Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: +2it2K4du5YXmvQy5P6Vgh9kIynYHOQqpOiF15GNkoc=
Subject key identifier: 24:07:47:2E:10:3F:7E:06:16:E3:7E:7F:17:1D:EA:91:F6:7E:AA:A1
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 019D284D365F8DEB9E27FF5C96BFA6AC9325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 04:00:41 +0000
Manifest this update: Thu 26 Mar 2026 04:00:41 +0000
Manifest next update: Fri 27 Mar 2026 04:00:41 +0000
Files and hashes: 1: f8pXdTunsFienw12OWOwkjd9_Sg.roa (hash: D84B6IFhxTwUljKKeuMD7kN/I53xCeCr1djjSkG38Ek=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: xzhKcfYixmjzCuDJrdu3liVy0RwDOK7o7dEZI+37iV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:36:5f:8d:eb:9e:27:ff:5c:96:bf:a6:ac:93:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Mar 26 04:00:41 2026 GMT
Not After : Mar 27 04:00:41 2026 GMT
Subject: CN=2407472e103f7e0616e37e7f171dea91f67eaaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:b4:81:cb:aa:7a:b1:1d:6e:1e:50:af:4a:
5f:6c:01:c9:50:bd:13:d0:fd:79:ac:e1:ba:d4:94:
88:4d:4b:5c:1a:8a:8e:f2:e1:1f:27:29:86:c3:bf:
1f:78:97:35:40:7e:fc:03:6f:64:2a:49:8c:e3:79:
56:32:6c:83:75:ee:4c:7f:5a:1d:1a:99:b5:3f:cf:
86:f5:fa:39:d5:49:8e:71:3a:00:ea:00:95:cf:b9:
b0:24:95:34:90:0f:70:f9:b4:e9:86:61:a3:e5:b5:
3b:45:de:69:17:5c:54:b2:fc:9d:02:a9:23:05:6b:
21:86:6f:04:e2:26:69:62:87:a3:44:12:71:ac:5f:
75:03:4e:95:96:21:cc:a7:93:77:3b:79:46:77:df:
11:d2:ab:7b:0d:48:cf:92:ac:f0:36:df:8e:92:67:
fa:ab:b0:26:f5:2c:44:98:07:65:f2:c3:dc:db:8a:
c4:51:ce:a8:7b:16:15:ca:2b:10:f3:f4:38:8d:52:
b4:04:1b:6d:7c:ae:76:53:3a:fc:ee:75:e2:94:5e:
59:50:32:bd:3a:c7:13:15:81:78:63:05:54:7f:9f:
08:73:c7:02:22:88:2b:92:b6:36:0d:0d:6e:c7:a6:
04:db:27:c1:e0:b6:6c:d8:49:ba:d2:9e:e4:9a:e0:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:07:47:2E:10:3F:7E:06:16:E3:7E:7F:17:1D:EA:91:F6:7E:AA:A1
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:49:10:b4:c5:7e:63:48:53:95:f2:65:1a:c5:eb:e8:1d:b5:
27:63:d5:01:7f:15:98:26:50:97:45:4a:ea:b2:dd:9b:c8:80:
01:a2:9e:3d:a3:16:26:3e:22:4e:66:ec:d5:8d:c4:3d:02:32:
96:10:95:16:2a:7a:2c:8a:be:b3:3f:75:1d:31:fa:e5:fe:db:
43:cf:3f:8b:13:d4:ae:b6:be:ea:0d:80:64:65:ef:8a:55:ac:
a3:ab:56:94:4d:74:d7:44:95:fe:7f:36:0a:89:fd:fb:79:b5:
4c:a2:6c:6b:c0:0a:b7:36:8f:a3:90:0f:b8:35:c3:a5:dd:bf:
55:1b:ea:f8:0d:53:d5:39:50:f3:07:6f:7e:2d:8a:8b:69:36:
eb:bc:b4:67:32:e2:b9:a0:48:ec:00:b1:89:89:08:e9:e2:82:
62:98:7c:a7:34:4d:32:81:cd:52:e3:2b:99:b5:1a:56:44:4c:
ea:dc:37:d6:38:9f:7a:e1:45:8c:eb:ae:65:9c:54:e6:b3:cd:
6e:e8:34:1e:6d:43:47:c8:25:43:ed:4b:55:6f:a0:d8:8a:c6:
52:eb:aa:4c:50:0c:a6:0d:0a:5f:8f:8a:7a:98:7b:41:ac:a4:
10:35:c8:f5:11:d9:2c:de:92:bf:67:f7:8b:bd:88:89:6a:6a:
63:8d:55:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:04 2026 by rpki-client