Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
File: z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json)
Hash identifier: /RkuBFATzsnwRhLlHPHIIhz49c7K+oe51ZHXH3m+884=
Subject key identifier: 22:01:ED:92:B7:6C:76:54:1B:5E:80:B0:B6:83:91:31:77:C2:6A:B0
Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
Certificate issuer: /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Certificate serial: 019D9AE301F7DECD7F1394195AF1248F2ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
Manifest number: 0C28
Signing time: Fri 17 Apr 2026 10:01:01 +0000
Manifest this update: Fri 17 Apr 2026 10:01:01 +0000
Manifest next update: Sat 18 Apr 2026 10:01:01 +0000
Files and hashes: 1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: De/i7fy+UBs8e973g7HPbyzivgNCV1kXkeQ/6XxncFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:01:f7:de:cd:7f:13:94:19:5a:f1:24:8f:2e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Validity
Not Before: Apr 17 10:01:01 2026 GMT
Not After : Apr 18 10:01:01 2026 GMT
Subject: CN=2201ed92b76c76541b5e80b0b683913177c26ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:3c:7a:7c:e3:80:22:a4:3e:e8:78:e1:cd:
7e:70:17:6a:45:10:00:0d:d0:70:c4:93:97:9d:1d:
ca:78:e3:96:b7:82:48:d2:28:f7:bf:b6:a9:2a:e8:
e5:54:34:d4:88:64:c9:7e:1b:3e:4a:5e:84:5d:d0:
2a:c1:0f:16:8b:21:74:97:94:8e:b2:d9:78:99:13:
0e:f2:9a:67:1f:15:9b:da:14:90:f2:7b:f4:21:b2:
2c:ce:5f:64:5e:38:49:e2:f4:d0:d4:21:89:e5:51:
d6:5a:0e:36:ff:b8:f9:50:8c:11:07:52:25:49:c0:
55:2b:8c:6c:3a:e9:72:8c:61:97:9a:6c:19:0b:d6:
4c:71:f5:20:91:af:77:cb:23:ec:eb:64:c2:0b:1b:
15:dc:5e:db:30:ac:e6:c5:0a:55:3a:8c:22:88:1c:
28:80:af:2d:a4:85:65:66:66:0d:4c:c4:f3:86:dd:
dd:fe:ad:68:5d:14:2d:9b:2b:09:ed:f7:f8:9d:0f:
fe:63:3f:13:5a:84:20:7e:c5:8c:d4:e2:d0:bb:5a:
7d:5d:9b:41:7c:f7:8e:fe:1e:39:7f:10:bd:29:a0:
d6:c9:c2:5b:98:e4:93:bd:16:1e:af:c7:1b:5b:eb:
e9:9f:71:9f:ea:11:0a:32:05:fb:e9:45:bb:f6:4c:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:ED:92:B7:6C:76:54:1B:5E:80:B0:B6:83:91:31:77:C2:6A:B0
X509v3 Authority Key Identifier:
keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f6:cc:10:3e:71:c8:67:56:da:1f:37:8d:bc:81:19:da:ec:
2c:90:ab:01:45:a9:e9:87:6f:2e:66:f5:80:1b:91:83:58:62:
ec:ff:14:b5:a2:a7:c7:e0:b4:65:b7:c3:eb:81:66:a0:86:78:
a5:59:b1:4e:c5:dd:86:57:5b:6f:02:10:e6:45:c0:be:38:c8:
fb:d8:73:84:52:db:52:27:dd:a3:fd:b9:ec:6f:c9:5c:64:5a:
93:97:0b:2d:fc:eb:13:b9:30:e9:5b:ee:70:0a:5d:56:a2:c6:
75:3e:b3:fb:6f:9a:66:17:8e:26:32:62:c0:22:a4:af:c5:1a:
f7:0f:76:e9:94:b1:28:a7:96:67:68:0b:9b:27:20:74:fd:4e:
87:fb:ee:35:e1:e9:98:12:51:30:a1:76:a5:10:00:03:ff:f8:
a3:e8:c5:54:98:6b:9a:e7:2b:b4:c5:b9:ac:06:50:bf:96:68:
e1:b2:22:31:e3:aa:1e:3b:43:9b:10:66:36:3e:27:33:e6:6e:
f5:a1:ed:69:f7:2d:c7:3d:47:a7:68:40:8b:ba:96:d5:da:09:
dc:f7:39:9c:a4:67:46:16:b9:98:63:ca:5e:9b:ec:72:11:97:
89:6a:ec:af:ff:96:d5:4f:d5:c3:85:3d:2c:e1:c0:80:4b:a7:
fd:ed:ef:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:52 2026 by rpki-client