Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
File: z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft (raw, json)
Hash identifier: 7sLmPGdr4qoz8i1pW63wDjn43EWDH6ykjvVUWzgL014=
Subject key identifier: E1:87:4F:3E:FF:70:C8:E8:ED:F3:10:0B:A2:5D:E9:6B:2C:E8:1F:99
Authority key identifier: CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
Certificate issuer: /CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Certificate serial: 019D3A54760FC3FEDC17C2072E663C731F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 16:01:46 +0000
Manifest this update: Sun 29 Mar 2026 16:01:46 +0000
Manifest next update: Mon 30 Mar 2026 16:01:46 +0000
Files and hashes: 1: z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl (hash: ywasrjg20AE0Ir8kUo7RH95Z/w6uoXSThlmOjzKiBbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:76:0f:c3:fe:dc:17:c2:07:2e:66:3c:73:1f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Validity
Not Before: Mar 29 16:01:46 2026 GMT
Not After : Mar 30 16:01:46 2026 GMT
Subject: CN=e1874f3eff70c8e8edf3100ba25de96b2ce81f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ac:74:bb:85:1b:c5:e6:9d:8d:3e:3e:0d:fb:
5e:5a:67:84:fe:f5:60:aa:d0:0b:90:27:d8:c2:30:
81:44:83:71:09:cb:17:18:fc:65:0a:2d:6b:f2:86:
a9:2b:03:86:40:58:63:4c:02:ab:09:e8:79:b1:dc:
f4:1d:61:44:3c:2c:6a:37:9f:e8:25:cb:ea:32:12:
6c:8e:4d:82:3f:9d:6a:64:85:88:fe:57:8e:72:88:
59:22:51:b8:23:45:dd:e2:13:a4:73:0e:5f:d8:92:
d5:a3:2d:c4:ff:11:d6:5d:e0:57:0c:57:cb:f5:13:
c5:71:bd:bd:50:ec:d8:d8:28:59:54:00:a4:ff:88:
8d:8b:25:ec:93:7d:71:02:11:6d:13:b0:2f:75:cb:
26:42:b0:fa:14:82:80:7b:18:81:96:e0:8c:6d:92:
0f:08:fb:9d:0b:54:b3:73:e8:e9:1c:3b:1c:b8:44:
c5:0a:ef:7c:cd:e8:f5:79:7b:d3:e3:67:3e:ee:b4:
21:90:48:78:4a:1e:3c:7e:a0:f8:b6:63:a1:e0:26:
2e:e8:60:b9:17:d8:ca:46:b7:32:ce:30:8a:57:fd:
7b:f1:17:67:81:8f:1f:72:67:08:ae:e7:29:bc:47:
13:a0:9a:a5:97:dd:66:f7:9c:3b:44:82:70:6e:64:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:87:4F:3E:FF:70:C8:E8:ED:F3:10:0B:A2:5D:E9:6B:2C:E8:1F:99
X509v3 Authority Key Identifier:
keyid:CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9e:06:65:11:a9:0f:72:20:38:a5:7c:d0:47:8a:63:24:84:
20:7c:71:13:90:04:47:ce:5b:2b:6f:f7:13:0a:89:1e:2e:49:
1c:bb:1f:ed:40:c5:bd:eb:e4:6f:b1:e2:b5:c4:ce:8e:bd:69:
76:6c:5d:40:75:fe:30:56:79:b2:45:92:e5:fb:f3:ac:bb:09:
56:0d:cf:3c:0f:b5:6f:8d:09:8e:e3:ff:e8:19:8d:0f:ae:7a:
ef:a3:a7:9f:0a:52:11:25:0f:9d:73:f9:72:eb:ab:85:54:2f:
a4:6c:9f:81:f3:ba:b7:13:d4:c6:62:46:0e:ca:e2:34:b1:59:
ec:eb:c3:73:93:af:19:fb:19:a2:90:e4:73:23:ab:a0:8f:81:
51:79:95:5a:e6:c3:0a:c9:35:df:10:b4:2f:99:bf:32:18:0f:
69:f9:43:d6:4a:33:bc:b5:d9:cb:f2:ac:d9:b6:c1:67:02:f0:
c6:0e:a4:35:fa:c0:78:e7:92:2a:4f:52:75:cf:15:d5:b9:d1:
09:4f:ba:09:65:ea:93:4e:c1:5a:3b:10:c6:e2:13:31:90:d0:
c2:43:e2:aa:74:7a:4f:b6:81:2b:b6:7a:28:1d:1a:70:2e:1e:
b4:18:66:6c:d9:7d:cc:0a:d8:9f:b6:52:3a:9b:6a:93:7f:83:
97:74:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:01 2026 by rpki-client