Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft
File: Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft (raw, json)
Hash identifier: urrIaAZGP6GZ1dxQLmAHitb74s5MqnCgW6HWnBqpcdE=
Subject key identifier: 1F:0A:8D:8C:DF:5D:F4:2B:F2:B8:1F:B3:D3:D2:91:DB:B1:45:2C:4B
Authority key identifier: 67:DE:8E:2E:19:81:AE:DC:93:E1:85:E8:FE:FE:6E:34:95:90:5B:EE
Certificate issuer: /CN=67de8e2e1981aedc93e185e8fefe6e3495905bee
Certificate serial: 019D37F713123E882D502125A88CB9415208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z96OLhmBrtyT4YXo_v5uNJWQW-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft
Manifest number: 016A
Signing time: Sun 29 Mar 2026 05:00:32 +0000
Manifest this update: Sun 29 Mar 2026 05:00:32 +0000
Manifest next update: Mon 30 Mar 2026 05:00:32 +0000
Files and hashes: 1: Z96OLhmBrtyT4YXo_v5uNJWQW-4.crl (hash: GQi6pNjCWxN7HFJQJ8ojmU7TKdWon1EUUXvPfdKT/js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z96OLhmBrtyT4YXo_v5uNJWQW-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:13:12:3e:88:2d:50:21:25:a8:8c:b9:41:52:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67de8e2e1981aedc93e185e8fefe6e3495905bee
Validity
Not Before: Mar 29 05:00:32 2026 GMT
Not After : Mar 30 05:00:32 2026 GMT
Subject: CN=1f0a8d8cdf5df42bf2b81fb3d3d291dbb1452c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:65:01:b1:10:c8:db:34:83:15:35:72:d4:
77:5a:03:6e:bc:00:c4:95:c1:90:3c:29:90:65:a8:
75:5c:64:dc:7b:ce:3a:52:56:6c:41:1c:53:df:bc:
8b:7a:9c:cd:72:4c:f2:f9:f7:97:05:27:69:1d:d9:
de:6f:c8:75:d0:b5:3a:d4:8d:49:db:62:76:c0:55:
82:a3:57:c9:e9:ce:fe:5c:55:51:dd:c3:62:f2:c9:
49:d7:7b:6e:f3:dd:3f:b6:d5:d0:b5:d3:15:e5:5b:
a4:60:81:d5:a0:bc:aa:8a:ce:a9:bb:6c:ad:54:00:
8d:b6:ae:f7:8c:01:eb:49:5c:3f:15:38:3c:41:4f:
40:d5:d5:ef:ec:4b:92:98:ae:d0:9c:26:4a:7a:e6:
8a:5a:4f:43:06:2d:dc:c7:2d:88:d6:17:82:b2:40:
8a:7f:8d:c8:0f:53:34:52:09:bc:60:27:a2:cb:02:
7c:ef:96:c6:81:cf:4b:45:bf:0d:94:24:18:a4:b3:
56:ae:2b:f3:20:76:0e:e7:3f:60:c8:00:e4:74:0b:
95:25:72:db:af:34:8a:ce:9d:3e:60:04:ad:41:09:
20:c3:ff:69:50:7a:75:92:ef:43:95:4a:f7:c6:c0:
33:df:79:74:8f:3c:79:76:61:5a:b6:6e:ed:c3:f6:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:8D:8C:DF:5D:F4:2B:F2:B8:1F:B3:D3:D2:91:DB:B1:45:2C:4B
X509v3 Authority Key Identifier:
keyid:67:DE:8E:2E:19:81:AE:DC:93:E1:85:E8:FE:FE:6E:34:95:90:5B:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z96OLhmBrtyT4YXo_v5uNJWQW-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3e:c4:78:af:93:c4:28:de:12:b6:ac:c8:62:1f:88:50:7f:
41:9f:70:de:7c:52:95:8a:8a:9a:4d:9d:2d:db:c2:ef:cd:f2:
ae:fd:c5:57:42:60:fe:b0:9e:0d:35:6b:ce:87:29:55:1e:27:
e0:20:6c:32:3d:e3:12:30:79:7b:e0:36:ba:71:e2:33:34:a4:
75:2a:06:a8:29:dd:ad:60:3b:b5:b9:51:d2:19:1f:4a:2c:05:
cf:52:50:13:73:ba:3b:11:bc:44:99:09:ac:e8:0a:c9:15:ab:
23:bd:0b:06:3d:45:d3:ed:3a:fa:0c:1a:88:d4:ae:67:40:0e:
42:a5:15:cc:4c:56:27:71:69:81:5c:c1:12:67:67:7d:5a:78:
43:48:d3:a4:1a:bd:95:ba:c2:c3:95:88:a3:d3:98:6c:3a:ad:
92:1a:a0:cf:e6:f2:70:17:eb:12:cb:5a:9c:63:66:85:18:b4:
3e:44:d3:77:7d:86:db:7b:55:f5:1d:1b:a9:b0:46:1c:7c:87:
56:ae:04:a6:4a:1e:7b:e6:35:94:9d:d0:c9:ef:cc:3c:64:57:
21:70:0d:59:c5:a1:1a:60:22:61:9c:7d:d2:b4:53:b8:d6:89:
c2:46:46:8a:4e:33:09:14:24:69:79:7b:01:c4:de:51:1e:99:
43:a6:8f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:34 2026 by rpki-client