Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft
File: Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft (raw, json)
Hash identifier: QQAkUSz5RTJec9w+HQilApn/ZWTlV3lWxGZvCSb5JQc=
Subject key identifier: 65:E1:B9:C3:EB:B9:BA:89:9B:9C:13:EB:0D:20:BF:01:E7:A1:E4:E2
Authority key identifier: 67:DE:8E:2E:19:81:AE:DC:93:E1:85:E8:FE:FE:6E:34:95:90:5B:EE
Certificate issuer: /CN=67de8e2e1981aedc93e185e8fefe6e3495905bee
Certificate serial: 019D2A72CB0A6DB79059310A0EF425A0CA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z96OLhmBrtyT4YXo_v5uNJWQW-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft
Manifest number: 0163
Signing time: Thu 26 Mar 2026 14:00:59 +0000
Manifest this update: Thu 26 Mar 2026 14:00:59 +0000
Manifest next update: Fri 27 Mar 2026 14:00:59 +0000
Files and hashes: 1: Z96OLhmBrtyT4YXo_v5uNJWQW-4.crl (hash: Gex7QUwspqQNTZJRmCnDrGzSh3dMXshu8O4TcXVPIvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z96OLhmBrtyT4YXo_v5uNJWQW-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:cb:0a:6d:b7:90:59:31:0a:0e:f4:25:a0:ca:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67de8e2e1981aedc93e185e8fefe6e3495905bee
Validity
Not Before: Mar 26 14:00:59 2026 GMT
Not After : Mar 27 14:00:59 2026 GMT
Subject: CN=65e1b9c3ebb9ba899b9c13eb0d20bf01e7a1e4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:7d:90:43:e6:38:10:a9:a7:a1:ff:25:e1:
fe:60:d4:73:6a:40:24:ff:62:05:1d:18:12:53:32:
a5:f6:71:a2:d7:d0:b7:a7:07:4d:74:94:66:e4:5e:
cf:68:86:f1:d8:ea:db:a9:e5:1c:2a:91:52:e8:f9:
17:6b:09:52:24:c8:23:61:ef:fd:97:12:2d:62:14:
ec:48:77:bf:fa:4f:dd:47:8d:b6:41:a8:f1:95:f0:
a6:9c:7a:3a:b0:10:f1:76:e9:2d:52:57:07:cd:cc:
97:20:8f:45:a4:b4:84:c2:be:2c:f4:d6:fb:6e:3d:
cd:e1:af:85:46:67:f5:2f:83:1a:f8:73:3b:89:be:
19:3e:88:26:8f:bf:da:d3:20:ef:09:38:4d:0e:ba:
a6:f6:33:ab:87:bc:de:db:42:c6:d9:a4:05:cf:d7:
c3:da:ff:cc:c0:90:ae:59:30:a5:4e:5c:52:2f:4a:
b0:d4:0c:53:ac:2a:9b:3c:bd:26:f3:70:bb:8f:53:
c9:2b:b1:d7:8b:0b:9c:6c:2b:91:cd:38:68:55:25:
41:b3:7a:ad:31:e9:10:0d:a1:44:89:0f:92:a7:c1:
5e:70:e0:d6:05:e4:68:13:c8:4c:8b:92:d8:78:5e:
a2:c0:dd:2c:59:2a:63:4d:f0:69:46:f0:77:07:07:
b3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E1:B9:C3:EB:B9:BA:89:9B:9C:13:EB:0D:20:BF:01:E7:A1:E4:E2
X509v3 Authority Key Identifier:
keyid:67:DE:8E:2E:19:81:AE:DC:93:E1:85:E8:FE:FE:6E:34:95:90:5B:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z96OLhmBrtyT4YXo_v5uNJWQW-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9a:19:2c:15:5d:cd:ef:e2:48:24:de:ae:f7:65:41:62:65:
70:51:9a:4d:34:00:87:c0:b6:20:f8:27:72:1c:98:7b:cd:05:
71:c0:e6:33:67:e6:36:f5:7c:69:c3:75:07:53:5a:aa:bc:e4:
2f:0d:59:2a:69:9f:01:62:a6:44:15:d6:6e:c0:a1:82:d7:11:
88:dd:e8:2c:48:c5:96:25:98:a3:53:7a:e9:be:bb:5a:7e:00:
51:d9:84:db:e9:9b:bf:6d:02:1c:7d:48:00:90:a7:7d:8e:17:
8d:d1:f0:1b:96:e3:42:61:86:7c:bd:c8:cb:30:56:59:00:1c:
6b:f1:10:1f:a1:df:2a:29:81:1e:b7:3c:b4:ca:12:37:4e:d9:
23:0a:36:3d:27:be:fd:f7:2b:fa:fb:d7:06:78:d1:47:e2:e0:
32:30:a0:2b:56:fd:8f:6d:8a:9d:57:55:35:1b:08:92:65:71:
4a:62:81:72:1a:af:14:85:a4:33:75:c6:2f:16:82:43:e1:23:
8d:ed:b6:ca:bb:81:22:fb:c9:6f:79:4d:b5:d5:6c:dd:a3:b5:
ab:0f:ef:bf:f5:34:d6:4f:ca:d4:f2:7e:50:33:df:04:25:f6:
1f:e7:5c:b7:e9:b9:99:88:45:a2:de:95:32:ed:dc:20:fb:bb:
86:7e:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:45 2026 by rpki-client