Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json)
Hash identifier: v8KVO/eejFYSimp1cwMQZGurfzXW0sFwHNPTOYn63eU=
Subject key identifier: C5:5B:DC:58:5B:39:ED:4E:33:76:D3:03:F8:30:6C:2A:CF:AF:32:B4
Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851
Certificate serial: 019D98BD546B0825A694B17420CCAE2C513B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 00:00:37 +0000
Manifest this update: Fri 17 Apr 2026 00:00:37 +0000
Manifest next update: Sat 18 Apr 2026 00:00:37 +0000
Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: iA29Q29eQWtBVH63JAZinnolk1BKFA7zaEIeqejyBm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:54:6b:08:25:a6:94:b1:74:20:cc:ae:2c:51:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851
Validity
Not Before: Apr 17 00:00:37 2026 GMT
Not After : Apr 18 00:00:37 2026 GMT
Subject: CN=c55bdc585b39ed4e3376d303f8306c2acfaf32b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:10:1d:ce:5c:15:15:43:ae:a2:12:b3:45:56:
a5:9c:5b:e4:e8:f8:d8:c3:38:d9:57:cc:aa:7d:29:
4f:01:e7:89:ba:24:3c:09:6a:18:f8:51:bd:61:d1:
ee:f4:23:61:80:a9:c7:4d:ef:a3:06:10:b0:ce:8e:
aa:4b:29:d2:b0:c7:6f:82:fc:18:88:87:7f:0f:0f:
90:be:42:87:dd:01:d6:af:eb:29:1e:23:86:78:ea:
27:24:4a:f0:92:0a:2d:cc:d2:e2:ed:23:95:35:1d:
77:6c:af:f3:d3:b5:77:e5:34:6b:e6:b8:7a:07:d2:
e3:0c:7a:cf:12:e1:91:08:bb:9b:63:50:c5:04:78:
2e:fa:da:79:cf:e8:7f:0b:f9:84:03:3d:ca:74:59:
ef:ed:a5:09:4b:15:fe:e3:9c:e9:ac:0a:b0:43:1a:
36:9b:e1:1a:fc:26:39:c5:46:3f:d2:a4:ca:bf:3c:
03:36:05:e0:49:05:e7:ba:90:a1:80:eb:a8:ba:22:
5e:47:22:92:36:c7:1b:f6:3a:db:be:2e:76:0f:32:
02:c1:be:1b:50:0b:11:bd:e2:cc:36:d4:b2:ae:aa:
36:ae:fa:cf:10:8e:08:27:85:b1:3f:f9:63:c7:df:
70:35:1c:f0:85:10:68:43:33:12:57:0b:e7:cc:bd:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5B:DC:58:5B:39:ED:4E:33:76:D3:03:F8:30:6C:2A:CF:AF:32:B4
X509v3 Authority Key Identifier:
keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e6:c1:a6:71:a0:26:51:e4:2c:9f:14:6a:5b:a8:7d:f1:4b:
2f:5d:a6:c6:c2:87:62:56:07:10:9b:d4:de:d2:59:53:8f:5f:
07:8e:80:8e:9b:cd:4d:f4:c3:5c:c8:1d:cb:7f:09:e6:32:e5:
5d:b5:00:5f:10:37:48:0b:66:9c:84:9f:eb:fa:07:21:8d:35:
eb:2c:0d:5d:a0:14:52:ff:91:18:1d:2f:32:8b:7e:82:b4:20:
30:e8:5a:45:53:12:4f:3f:a0:5b:39:dc:30:27:21:fb:89:28:
33:84:20:86:17:14:4b:95:c9:0d:a5:9f:1f:88:48:cf:51:59:
b3:fc:ec:72:ea:37:1e:67:0d:9f:b5:2a:5e:2a:f6:fd:de:10:
ba:cf:03:f3:f0:00:0c:8c:97:8f:c1:dd:bf:bf:c7:04:9c:0e:
df:d3:da:9d:72:ae:b8:67:03:c0:b6:db:48:c6:6a:ba:4b:8f:
ce:a0:a1:5c:01:3f:06:71:2d:44:f1:7f:c4:3b:68:ae:b9:1d:
82:db:85:88:9e:3b:6f:61:82:cd:fa:3f:2a:bd:89:ff:dd:4d:
51:a3:78:bb:5c:a4:13:7c:70:8a:8e:62:8e:da:40:6a:79:64:
d6:d7:b2:a1:f3:d6:9c:2b:e4:2f:c6:78:0f:5a:8f:7a:c3:8d:
d3:a1:76:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:37 2026 by rpki-client