:2d:7c:35:4a:a1:
21:aa:f4:86:91:b2:03:4e:75:92:b8:e3:56:92:26:78:1c:8e:
89:01:e3:40:64:25:d7:f3:39:f8:9e:4e:48:9d:d8:47:87:86:
43:70:b6:35:d7:30:ef:75:0b:0a:bf:ca:0a:2e:46:9e:3b:63:
a8:40:c7:26:62:c6:eb:c9:13:52:d6:8e:a8:20:02:54:8d:45:
11:41:34:48:49:c1:49:a8:ac:91:c4:31:07:cf:34:1b:b3:23:
99:8c:2e:0c:e6:e8:9c:3a:c1:a5:08:ff:79:21:5b:bd:60:bd:
91:ed:ec:3b:8a:08:86:64:4d:24:d2:be:4f:8f:a7:b9:fe:07:
a3:5b:e6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:00 2026 by rpki-client