Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
File: Z8i133U8dJrleBD52T87pRrgXVw.mft (raw, json)
Hash identifier: B61GiH9Tq5/rq1X7z8d8C5V1IFl1hN8RXMF660x6kp4=
Subject key identifier: FE:AE:FC:9C:E4:32:F0:7D:99:5D:DE:C9:C5:81:BF:F0:A8:53:5D:FB
Authority key identifier: 67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
Certificate issuer: /CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Certificate serial: 019D27049E1B98D58F558F063FD042991B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
Manifest number: 1182
Signing time: Wed 25 Mar 2026 22:01:47 +0000
Manifest this update: Wed 25 Mar 2026 22:01:47 +0000
Manifest next update: Thu 26 Mar 2026 22:01:47 +0000
Files and hashes: 1: Z8i133U8dJrleBD52T87pRrgXVw.crl (hash: yn84XroCniVLKcsXx7CgxDuwJLI2vXxWuBcDx+SElCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9e:1b:98:d5:8f:55:8f:06:3f:d0:42:99:1b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Validity
Not Before: Mar 25 22:01:47 2026 GMT
Not After : Mar 26 22:01:47 2026 GMT
Subject: CN=feaefc9ce432f07d995ddec9c581bff0a8535dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:43:ff:c3:af:79:d6:a6:fe:af:32:23:d4:ef:
29:0e:1f:4c:85:56:0a:5f:bb:7a:97:b9:aa:05:47:
45:45:74:37:9f:c1:88:c9:4f:bd:ef:63:d3:2f:a6:
77:91:25:b8:d5:11:29:2b:b7:cb:5c:16:2f:4c:04:
da:a5:ad:49:bc:25:20:ce:4f:f7:af:8a:66:7f:58:
3c:46:8e:e4:7b:09:f8:01:bc:15:8c:e8:08:1a:56:
3d:9e:5d:02:9a:68:5f:f0:1a:fe:af:d4:81:d0:77:
42:44:b6:20:37:b8:f4:df:ff:b3:2a:e7:15:a3:5e:
c4:09:8f:95:e6:77:73:85:ac:52:eb:4b:f4:5d:98:
ed:af:fc:a8:34:52:e9:5e:27:93:70:57:18:4b:78:
98:dd:91:6f:56:29:90:80:f6:40:74:df:f2:e5:06:
9f:25:4b:3d:89:42:aa:97:99:14:68:1e:92:f7:d5:
da:ca:f8:65:30:a1:34:40:74:06:55:f1:ce:22:82:
22:33:26:34:32:0d:ae:1e:b6:e2:3b:95:74:c3:e8:
a8:9d:09:3e:ce:f8:a1:65:2e:03:1e:92:7b:a5:2f:
4a:33:f2:d8:c2:61:2c:ec:f6:e8:ca:eb:9e:23:c6:
43:df:1d:ad:99:57:03:d7:69:57:67:d2:3e:37:ad:
ba:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AE:FC:9C:E4:32:F0:7D:99:5D:DE:C9:C5:81:BF:F0:A8:53:5D:FB
X509v3 Authority Key Identifier:
keyid:67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:34:a6:8c:57:c5:4b:da:83:8d:6b:e8:51:71:1e:a9:2f:2a:
fe:3f:4b:cf:ab:96:dc:22:0f:20:45:58:3e:fd:53:c7:41:58:
5b:f9:c1:be:d4:8f:06:e2:db:62:a0:bc:73:03:2c:b0:2a:c1:
0c:1b:53:0d:0d:0a:72:bf:b7:d0:b1:7b:c9:e7:63:15:36:55:
23:35:ad:d8:2c:99:7b:8b:4e:64:b0:97:93:25:5b:ec:c2:48:
95:3a:eb:65:45:83:84:2f:6a:cb:e7:d8:0e:d2:87:1e:45:07:
21:ea:1f:74:89:a9:57:7e:6c:24:8b:9e:61:28:dd:4b:2d:f5:
9d:9a:b2:0a:4a:43:ac:d5:9c:29:f2:9e:83:80:f1:c6:19:50:
d9:3e:de:f7:60:b2:18:af:dd:22:92:01:7d:0e:f3:1a:6a:4f:
ce:f3:7c:aa:57:6c:7b:cf:42:a5:a4:32:29:1e:68:9e:de:c5:
e9:2f:97:c5:a6:ed:86:8b:c6:9a:07:d9:f9:a8:98:0c:db:97:
31:45:ad:6b:1d:19:3c:86:25:f4:dd:fd:1d:75:4b:a5:b2:b4:
76:8a:9f:72:e7:bb:ee:6a:fa:6f:ff:2c:66:37:7b:92:cc:4c:
33:2d:e6:b6:e6:d0:ec:ea:d9:4e:3c:ad:b1:e0:63:e0:b2:8b:
58:a9:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:51 2026 by rpki-client