Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
File: Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft (raw, json)
Hash identifier: Hsx2ekxAvQbWD6h+q8dPoaIvxVdSCUaIVFFAh6Y+fLc=
Subject key identifier: 51:62:39:F2:6B:59:05:C1:6F:F2:54:23:7E:0C:46:F0:9A:1D:05:4B
Authority key identifier: 67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
Certificate issuer: /CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Certificate serial: 019D99996C65D5954D8E200F5E7E538A326D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
Manifest number: 1403
Signing time: Fri 17 Apr 2026 04:01:01 +0000
Manifest this update: Fri 17 Apr 2026 04:01:01 +0000
Manifest next update: Sat 18 Apr 2026 04:01:01 +0000
Files and hashes: 1: Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl (hash: 2fwD33P9PzdJFOKLi527vSu2MIG0o3Ybyr/HZ0f6cKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:6c:65:d5:95:4d:8e:20:0f:5e:7e:53:8a:32:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Validity
Not Before: Apr 17 04:01:01 2026 GMT
Not After : Apr 18 04:01:01 2026 GMT
Subject: CN=516239f26b5905c16ff254237e0c46f09a1d054b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e9:ce:80:b7:3d:8f:2a:f0:1a:b5:58:98:08:
69:26:51:05:b5:d8:06:5b:4a:f7:2a:be:bc:ee:38:
c5:d2:08:7c:8a:ef:20:47:ba:a6:27:54:43:70:da:
bd:fa:84:2c:00:39:57:e2:79:aa:19:40:79:1f:23:
8f:15:e8:73:ad:18:1d:62:87:b2:a7:1f:74:cd:d6:
03:a8:17:f0:6a:d9:b7:47:c1:62:24:81:1e:65:de:
56:3f:ba:4d:4d:de:6f:42:d4:51:19:76:34:a7:35:
cd:df:80:d7:93:c7:df:6f:e0:c4:76:52:49:f9:2f:
49:31:5d:ec:64:e4:a3:a8:3f:a3:78:f6:a9:ba:c9:
6f:0b:2f:ac:fa:38:87:06:0b:39:5a:e9:bf:93:0f:
7f:46:70:03:25:2b:5e:34:c5:7e:1d:16:c4:c6:cc:
b0:bf:67:d9:df:00:a8:3a:02:2d:b2:40:e6:7c:00:
15:63:a3:00:d2:61:49:5c:1b:0c:62:b5:09:56:b8:
d8:fe:ef:61:21:64:c1:bf:10:64:cf:d4:bc:b7:74:
0d:7c:02:1b:79:ee:1c:fb:ed:61:44:16:b5:1a:c1:
d2:cf:e6:71:1b:dc:ec:66:45:fc:5d:39:2b:3e:80:
85:64:d0:5a:73:f6:25:35:38:0c:58:17:87:32:8e:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:62:39:F2:6B:59:05:C1:6F:F2:54:23:7E:0C:46:F0:9A:1D:05:4B
X509v3 Authority Key Identifier:
keyid:67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:98:d1:44:fd:87:d7:7d:cf:96:f1:9c:f8:93:45:e7:3a:18:
27:a9:a6:0e:cf:93:4d:89:28:35:5b:d9:7d:46:c9:94:c8:ce:
ee:31:70:6e:26:af:98:c8:ed:f9:db:1c:73:5a:2b:0d:78:5b:
9c:10:35:70:d8:c8:6a:28:7a:bc:7a:2f:92:4e:df:99:f2:17:
7f:8f:29:23:3c:8d:93:da:f6:e0:a8:d1:fb:21:51:2b:51:27:
9d:ef:fb:3b:92:d4:76:f6:47:8a:3d:d3:16:bf:d8:0d:6f:6b:
14:26:d2:bd:e3:d2:20:a1:07:ee:9d:7b:cd:1e:08:d7:92:d5:
56:b3:9b:d8:e3:d3:ea:67:c0:21:1a:40:f1:9b:d3:f8:a0:46:
5c:67:32:d3:79:8b:c6:9d:90:38:a1:f4:8b:40:4b:14:79:37:
0e:b8:80:18:75:94:50:49:48:65:d4:56:dc:d3:1f:95:da:ea:
ce:a7:86:7b:74:99:c3:57:56:50:06:16:27:80:d6:8a:35:0f:
19:25:fa:70:ee:e0:0a:68:90:37:08:bc:22:7c:ce:ab:87:e6:
fc:bb:08:09:0d:29:b0:49:d7:c4:66:de:cc:7f:c2:23:e3:0d:
e2:f9:f7:0d:d2:8a:ed:e7:18:6b:39:d1:28:61:ae:af:ca:e1:
2e:ad:e9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:03 2026 by rpki-client