Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
File: z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json)
Hash identifier: 7hlUSgmOAGCdOQrBF5CxW0q1u0XIkkt49ZgQjNvkV1w=
Subject key identifier: B4:20:8D:FF:9D:E4:72:0B:35:E5:65:7C:18:8A:58:8F:31:05:F8:B8
Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
Certificate issuer: /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Certificate serial: 019D2AE1018E0520BB8E2BC29FBD0F24446F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
Manifest number: 0BEE
Signing time: Thu 26 Mar 2026 16:01:22 +0000
Manifest this update: Thu 26 Mar 2026 16:01:22 +0000
Manifest next update: Fri 27 Mar 2026 16:01:22 +0000
Files and hashes: 1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: bUYt4uL7QfXoHsRvBi8oMF0wm3IDxZzgC8/FQhiPQEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:01:8e:05:20:bb:8e:2b:c2:9f:bd:0f:24:44:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Validity
Not Before: Mar 26 16:01:22 2026 GMT
Not After : Mar 27 16:01:22 2026 GMT
Subject: CN=b4208dff9de4720b35e5657c188a588f3105f8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:fd:82:9d:21:ab:19:84:1a:30:9c:a9:c3:
65:c5:67:af:c3:ca:72:aa:2f:9d:7c:47:93:69:b3:
42:76:8e:07:09:67:0b:d3:3c:9d:94:8c:e3:98:eb:
55:39:1a:3a:21:2b:e1:51:62:bd:51:f5:8b:b0:b2:
e5:80:00:e7:aa:b5:0d:35:39:0b:3e:1d:d9:ea:cb:
95:13:6b:17:f9:fe:0b:17:87:59:23:ea:b3:24:87:
67:1f:3c:a9:ae:47:54:6f:d3:1e:43:bb:b0:96:41:
5f:a9:27:0f:a8:6a:a8:ce:2d:f5:9c:af:1d:98:fc:
94:6e:30:ef:c2:e7:6e:53:4f:76:df:1b:6f:dc:e0:
cc:90:56:a6:e5:31:f7:69:81:b7:b2:bc:ef:45:da:
c9:95:48:ab:15:d8:d3:18:32:13:10:e3:7e:a1:c4:
73:49:17:20:8e:c8:a0:ab:17:5a:a8:b9:b9:b7:b1:
da:be:10:29:31:63:65:c4:67:12:ff:43:ec:97:4f:
ec:54:81:c1:08:29:e8:37:79:b8:7c:4d:d6:62:16:
54:59:64:28:ec:3f:67:27:7f:11:43:08:87:9d:94:
83:c4:87:96:cb:79:a4:1a:ba:81:d7:7d:eb:d4:51:
88:27:f0:ae:ec:c0:70:cf:22:5a:e9:7f:6c:1f:1b:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:20:8D:FF:9D:E4:72:0B:35:E5:65:7C:18:8A:58:8F:31:05:F8:B8
X509v3 Authority Key Identifier:
keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:94:4c:27:1d:2a:4a:63:ab:ab:84:b7:5b:6a:af:06:c8:43:
f3:50:33:5b:74:a2:ec:50:81:b0:fd:03:9c:7a:37:aa:2d:52:
fa:5a:1b:85:c1:05:48:74:e2:9c:a3:91:34:09:42:29:27:fb:
9e:22:8f:bf:3d:26:df:28:75:7c:66:07:9b:b2:62:52:28:eb:
2c:61:3a:f9:9d:19:ec:0c:bd:1c:dc:86:43:4a:1b:4d:ca:7c:
2b:7e:70:15:9d:f3:04:4d:fd:7d:d6:27:fd:7d:f3:61:35:e6:
15:d9:8b:7f:d2:9e:25:d5:ee:da:71:f7:3e:a6:4c:37:53:d1:
d7:7f:ad:f4:02:b9:ac:79:37:a7:79:80:97:85:75:22:fa:5c:
12:cc:a2:57:59:a0:6e:15:ce:3b:62:dd:5a:25:74:05:ba:3f:
8c:5b:ef:0d:4f:58:c3:40:a5:a8:d1:99:31:40:04:62:29:aa:
f9:e2:56:49:a1:2f:ec:3b:1f:36:9e:9c:75:75:4f:e2:bc:db:
d5:a4:38:50:52:f8:b8:e4:20:06:ac:ef:ba:e8:e8:1a:ea:cd:
54:d1:f8:e4:cd:5a:cd:1e:ca:a2:68:86:5b:6a:50:7a:a1:c0:
f7:c4:c5:50:f8:2b:2b:94:af:38:ad:56:21:14:57:14:c7:ea:
94:14:4c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:38 2026 by rpki-client