Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: 6zT9rtsAWtQad4w9h7A6lGCLYIQNmiima8mfo+NNz5o=
Subject key identifier: 75:6A:83:9A:25:50:B4:BF:AA:2E:29:CB:50:E8:A7:4C:27:AB:62:2E
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 019D99D0D7F806A2ADBC766B49A56710326F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 1004
Signing time: Fri 17 Apr 2026 05:01:33 +0000
Manifest this update: Fri 17 Apr 2026 05:01:33 +0000
Manifest next update: Sat 18 Apr 2026 05:01:33 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: F1yDYrX0QbvAorgUTGlewarITWZ/GJVm4hxMcbyjYoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d7:f8:06:a2:ad:bc:76:6b:49:a5:67:10:32:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Apr 17 05:01:33 2026 GMT
Not After : Apr 18 05:01:33 2026 GMT
Subject: CN=756a839a2550b4bfaa2e29cb50e8a74c27ab622e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:91:21:18:8a:ad:8f:90:07:07:b6:21:a9:
d8:25:43:dc:41:1d:9f:46:cb:46:9c:69:55:2c:8f:
f4:17:72:6d:6b:14:6e:60:24:9c:3b:d6:82:11:e3:
fd:c5:c8:60:e7:f9:f3:47:b7:a6:2c:21:5c:2d:01:
4c:33:f0:04:b5:74:d7:30:86:4c:1b:39:84:3c:21:
56:27:2e:6d:28:e2:86:8c:f2:50:42:50:d6:a2:bd:
e3:47:31:2b:93:57:41:77:c3:55:1b:ee:ce:54:85:
ae:9d:12:13:e6:7f:58:eb:cb:63:b2:e6:f6:21:78:
06:84:cf:ce:29:7a:e6:37:62:bc:e5:52:d3:62:f7:
6c:aa:d0:e8:95:62:12:5a:39:65:bd:c5:b7:ae:14:
17:25:2b:70:4d:64:09:c6:f3:69:1b:43:90:09:24:
f5:ad:c2:f3:2d:4b:54:51:35:09:c9:5b:d7:88:55:
d8:c3:c0:49:47:22:de:d4:91:4c:8f:9f:db:0b:d4:
e5:5e:69:24:02:cb:db:3d:32:f3:52:46:48:04:5e:
6d:82:c5:4b:6e:fc:c2:9a:c0:87:e3:fb:0f:32:5f:
75:4d:81:38:9b:71:28:a9:22:6c:35:29:77:c9:1a:
6d:4c:95:c2:a5:96:b4:76:f8:43:cf:de:3e:59:a9:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6A:83:9A:25:50:B4:BF:AA:2E:29:CB:50:E8:A7:4C:27:AB:62:2E
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:08:6a:27:0c:3b:38:18:b6:52:c8:52:77:eb:12:4e:14:a7:
2d:0f:f9:06:c3:c9:26:bb:eb:7e:d1:a1:ac:0a:b3:1a:a1:49:
96:fa:98:99:bb:cf:9d:b3:92:f4:30:cb:32:a4:2b:60:7a:e6:
0e:b8:1b:b0:0d:68:d6:e1:07:80:fc:08:c7:2e:15:e7:2e:a5:
8a:de:77:dc:ef:6c:cc:a6:24:14:26:a5:67:8b:aa:bb:5c:7f:
b3:9a:c7:03:56:86:5c:a2:38:8f:91:f8:8e:47:31:b9:ea:9c:
8d:05:4b:b6:d8:23:96:0b:ef:8d:48:87:bc:18:f5:5d:c3:fd:
e5:62:5a:3e:a8:92:61:38:22:c1:3b:26:2c:24:18:aa:91:c5:
00:c3:c4:66:7d:b7:94:f6:7a:5c:1c:d5:e6:65:54:c0:86:8c:
b3:90:9f:1b:60:ea:ff:da:c6:2a:43:8a:9d:d2:14:14:71:4d:
56:27:d5:ce:cd:ad:61:0c:3f:f2:08:f9:f0:d3:c6:f1:98:3d:
67:e7:8e:fc:0c:ee:c6:03:bb:d8:cf:ed:74:b6:bc:22:a2:5b:
15:65:00:a5:e1:a4:68:3c:fd:f3:f2:43:ef:14:a2:db:04:96:
6d:d7:27:4a:fe:02:f5:69:7b:09:a1:e8:c1:4e:17:d6:0d:40:
ec:78:30:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0Nf4BqKtvHZrSaVnEDJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjVkZGM0OWI3NWVhODRkZjQ1YWUxMTRjNDMyMWQ0NmQ1
YWNkNGEwHhcNMjYwNDE3MDUwMTMzWhcNMjYwNDE4MDUwMTMzWjAzMTEwLwYDVQQD
Eyg3NTZhODM5YTI1NTBiNGJmYWEyZTI5Y2I1MGU4YTc0YzI3YWI2MjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9yRIRiKrY+QBwe2IanYJUPcQR2f
RstGnGlVLI/0F3JtaxRuYCScO9aCEeP9xchg5/nzR7emLCFcLQFMM/AEtXTXMIZM
GzmEPCFWJy5tKOKGjPJQQlDWor3jRzErk1dBd8NVG+7OVIWunRIT5n9Y68tjsub2
IXgGhM/OKXrmN2K85VLTYvdsqtDolWISWjllvcW3rhQXJStwTWQJxvNpG0OQCST1
rcLzLUtUUTUJyVvXiFXYw8BJRyLe1JFMj5/bC9TlXmkkAsvbPTLzUkZIBF5tgsVL
bvzCmsCH4/sPMl91TYE4m3EoqSJsNSl3yRptTJXCpZa0dvhDz94+Wal4jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVqg5olULS/qi4py1Dop0wnq2IuMB8GA1UdIwQY
MBaAFM/13cSbdeqE30WuEUxDIdRtWs1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYt
MTc3OThiMmRhYWM0LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYtMTc3OThiMmRhYWM0
LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQhqJww7
OBi2UshSd+sSThSnLQ/5BsPJJrvrftGhrAqzGqFJlvqYmbvPnbOS9DDLMqQrYHrm
DrgbsA1o1uEHgPwIxy4V5y6lit533O9szKYkFCalZ4uqu1x/s5rHA1aGXKI4j5H4
jkcxueqcjQVLttgjlgvvjUiHvBj1XcP95WJaPqiSYTgiwTsmLCQYqpHFAMPEZn23
lPZ6XBzV5mVUwIaMs5CfG2Dq/9rGKkOKndIUFHFNVifVzs2tYQw/8gj58NPG8Zg9
Z+eO/AzuxgO72M/tdLa8IqJbFWUApeGkaDz98/JD7xSi2wSWbdcnSv4C9Wl7CaHo
wU4X1g1A7Hgwow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:38:20 2026 by rpki-client