Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
File: Z8i133U8dJrleBD52T87pRrgXVw.mft (raw, json)
Hash identifier: u7rG2NHVbFYpBHte5pEqsN1sUFvG49qwwHLiXjqs7e0=
Subject key identifier: 73:1B:10:B4:CB:AD:8C:15:40:01:43:3A:5D:AE:00:4D:6F:EA:06:12
Authority key identifier: 67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
Certificate issuer: /CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Certificate serial: 019D9AE38ADB54C8BE639BB79C0CFC945B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
Manifest number: 11BE
Signing time: Fri 17 Apr 2026 10:01:36 +0000
Manifest this update: Fri 17 Apr 2026 10:01:36 +0000
Manifest next update: Sat 18 Apr 2026 10:01:36 +0000
Files and hashes: 1: Z8i133U8dJrleBD52T87pRrgXVw.crl (hash: fPn1Fms9ZZIKN6461u7XVoZ3xSzr22UdNj5OXGtud7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:8a:db:54:c8:be:63:9b:b7:9c:0c:fc:94:5b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Validity
Not Before: Apr 17 10:01:36 2026 GMT
Not After : Apr 18 10:01:36 2026 GMT
Subject: CN=731b10b4cbad8c154001433a5dae004d6fea0612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:b6:34:68:20:da:b9:c6:0a:51:b4:fc:e5:
64:19:4c:99:b1:25:a1:54:58:06:75:6e:13:6e:a6:
f7:d9:84:7b:55:6e:4a:5b:be:20:58:5b:8b:16:dd:
78:fe:f2:2c:85:35:85:a4:98:1c:15:96:99:ce:83:
21:0e:61:24:fb:6c:7a:53:68:c7:c1:5a:c3:5f:97:
3f:b3:e0:9f:39:44:f9:8f:64:6b:b8:27:0f:2d:83:
60:14:84:40:f3:a2:ec:49:04:78:94:06:ea:e2:4a:
ac:31:19:87:12:38:65:14:6a:f3:d1:02:a8:23:78:
2e:9a:d6:4f:85:a6:eb:31:3b:55:60:ad:38:50:e4:
14:00:f4:87:7b:da:13:ed:c8:65:57:e5:c6:c6:e7:
79:cd:b4:20:4e:c4:f8:d0:0c:f1:7a:7d:0a:b9:37:
ac:6a:6a:12:16:bf:fe:26:78:92:f2:61:60:fe:f6:
69:4a:6b:98:ba:c2:f8:8b:1f:0f:eb:c5:13:d7:50:
60:78:37:1f:68:86:12:b7:7f:bd:46:7e:da:b8:f0:
10:ee:4e:e2:aa:87:e1:9b:7b:b2:b3:ad:38:d1:30:
c6:fa:07:88:e4:66:e5:85:e2:eb:1e:2a:2f:28:ed:
ae:a0:91:fe:5c:2b:ae:a1:b1:09:5b:23:ef:b2:20:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1B:10:B4:CB:AD:8C:15:40:01:43:3A:5D:AE:00:4D:6F:EA:06:12
X509v3 Authority Key Identifier:
keyid:67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:19:22:9a:c4:43:0a:73:f5:e8:d1:4e:3f:7f:41:a7:5d:b0:
7c:d2:e1:fa:1b:e8:d8:51:52:00:d0:62:b9:09:16:1f:22:10:
b2:c0:e9:e1:ba:c2:b8:d6:ba:50:17:b1:71:54:f6:3e:c2:67:
11:f8:20:7a:9a:74:9f:97:c9:e7:dc:e9:49:72:62:68:40:f2:
0c:81:0c:25:b5:86:5e:06:5c:e4:b8:c8:c5:14:93:65:0a:d9:
43:11:9a:dc:d7:67:b3:82:65:4a:b5:63:46:14:11:55:14:63:
f2:71:89:86:fc:54:88:ab:4b:04:ef:57:1a:70:9b:b7:53:f6:
cd:16:80:c1:b9:65:3f:2e:5f:72:2b:7f:31:38:22:39:a7:ca:
19:f1:bb:e3:f0:e1:01:79:6d:fb:e8:f4:c8:a1:c1:79:bd:a9:
ea:63:c2:db:20:b5:4a:fa:b0:0c:68:8f:0d:df:ed:cb:eb:03:
b0:f5:96:22:bf:57:9c:a1:82:fa:81:c0:64:f7:6c:5e:e8:ba:
28:76:34:63:f8:41:72:64:6a:96:ca:e2:98:25:fc:66:c0:4a:
13:95:3b:21:25:c8:f5:07:f5:b0:bb:50:65:19:ab:49:68:e1:
19:2a:4b:b4:a3:81:0e:e5:6b:a0:b7:7c:7d:32:ba:ec:e9:3b:
da:3f:4c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:31:58 2026 by rpki-client