Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
File: z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json)
Hash identifier: 4BLfegfMfqV3ufnCKzj/vW+af7nFxM32uqTUgWRkb/E=
Subject key identifier: 63:01:E4:C5:EC:AC:85:E4:92:EA:A6:43:C4:F4:A0:A3:78:B9:E7:6D
Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
Certificate issuer: /CN=cf975110c739b74f84d41703c4882832727bddcc
Certificate serial: 019D2703E591F8812462F5E717C783A829FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
Manifest number: 1813
Signing time: Wed 25 Mar 2026 22:00:59 +0000
Manifest this update: Wed 25 Mar 2026 22:00:59 +0000
Manifest next update: Thu 26 Mar 2026 22:00:59 +0000
Files and hashes: 1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: uMC5UytJTKARmq+bKe0a/V/yXwWTMBdPVlFK1wWSFMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e5:91:f8:81:24:62:f5:e7:17:c7:83:a8:29:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc
Validity
Not Before: Mar 25 22:00:59 2026 GMT
Not After : Mar 26 22:00:59 2026 GMT
Subject: CN=6301e4c5ecac85e492eaa643c4f4a0a378b9e76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:14:b9:6d:dd:7e:18:5e:dc:f1:98:a2:62:0f:
23:94:f6:77:05:83:87:d3:e0:46:bb:96:91:7d:2e:
19:f2:20:f2:ad:e1:29:4f:b5:53:72:28:21:e0:cb:
51:03:f0:bf:9a:bc:2d:6f:37:72:6b:11:67:87:01:
36:54:67:39:0c:8b:85:67:61:78:b5:93:97:bc:1f:
34:5a:a7:8e:6c:94:9e:e2:2d:90:f3:07:9d:1a:40:
18:c1:6a:fa:30:cf:0c:a2:19:a8:18:5e:de:af:c4:
c0:1a:31:2f:67:73:da:ac:c6:23:f1:52:3c:61:b3:
04:fe:85:61:78:cf:8e:7e:7a:1b:35:b7:44:36:f6:
2f:7d:56:23:22:92:40:91:7b:18:9e:33:13:41:0f:
3b:6a:4f:48:3c:09:36:8f:d1:3b:15:e3:8c:ae:b1:
56:21:df:17:f4:07:e7:b8:6f:f3:47:11:6d:1a:ef:
ca:31:5c:fd:b7:76:ef:81:06:aa:d0:c7:cf:1d:a1:
bd:2c:d2:bd:21:a3:6f:e8:91:e2:7c:ac:78:42:94:
4f:02:1e:44:41:55:2c:32:c1:c4:25:a8:9b:f8:f4:
f6:c3:b2:71:69:de:af:bf:45:47:82:3d:4a:27:a4:
f1:e1:65:d3:6e:5d:98:0a:61:53:b5:b7:4f:51:4c:
19:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:01:E4:C5:EC:AC:85:E4:92:EA:A6:43:C4:F4:A0:A3:78:B9:E7:6D
X509v3 Authority Key Identifier:
keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3b:38:2e:af:fb:a7:32:73:28:ee:88:32:3f:a1:32:b1:72:
3b:27:b0:42:43:a0:b7:75:fa:6e:70:cc:92:e0:0f:35:69:dc:
be:e5:27:81:0d:b0:68:0a:b6:c9:0d:74:73:ba:20:5c:f4:25:
6c:d0:99:dd:5a:25:32:df:57:c2:5d:96:92:94:6e:65:d0:d7:
8a:af:13:34:17:c4:96:cd:43:d4:a6:b7:9b:f0:4d:cd:99:ba:
01:86:5d:5b:8b:08:ae:c8:37:bf:db:d9:ea:5f:77:5b:74:76:
3f:f4:27:66:42:43:53:a1:db:79:88:7d:90:b7:73:d1:16:65:
04:f3:57:e0:d8:3b:4f:93:33:b0:fb:ef:81:ba:9f:fb:f8:5e:
04:45:1d:c8:68:d1:62:88:ce:a7:8f:d6:02:c1:64:21:a0:03:
71:88:ca:35:83:d0:5b:d7:53:cb:71:db:9d:1d:92:3b:eb:86:
18:19:dd:c0:07:53:c3:88:26:a5:50:e7:99:6d:5f:11:f5:83:
2a:27:5d:87:d6:d6:aa:21:86:36:76:0a:0c:15:3a:55:af:7b:
53:62:56:7c:0b:38:9d:0c:60:89:6c:e4:6c:4d:26:0e:02:44:
a9:cc:de:1d:ce:9a:aa:ef:b1:1e:69:a0:46:9e:85:99:82:2a:
51:bc:bf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:06 2026 by rpki-client