Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
File: zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json)
Hash identifier: vSfEa3ZLLSEvnSwUoNpJ0PgexRfPcAhJ5THcj2DNYp4=
Subject key identifier: 71:77:52:9B:98:A0:F1:71:8C:45:C5:16:A8:8A:4E:30:78:EF:24:FF
Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
Certificate issuer: /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Certificate serial: 019D99995F1633084873B43CF461B8AD6057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
Manifest number: 165F
Signing time: Fri 17 Apr 2026 04:00:58 +0000
Manifest this update: Fri 17 Apr 2026 04:00:58 +0000
Manifest next update: Sat 18 Apr 2026 04:00:58 +0000
Files and hashes: 1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: gR8VR6F/c5CmT7gAzmK/9R2bfvQByTugG0SS8ZwAjEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:5f:16:33:08:48:73:b4:3c:f4:61:b8:ad:60:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Validity
Not Before: Apr 17 04:00:58 2026 GMT
Not After : Apr 18 04:00:58 2026 GMT
Subject: CN=7177529b98a0f1718c45c516a88a4e3078ef24ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:e8:4b:43:cb:ff:c2:f6:f3:60:1a:51:db:
86:2d:2e:c1:c6:40:b5:eb:10:92:6e:35:28:6e:b2:
c4:52:49:ad:0e:ef:4c:2f:10:82:26:8b:95:ad:15:
23:0f:20:8d:dc:96:19:b6:7d:d9:34:9c:27:34:dc:
62:ad:12:aa:9f:4f:4f:0e:b9:ad:9f:bc:d8:3f:43:
ba:30:2b:58:33:78:e1:9f:2e:ea:32:6d:3d:ed:39:
90:a8:dd:66:2f:53:55:f7:9f:f0:85:c8:da:68:fa:
21:24:bd:4e:4e:ef:31:6b:08:c7:ed:a3:3c:bb:c2:
79:92:c1:3a:a5:ee:97:c8:57:86:ef:39:a1:e4:d7:
a9:5e:2c:60:02:f4:92:79:ca:8d:e2:c6:4c:16:13:
ca:ef:98:23:b8:a1:28:4b:8b:bf:be:49:40:50:3d:
ec:22:b4:3b:74:fc:cf:88:4c:f8:01:57:7e:2c:81:
60:d5:19:35:a3:56:dd:91:fa:46:a1:ef:1c:0c:e5:
4f:5c:75:d6:6e:ab:6c:e9:1c:9e:68:cc:be:55:9a:
40:90:ab:a7:08:a3:b7:7f:10:57:69:58:4f:7e:0b:
c0:dc:52:80:1f:23:7c:89:8d:1b:1c:32:ee:98:2b:
48:4a:f7:1c:86:82:6a:cf:90:99:5b:e7:08:c8:cf:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:77:52:9B:98:A0:F1:71:8C:45:C5:16:A8:8A:4E:30:78:EF:24:FF
X509v3 Authority Key Identifier:
keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:40:17:0a:57:e0:e1:de:43:7c:d2:53:7f:02:0d:fa:e5:9e:
77:1e:f2:a7:5a:0d:b1:79:ae:fa:bd:f4:9f:cc:fb:5b:ee:3b:
79:37:b1:cb:e2:dd:8c:4f:6d:2b:cb:39:43:e6:1a:25:08:45:
a7:a2:3e:7d:1d:7a:26:38:99:30:dd:18:77:c3:16:13:82:42:
73:2d:5f:7b:53:c8:fc:a5:cf:59:c9:ab:62:bd:04:0d:f8:1d:
f2:68:f0:94:b8:dd:00:8c:d4:2b:c8:30:2f:52:29:89:94:10:
c2:bc:b9:eb:8e:f4:73:de:e2:d4:a2:de:84:d2:c5:a9:91:a3:
20:06:af:54:5e:09:20:19:34:de:4e:3d:a7:3f:be:63:92:af:
86:f7:3a:77:82:40:de:7e:0a:88:ae:8d:c4:67:0d:c4:6a:29:
9a:d4:bd:84:ae:63:b7:bb:a8:e8:b4:c4:80:14:69:67:36:bc:
e2:ec:aa:98:ea:98:4f:d8:b7:31:8d:58:1a:b0:18:56:d9:e2:
26:78:a0:17:0a:0c:97:aa:dd:9d:bb:62:f2:d4:64:89:0a:ad:
3b:26:0e:ab:42:9c:8b:9a:81:b5:6d:24:30:e7:a1:94:0c:c6:
43:8e:f1:2f:66:ad:2c:9d:37:7a:f1:3c:eb:ba:6a:e5:ac:fb:
35:02:69:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:55 2026 by rpki-client