Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
File: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft (raw, json)
Hash identifier: XVLB2lvjicIy06DBTlDDhXorD6GrjCEvZW3zZlKB+wc=
Subject key identifier: E4:E2:4E:0D:70:B2:36:11:58:3F:6F:00:2C:7B:EF:A6:D3:4E:DF:05
Authority key identifier: 67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
Certificate issuer: /CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Certificate serial: 019D29975F065600E7E3A3B2A665EAA11AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
Manifest number: 0FC1
Signing time: Thu 26 Mar 2026 10:01:19 +0000
Manifest this update: Thu 26 Mar 2026 10:01:19 +0000
Manifest next update: Fri 27 Mar 2026 10:01:19 +0000
Files and hashes: 1: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl (hash: lfl5akWslXKCxR21ew6sCvJq6vmsRkS8XimDpQd1piQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:5f:06:56:00:e7:e3:a3:b2:a6:65:ea:a1:1a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Validity
Not Before: Mar 26 10:01:19 2026 GMT
Not After : Mar 27 10:01:19 2026 GMT
Subject: CN=e4e24e0d70b23611583f6f002c7befa6d34edf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c1:58:2a:92:33:85:0f:e3:5d:5b:fc:de:61:
26:5c:2e:0b:53:58:55:7e:e0:3e:61:15:6c:8b:1b:
d0:a5:e3:ca:dd:cd:85:e2:27:05:d0:c0:9f:28:ff:
e0:b2:e0:3a:d4:50:35:15:10:47:11:4b:70:78:2b:
80:2e:2a:c1:e9:d7:66:32:ba:39:46:22:48:7f:b1:
6b:28:93:4a:48:a2:23:80:c9:eb:cd:5e:9e:0e:03:
ce:95:83:f1:1d:79:58:59:e5:cc:bd:0e:3e:36:16:
5b:25:01:6b:db:d3:53:ec:a7:8e:ba:1c:cc:af:94:
ae:ad:b1:a8:7e:59:c4:dd:cb:49:64:a6:4b:1f:4e:
77:f3:3c:cc:cc:6d:ce:89:88:23:db:e1:95:cf:8f:
fc:6a:1e:cc:44:34:83:6b:38:61:54:d9:1d:2d:45:
72:dd:1c:74:bc:95:7c:bb:7f:89:8e:43:5a:bd:dd:
d2:d5:f6:7b:4f:d2:f4:bf:67:f3:1c:ca:c1:4e:40:
e3:7d:49:9e:37:6a:ec:46:d2:38:7e:66:79:cb:89:
81:b7:e2:88:10:08:c2:f4:24:10:a3:f5:68:12:55:
52:28:a4:19:39:08:9a:28:76:15:fb:f1:fa:e8:81:
88:6f:42:74:ee:ad:de:09:1e:54:f1:58:e6:19:a8:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E2:4E:0D:70:B2:36:11:58:3F:6F:00:2C:7B:EF:A6:D3:4E:DF:05
X509v3 Authority Key Identifier:
keyid:67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c4:1f:98:31:6f:27:bd:aa:ff:a4:df:6c:7e:db:00:f0:95:
e6:26:bd:ac:33:d7:56:6a:55:39:61:77:f1:17:f8:7a:75:0a:
cb:94:b2:0c:b5:2e:11:ac:42:32:b6:ca:8a:f9:27:e7:20:e3:
ef:bb:77:c7:a2:57:13:33:0e:92:4c:45:2c:4c:68:ef:c9:83:
53:13:87:f9:c9:b6:8c:7e:07:3e:64:50:4b:6a:a8:ba:4f:00:
b7:1d:52:ad:6b:81:17:54:f2:41:a7:b0:a5:ec:cf:70:d0:63:
89:96:92:b0:90:7f:a9:1d:3b:26:bd:f4:a0:44:92:13:0f:07:
53:f1:68:c9:bc:00:7e:4c:15:4c:35:a5:f4:b9:fa:a8:4c:49:
ec:70:d2:32:e5:05:ba:5d:fe:d3:73:4b:27:75:42:28:bc:db:
de:9b:0e:39:52:64:09:a1:20:b9:24:4f:7d:be:b1:54:98:27:
e8:e4:8c:0d:89:75:34:21:cb:27:68:02:78:5d:bc:dc:fb:6c:
04:d5:cc:f0:78:9f:df:f3:5e:8d:c7:6c:81:f2:4f:cc:fb:2f:
66:f3:92:0b:12:8b:42:73:44:b3:f2:bf:77:fb:6b:b2:38:d8:
13:42:bc:af:21:15:f8:6c:2f:2d:d3:77:ae:d5:15:a9:40:4b:
55:cd:cf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:58 2026 by rpki-client