Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier: /23PyIa2VW2lI5X1CmWHIeMxNgoyiSvbff/aVF6ixSQ=
Subject key identifier: FF:1D:13:24:F4:87:9A:82:77:72:BE:79:C2:CF:30:1B:01:78:C7:22
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 019D98F5154DF984FEAE889EBCCCA7F44367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 01:01:31 +0000
Manifest this update: Fri 17 Apr 2026 01:01:31 +0000
Manifest next update: Sat 18 Apr 2026 01:01:31 +0000
Files and hashes: 1: bvZFPCvF4Igp5im9CQi4MSj0eOc.roa (hash: SLYZCRjXEHo6LL4IR+75+DXz52FJqPAYvzqcrr6DgqE=)
2: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: zL0W50gIdOcU7ClDe7P20PGvTRr8CL2y/DIfMwu3Zro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:15:4d:f9:84:fe:ae:88:9e:bc:cc:a7:f4:43:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: Apr 17 01:01:31 2026 GMT
Not After : Apr 18 01:01:31 2026 GMT
Subject: CN=ff1d1324f4879a827772be79c2cf301b0178c722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:c6:03:24:3e:9b:49:c1:dd:c4:9b:47:49:
15:35:0f:cc:a2:65:73:26:a7:3f:bd:54:26:4d:2e:
33:ac:58:13:35:fe:cf:62:c9:ce:75:ce:d7:a6:e3:
74:15:8b:ac:f5:83:0e:4c:e2:27:a0:3b:36:38:71:
92:c9:06:76:dd:4a:a8:d8:63:54:4d:33:10:c0:c6:
6e:36:ac:5e:33:a2:67:1c:84:f7:0a:8a:9c:82:75:
ad:6a:72:26:16:c8:e6:32:27:5a:3e:e1:6e:25:5c:
d5:a4:82:2a:cf:48:e7:ec:54:ac:71:f3:a1:3b:6a:
5b:c4:cf:52:65:22:95:aa:d7:7f:c1:51:cd:07:c2:
7b:96:4d:13:64:2d:f4:85:17:ef:e8:b6:ca:b7:67:
0b:7e:d6:3d:8d:7d:a0:86:68:5c:c7:84:16:fc:b5:
34:99:dc:ad:4b:67:b8:35:4b:5d:b2:b6:25:79:e0:
b3:14:57:5d:91:bb:33:2a:e7:98:96:0d:a3:77:7c:
0e:af:b6:f4:a7:d5:2c:ea:8f:c5:f1:50:b6:2b:0c:
c5:1a:c4:e8:53:c3:54:5b:22:fc:01:1a:fd:59:26:
d6:59:0b:97:61:f0:cd:f1:5c:17:dc:53:03:ef:e0:
12:05:38:94:36:b7:01:af:18:8b:bf:fa:60:8c:ca:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1D:13:24:F4:87:9A:82:77:72:BE:79:C2:CF:30:1B:01:78:C7:22
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9d:86:bb:24:62:f5:27:2d:52:68:e7:05:41:45:67:ac:18:
37:b7:7d:24:f5:97:b6:96:a2:fb:07:ec:22:65:5a:31:94:af:
49:10:16:b5:84:f1:6d:79:11:17:cf:51:a2:1a:04:21:66:34:
e5:eb:80:c1:c6:b7:35:48:a1:b9:a2:f3:ab:27:0f:0b:d7:62:
dd:32:4c:e7:e1:23:ae:19:2c:35:0d:68:e1:03:06:00:ef:ea:
74:33:ca:13:fd:e3:f5:c7:d3:81:d0:62:35:81:ad:71:25:7e:
54:02:7d:31:34:4d:89:13:78:35:35:99:8a:39:85:ce:0c:ab:
ff:f7:8b:ec:39:af:d8:08:70:11:6d:a6:43:70:49:d6:7a:b6:
c1:c4:41:f3:0e:6f:b8:17:41:3e:70:51:06:3f:ce:a2:11:34:
0a:f4:69:d7:06:f9:ae:d6:85:c4:53:b4:f9:72:df:7d:3c:6c:
7d:ce:57:15:75:1c:32:ac:25:fe:95:f2:e9:dd:2a:c1:12:92:
f5:ca:ef:0b:29:66:c5:e3:6e:7e:fa:19:a7:60:cc:93:a5:17:
ab:e8:6f:21:54:8f:64:01:c6:c1:40:1c:e3:b6:29:2a:e8:28:
c3:81:16:0c:89:e9:d2:98:a2:6b:dd:aa:77:52:ac:cc:91:4a:
6c:b3:80:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:15:46 2026 by rpki-client