Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
File: z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json)
Hash identifier: XZbe+Ghz1Kgr4GNSnec8SNKqyG3j8zpmIblXmcs4Xng=
Subject key identifier: 17:69:C2:2C:FA:24:03:F7:C5:A1:BF:DE:8D:9E:A7:EB:2C:5C:3A:0F
Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
Certificate issuer: /CN=cf975110c739b74f84d41703c4882832727bddcc
Certificate serial: 019D38657DA552FFAAAB30871C3E1F4E132C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
Manifest number: 181C
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: 5Nr8eHmdlo6XERrvtKvX8Z4c4L8tm8f0FwcexNicatY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7d:a5:52:ff:aa:ab:30:87:1c:3e:1f:4e:13:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=1769c22cfa2403f7c5a1bfde8d9ea7eb2c5c3a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:af:56:01:68:a1:23:d4:18:cf:99:c5:88:
45:bb:ab:d2:15:d2:0b:16:e4:a4:04:e4:d2:50:f6:
15:fc:5d:dd:e7:12:e2:c2:72:7b:1a:0d:1b:1b:b9:
b7:12:34:f2:c3:0a:c3:08:b5:15:da:0b:cc:6d:78:
a2:97:87:4a:45:65:a6:9e:91:be:48:62:7f:d3:65:
1c:00:a2:e7:19:42:37:15:a7:62:7b:0e:81:dc:0a:
97:ba:28:05:0c:e1:69:f5:fc:76:21:af:c1:77:4f:
e1:3d:27:50:ea:37:34:bc:a1:d5:53:6c:85:c6:32:
cc:e8:35:5b:90:96:7a:10:f1:de:45:8c:51:38:76:
4c:e4:8e:76:d8:a9:25:2a:4b:a8:71:a5:dc:65:22:
06:32:db:7a:8c:d7:c6:69:44:70:96:34:6d:b5:09:
73:ec:96:d7:42:08:00:9a:f5:e3:d3:c1:b0:41:3d:
ce:70:1c:79:9f:02:90:48:b7:09:ec:fc:f8:cf:d7:
38:96:20:8b:45:72:2c:40:5c:ef:b8:20:3c:ee:3b:
83:a3:f1:94:9c:f5:9e:97:a1:01:0a:30:d3:d4:64:
f1:2c:5e:5d:16:16:99:41:b1:26:7f:9a:3f:52:b1:
da:d6:4c:58:d6:ec:9e:8b:f8:35:a8:e0:5c:cb:0e:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:69:C2:2C:FA:24:03:F7:C5:A1:BF:DE:8D:9E:A7:EB:2C:5C:3A:0F
X509v3 Authority Key Identifier:
keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9a:6a:0e:10:e6:bc:cd:23:45:f9:39:59:97:b5:a5:5a:e5:
7c:e1:43:9c:ba:4a:47:24:37:be:da:ad:9f:b6:59:44:02:98:
34:4c:6b:0e:ed:36:1b:02:e6:3c:d3:a3:0f:92:7c:38:53:ca:
60:53:dd:1a:50:33:00:8d:b0:1a:26:0e:f0:0d:90:cd:42:46:
45:fe:d0:04:20:21:8d:bf:d3:9f:ff:2c:bc:1b:cc:a8:60:b6:
fe:92:99:3c:cc:4d:2a:ac:4f:34:9b:3c:f6:03:c9:71:42:cf:
47:19:86:fb:4e:d9:23:c2:73:6a:5d:f4:d3:06:92:c4:f7:9b:
b5:9f:4e:36:5d:e2:62:71:8c:b4:57:bb:98:40:1b:71:27:bf:
00:bb:16:8c:99:6a:f2:ed:55:96:de:33:69:9f:a5:d3:1b:d5:
20:86:b3:d5:79:48:cc:a6:18:c8:77:f1:5e:6a:1f:e0:8f:18:
58:ce:dd:43:3c:84:87:56:c3:ff:7c:92:63:ef:ea:f2:20:4c:
00:3b:d1:b1:2e:3a:58:44:10:26:c4:fe:01:df:78:7a:2d:a5:
44:0a:45:c5:ee:27:4e:b0:b5:d1:6f:80:63:41:75:a4:e3:fc:
cc:e7:f3:c9:14:e8:a4:da:70:7c:7c:06:c9:c1:52:c6:99:88:
57:62:98:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:38 2026 by rpki-client