Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File: z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier: fpAApGfs2wEYQ9iuF7m/cVy6EBCekJnpsVz8dYaDcdM=
Subject key identifier: 97:19:06:EC:E4:BA:31:9A:E2:E4:C9:FF:3F:AD:69:A2:E6:DB:85:48
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer: /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial: 019D98F42214FF4223C0E9C306AAC24C15B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number: 1472
Signing time: Fri 17 Apr 2026 01:00:29 +0000
Manifest this update: Fri 17 Apr 2026 01:00:29 +0000
Manifest next update: Sat 18 Apr 2026 01:00:29 +0000
Files and hashes: 1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: EEwmElufHRG8dmZhyZ+s3whNWDbA2uK5jDqDfUrrMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:22:14:ff:42:23:c0:e9:c3:06:aa:c2:4c:15:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Validity
Not Before: Apr 17 01:00:29 2026 GMT
Not After : Apr 18 01:00:29 2026 GMT
Subject: CN=971906ece4ba319ae2e4c9ff3fad69a2e6db8548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:b6:20:f1:f2:89:a1:bd:91:1a:06:04:bd:
b3:05:e6:de:53:a9:2a:0e:6d:44:59:91:45:fd:2e:
84:6a:38:ef:6b:b9:05:12:18:55:8d:90:d1:9c:b4:
c7:8d:d4:e7:68:7d:2f:38:14:1f:40:a1:c5:dd:5b:
58:b6:7c:c8:46:fa:c3:83:0d:7b:45:9f:68:79:88:
ad:20:30:94:42:8c:10:06:95:5f:d4:8f:33:8d:fb:
90:6e:bf:fe:ec:af:b5:45:59:5d:48:87:68:ea:12:
63:62:b8:3f:f8:e5:8d:17:b1:a0:70:37:0c:0e:ea:
17:e5:a3:2a:fb:96:b1:63:b0:e7:b6:79:5a:d1:b1:
b9:6b:c2:92:89:95:eb:cc:dd:7b:83:a1:9a:ba:26:
8b:26:89:3f:01:d3:6f:28:84:88:c5:b5:d5:1e:5d:
25:38:78:ff:9b:1e:15:42:85:b7:ba:51:06:c6:4c:
f8:8d:20:15:36:7f:e9:65:a1:41:f5:73:e1:f5:5e:
e8:da:a4:be:22:6a:d2:ac:0d:5f:b6:ba:19:d1:f3:
47:82:80:4e:2f:e2:9b:1a:9d:ab:ce:69:2c:5a:07:
26:0f:20:0e:27:f0:d6:a0:30:68:58:83:a0:d5:cc:
4e:a0:84:08:ee:70:51:3e:33:51:64:06:8b:94:ae:
b9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:19:06:EC:E4:BA:31:9A:E2:E4:C9:FF:3F:AD:69:A2:E6:DB:85:48
X509v3 Authority Key Identifier:
keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:29:05:d4:e7:eb:d0:12:58:cd:1c:d3:9c:3e:f7:40:73:b5:
f2:d7:61:66:28:3b:7a:32:c8:31:43:55:58:de:ac:b5:3b:21:
d4:4f:70:59:ff:42:4e:2a:5b:3f:f0:eb:4e:7f:4b:de:52:bd:
86:5f:89:32:80:0f:1b:a0:7a:fa:fe:1b:96:04:b2:b5:76:3e:
5f:d9:13:4e:b7:03:b8:be:52:08:ad:e2:2f:b3:70:6e:c6:b3:
18:f7:c7:15:2f:6f:25:c8:56:9c:8a:7b:66:8b:fc:8a:32:c3:
54:2d:83:81:08:4d:06:77:bd:89:b1:03:d9:e3:8b:aa:61:dc:
57:17:91:b9:05:61:bf:24:51:e0:e6:03:a6:fe:b5:2f:f1:31:
d7:20:25:ad:63:11:25:60:84:4f:aa:bd:86:5f:b0:ba:3c:81:
c7:4d:c9:bc:94:29:0e:f5:0d:ca:91:99:e1:fc:99:63:41:30:
9f:a6:8c:8d:22:f4:f3:78:7c:61:a2:4b:33:93:6b:10:a8:60:
5d:cd:bc:f4:b4:e7:60:a4:a7:32:63:43:4b:b6:e2:ee:61:6c:
bc:83:44:97:a5:d0:fa:57:27:0b:c0:ff:97:5e:bf:d1:cc:b6:
1b:fc:4a:cd:6a:f1:89:74:8d:dd:5e:8e:60:b4:97:55:9d:70:
fb:86:b4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:47 2026 by rpki-client