Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
File: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft (raw, json)
Hash identifier: luLoS1EnNlVedK++og7A2HflnZaCrwO7tXU66/eyw7k=
Subject key identifier: 46:3C:2E:57:63:BA:D4:4C:2A:0B:74:EB:A5:1A:EA:31:1C:DF:B8:ED
Authority key identifier: 67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
Certificate issuer: /CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Certificate serial: 019D390999B01EBEE8B517BE1B6BF1497172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
Manifest number: 0FC9
Signing time: Sun 29 Mar 2026 10:00:23 +0000
Manifest this update: Sun 29 Mar 2026 10:00:23 +0000
Manifest next update: Mon 30 Mar 2026 10:00:23 +0000
Files and hashes: 1: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl (hash: HqP4I0Xy3ncsNAi1q553bk3sMpHnB2PS6o+ND3gIwxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:99:b0:1e:be:e8:b5:17:be:1b:6b:f1:49:71:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Validity
Not Before: Mar 29 10:00:23 2026 GMT
Not After : Mar 30 10:00:23 2026 GMT
Subject: CN=463c2e5763bad44c2a0b74eba51aea311cdfb8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:22:d6:99:6a:a6:6d:4a:51:87:bf:2c:11:
03:d0:f5:bc:7c:39:a4:60:88:26:b5:20:fe:d1:88:
aa:3c:93:95:cc:c5:95:66:31:b3:5f:86:fd:c0:d1:
1d:b3:56:2c:54:e9:d5:8d:0f:38:ae:60:ea:c4:1a:
75:52:b8:49:3c:a6:f1:dd:a1:55:e4:23:c7:a0:5d:
e2:c7:fe:4c:92:0d:d8:19:c6:77:c7:e3:fc:7f:ad:
84:e3:9b:ed:3d:89:6e:c6:4f:aa:a6:70:6a:d0:67:
60:86:07:70:fd:88:66:68:4a:08:d9:64:b1:c5:b8:
43:60:0f:8a:56:ea:1d:32:51:0e:21:5e:33:ba:38:
9e:31:06:4f:6b:23:a8:9e:2c:04:b6:f4:a8:d7:4f:
e4:f0:da:02:fe:ab:c4:d6:e0:13:85:5e:3d:00:1f:
4d:62:63:20:69:eb:f2:5a:1c:e7:72:a4:b5:be:0d:
a5:f0:1c:4d:0f:45:78:a3:be:a4:ef:bf:bb:bb:bb:
30:48:93:24:d4:18:98:0b:97:7c:28:46:7d:9b:7c:
94:75:e7:3c:8a:66:e6:71:44:aa:38:1e:ee:9a:48:
45:5b:88:86:38:28:69:74:87:10:41:74:4c:d2:8e:
1c:0c:76:38:21:7b:69:73:75:99:58:4b:d4:52:7e:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3C:2E:57:63:BA:D4:4C:2A:0B:74:EB:A5:1A:EA:31:1C:DF:B8:ED
X509v3 Authority Key Identifier:
keyid:67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:51:65:12:57:25:c3:aa:b2:37:a8:4f:55:a1:d3:5b:d8:1c:
87:0a:ff:01:5e:78:e0:c8:33:41:8d:e5:4b:6c:7c:ac:d8:cc:
db:eb:66:55:fb:7c:62:bf:15:7e:cd:a0:0e:00:1c:9b:89:46:
c3:2d:a5:b5:61:30:52:65:b0:3e:36:34:02:6b:48:e1:f0:b0:
cb:6c:5f:97:f9:60:22:9e:43:9e:1c:62:00:d0:04:04:fb:d8:
01:3c:14:24:4c:c0:ff:02:f7:41:c9:41:cb:0f:70:f5:14:59:
07:a0:5c:79:a6:87:bf:af:dc:81:06:66:f9:dd:f1:6b:21:23:
26:3a:9c:09:61:94:48:3f:1b:c2:c0:72:ca:49:4f:b2:3e:de:
fe:34:c9:23:e8:4a:c3:c9:18:2e:0a:2f:d9:f4:a1:87:a7:c5:
c3:de:5f:ce:fc:4a:a7:fa:0a:84:fd:e3:76:1b:78:d7:e6:dc:
a3:bd:02:c8:54:a1:b5:63:2a:79:7c:1a:f2:09:81:5c:87:0e:
f3:a0:0b:c1:2e:e3:06:ce:72:c3:0c:23:7f:6d:1c:49:ca:13:
ac:ec:09:ed:a7:ec:4c:5b:46:c5:52:00:98:dd:5d:15:7f:8a:
b5:94:6d:7e:c8:50:1f:2e:92:b6:43:e8:3a:d7:70:40:49:f8:
9f:7a:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:29 2026 by rpki-client