Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File: z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier: XtSQuXGWfLVwLsjjYhqGChDHHnuDLEl69P7dfgk0VSQ=
Subject key identifier: E1:5A:42:0C:68:F2:87:A1:64:06:24:67:19:7C:C3:DA:47:C6:B3:98
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer: /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial: 019D25841C44067EF873C0657F9F0371E023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number: 082F
Signing time: Wed 25 Mar 2026 15:01:48 +0000
Manifest this update: Wed 25 Mar 2026 15:01:48 +0000
Manifest next update: Thu 26 Mar 2026 15:01:48 +0000
Files and hashes: 1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: HBd0ljvynRskIU39vugY2rFlptc0krurpvfa0oLRLjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:1c:44:06:7e:f8:73:c0:65:7f:9f:03:71:e0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
Validity
Not Before: Mar 25 15:01:48 2026 GMT
Not After : Mar 26 15:01:48 2026 GMT
Subject: CN=e15a420c68f287a164062467197cc3da47c6b398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:2b:b4:04:35:c5:d8:a5:0d:79:5b:b2:96:
91:c0:55:29:e9:2a:83:f6:c3:38:06:2b:82:9b:6d:
dc:28:06:6f:5f:f6:42:a7:a9:31:c5:82:8f:9e:ce:
b7:10:f7:42:b8:f2:63:c5:02:e1:a1:98:a7:d5:fe:
f6:01:70:e8:91:94:32:61:be:d0:e6:97:92:f4:32:
ff:81:c1:06:35:4b:b0:38:d6:75:38:83:a8:3f:4d:
3d:ca:cf:2c:2c:0e:f0:30:28:12:3f:cd:cb:60:ff:
69:a9:d2:17:86:8b:0b:ee:5c:8b:45:a3:5f:c2:71:
07:73:12:83:73:13:2a:f6:be:c5:01:31:3c:a7:06:
76:12:e1:6d:6b:24:69:42:15:ae:17:15:98:b4:01:
17:1c:81:8b:50:11:07:58:4c:dc:7f:5d:70:ac:9f:
15:66:97:f0:12:2d:45:19:3d:d9:d3:41:d9:a4:fb:
e5:5e:6f:86:bb:b6:fa:30:2f:ed:e7:c3:42:30:be:
fe:fc:dd:4d:8d:20:1b:6b:51:c3:60:bb:56:cb:1b:
c1:97:79:3b:ab:f0:33:2b:14:ff:16:a2:11:4b:fe:
42:67:94:a3:7d:ba:2b:b4:0d:c1:fc:66:c6:a7:87:
47:4a:55:11:50:b5:c2:0e:a6:32:03:08:43:ea:4d:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5A:42:0C:68:F2:87:A1:64:06:24:67:19:7C:C3:DA:47:C6:B3:98
X509v3 Authority Key Identifier:
keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c7:5f:30:02:81:ca:85:5a:f7:b4:46:42:2b:d1:ba:20:bf:
dd:2c:7a:10:a7:20:6c:b0:a6:0f:55:81:95:1e:18:a1:9b:f6:
4a:e1:28:ed:c5:05:c5:94:e3:b0:88:83:a8:b2:0a:fc:a8:59:
53:04:34:f2:da:0d:6d:51:2a:bc:fb:68:32:5e:98:e8:d6:e0:
c5:5c:07:3f:ba:8e:54:69:34:b7:0b:25:b3:c8:86:82:84:fb:
b1:05:9d:f7:99:3c:02:87:96:d8:a1:d6:d1:02:1a:90:e9:02:
48:5b:41:0a:62:1f:cf:ae:f8:d8:5f:09:3e:86:0b:56:d1:ef:
1c:a7:ea:21:5c:84:09:11:fe:50:99:b1:48:58:2d:af:26:88:
cf:a7:92:8c:a3:99:fb:7c:01:38:24:4b:52:e3:11:7c:6a:fa:
d7:00:9e:2d:66:f6:57:f3:26:3f:2a:cb:01:1f:16:6a:66:d6:
f2:30:b5:8c:e9:96:3e:bf:1b:b1:90:e4:c9:29:d0:ee:42:3d:
41:2e:9f:40:01:12:5b:c2:d9:32:67:04:c7:0e:17:28:70:37:
1c:60:db:3c:29:47:bd:b1:fc:32:14:06:65:32:3f:94:e0:43:
b3:67:12:57:7d:1f:05:ec:38:fe:0e:ea:05:a7:d4:d4:2b:df:
e5:a6:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:40 2026 by rpki-client