Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
File: cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft (raw, json)
Hash identifier: ZAY5l0R/3J14W2P+4AHxbIn16brZ5u9YgYXf6vT4ZBk=
Subject key identifier: EE:A6:A5:4E:C8:37:53:2E:3A:CE:B2:FB:E8:7B:38:A6:15:20:80:C7
Authority key identifier: 71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
Certificate issuer: /CN=7192f3560c15b94d1ef497726845d786786bc762
Certificate serial: 019D98F4D4AC68D403481CCE24359AD66327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
Manifest number: 0FF5
Signing time: Fri 17 Apr 2026 01:01:15 +0000
Manifest this update: Fri 17 Apr 2026 01:01:15 +0000
Manifest next update: Sat 18 Apr 2026 01:01:15 +0000
Files and hashes: 1: cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl (hash: zKWjaN+tMA81+nyuLdhSsaVu7ujv0x9TSiyiftBotMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d4:ac:68:d4:03:48:1c:ce:24:35:9a:d6:63:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f3560c15b94d1ef497726845d786786bc762
Validity
Not Before: Apr 17 01:01:15 2026 GMT
Not After : Apr 18 01:01:15 2026 GMT
Subject: CN=eea6a54ec837532e3aceb2fbe87b38a6152080c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:c0:81:3b:ef:3e:76:86:7b:5d:51:20:9d:
57:f2:1d:b4:80:2c:b6:de:3f:ec:19:75:1a:03:7f:
5d:39:c6:c6:81:de:7a:e1:34:47:61:e2:d8:3f:10:
01:5d:b1:a6:f6:74:df:68:6a:87:75:de:52:f6:23:
b5:46:ce:1e:c2:75:08:b7:38:b1:23:02:68:de:87:
41:96:69:a2:07:d9:75:4c:0c:eb:76:3d:ca:63:0f:
ba:27:c2:4b:af:b4:32:f9:cd:0c:d8:33:78:bb:79:
ac:6a:39:09:60:3f:56:71:2c:a8:2c:9f:7e:63:b1:
7d:06:ca:e9:88:e5:8b:ae:03:e7:76:1f:00:3b:5d:
1c:98:4d:57:85:93:f2:48:7c:a7:40:97:b1:a6:92:
99:cd:40:e6:6d:7c:c6:6a:d2:68:80:ae:bc:22:04:
15:3a:23:61:0c:e7:71:ec:38:42:f6:81:31:ec:fa:
84:ff:70:3f:05:35:0f:c8:7a:bc:59:dd:89:a4:ce:
01:f6:5d:46:05:db:e1:9e:97:71:c9:20:87:e9:3d:
2f:4a:90:a0:ef:24:5c:0a:ba:b5:33:bc:45:a4:3d:
af:e2:d9:9f:d1:88:d9:e2:df:12:c7:93:82:92:f6:
51:f1:f6:87:6b:6e:b0:6b:c0:ed:05:4d:0b:4e:57:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A6:A5:4E:C8:37:53:2E:3A:CE:B2:FB:E8:7B:38:A6:15:20:80:C7
X509v3 Authority Key Identifier:
keyid:71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:55:de:d2:c1:df:d4:37:b0:65:cc:cd:37:08:ee:77:a6:99:
d1:51:c2:0b:d0:68:2e:88:74:5d:ec:35:89:9b:77:2c:d0:96:
d9:60:30:4e:e1:a7:89:9d:bd:7a:3e:1f:50:79:5f:8d:df:45:
9e:27:76:f1:ca:6e:ab:3b:ed:6e:8a:c8:dd:d7:19:99:21:b1:
c5:f3:5e:57:86:d2:3e:8d:79:90:ca:7c:a7:a5:b6:5d:bf:84:
f4:ef:b5:e6:21:fc:c8:80:be:a6:da:57:3a:9a:c3:76:f8:99:
89:4c:ea:c3:e6:e9:69:5c:27:a2:90:2b:5e:cd:4a:98:43:03:
47:ce:5f:c2:b6:0c:9a:be:ce:5a:59:ee:b7:f8:f2:17:ff:1a:
5f:82:72:c1:fe:14:3b:20:ad:d7:bd:91:0b:54:11:18:53:79:
21:d4:79:b4:4d:02:ee:5b:7a:3a:49:cd:97:2e:ea:6e:c4:7f:
ac:c0:4f:f7:4e:a0:8a:52:79:84:57:f9:03:33:1c:5f:75:91:
62:e1:9c:c7:11:1f:17:54:be:f0:0c:eb:c1:4e:93:63:0d:1a:
4a:26:3d:d3:2d:24:8a:47:80:01:ba:6e:85:0b:ac:e8:d2:9c:
f6:74:59:5b:7a:16:91:80:c7:52:cd:78:99:a4:42:a6:a3:56:
49:65:cd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:14 2026 by rpki-client