Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json)
Hash identifier: hzmpQ0KYrvyJ9gLWeoDfXu1HEXcqCDvXD+sw2WNbI2U=
Subject key identifier: D1:5A:0D:B8:46:45:34:CA:3E:38:81:41:8D:E2:B7:F2:F5:C4:B5:DA
Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Certificate serial: 019DA52F77F9C095785E2E7184C2F3F3185C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
Manifest number: 139C
Signing time: Sun 19 Apr 2026 10:00:44 +0000
Manifest this update: Sun 19 Apr 2026 10:00:44 +0000
Manifest next update: Mon 20 Apr 2026 10:00:44 +0000
Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: u9itZ+o/oP770YUkDtenbI6okrmOZaw3jPRCOAhREwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:77:f9:c0:95:78:5e:2e:71:84:c2:f3:f3:18:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Validity
Not Before: Apr 19 10:00:44 2026 GMT
Not After : Apr 20 10:00:44 2026 GMT
Subject: CN=d15a0db8464534ca3e3881418de2b7f2f5c4b5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:40:6b:ec:33:e2:55:3b:9e:31:62:6e:9d:
7e:66:44:ad:2c:42:e2:7b:93:40:c9:93:a4:50:ee:
9b:5a:74:af:bd:cb:cd:f8:79:bf:91:0d:26:28:24:
63:59:33:29:c2:a7:cb:ae:c1:46:8f:65:4c:c9:2f:
b7:8b:71:fe:4c:d5:17:a4:02:76:bf:c1:75:29:8f:
67:de:60:df:3d:2c:20:01:01:ab:3d:94:d1:f7:7e:
11:74:a1:51:ed:23:86:61:ff:3e:cb:26:5b:2b:2d:
ac:ce:5d:a1:cb:3d:dc:94:52:35:91:b9:cd:3e:bd:
79:be:58:d5:db:95:2a:5e:d8:d7:c7:d9:f0:64:6d:
b5:db:76:72:5d:f7:86:94:26:89:38:1c:0e:a2:a9:
8f:c2:fc:37:6e:6d:2a:99:3e:56:e8:24:47:d9:e4:
e9:cc:ae:5a:8b:10:1e:8e:35:2c:5f:fd:67:38:3a:
43:3a:ab:22:8f:a2:11:16:ff:8c:c2:2d:6f:9d:56:
50:da:08:28:a4:f1:95:b7:ba:2d:6c:7b:a8:ff:a3:
0b:5a:a4:b5:63:f1:f9:03:bb:21:d1:f5:b8:eb:e4:
f3:08:1e:51:17:ce:95:cc:cd:72:16:71:16:25:ad:
af:e1:5e:06:eb:e9:08:58:91:a8:bb:cd:6f:7e:84:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5A:0D:B8:46:45:34:CA:3E:38:81:41:8D:E2:B7:F2:F5:C4:B5:DA
X509v3 Authority Key Identifier:
keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:86:fe:8b:08:1f:a1:58:6a:13:71:8e:bc:36:fc:f5:cb:58:
10:3a:69:fc:8b:52:8f:7e:68:5a:71:ac:1d:9d:eb:c5:55:6b:
8a:a1:5d:02:88:f4:bc:4a:6a:0f:31:81:05:a7:dd:e6:72:e7:
c5:86:e1:05:74:7e:15:cc:81:e5:98:24:f4:45:63:9d:18:d9:
37:ba:05:94:e9:8b:38:39:d6:c6:90:6b:d0:c8:bf:be:fc:1c:
bb:4b:df:06:dd:60:ab:63:97:54:ba:73:1c:b4:a3:0a:0b:a3:
43:6d:a9:92:b9:2f:46:3a:e7:9e:86:f7:01:57:57:02:99:40:
30:6d:b8:b5:00:39:65:21:76:18:f3:01:80:f2:f8:e3:6e:5e:
c1:76:92:43:61:ea:93:2a:6e:e9:6d:72:04:4f:a9:1c:f1:29:
d0:5f:36:05:c2:a2:e0:3e:73:51:49:87:ad:69:5b:57:39:e4:
78:e1:90:7b:64:27:d0:14:c5:66:2f:eb:35:4a:37:97:7f:a1:
ef:4e:cf:dc:5d:c9:2f:df:fa:23:50:c3:5b:02:3e:17:18:4b:
e2:9b:99:55:94:21:f3:3a:8f:41:23:8a:eb:a8:ed:d3:48:e6:
05:11:6d:3e:95:36:15:26:f1:f6:01:4a:1c:99:b7:18:50:c1:
95:2e:53:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:19:13 2026 by rpki-client