Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
File: zzep8CHigQ2Eshji9pmyb1NXXmE.mft (raw, json)
Hash identifier: PGQhWR2Iq689g5oMUTWdgDz8DgKpEMyk5OTmIPRF19g=
Subject key identifier: A5:A7:59:85:CD:09:DD:90:2B:AE:2A:BD:A7:FF:5B:DB:C3:27:B9:E6
Authority key identifier: CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61
Certificate issuer: /CN=cf37a9f021e2810d84b218e2f699b26f53575e61
Certificate serial: 019D38D2EF6AEB46E691E9DF2B3900E25F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
Manifest number: 038B
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: zzep8CHigQ2Eshji9pmyb1NXXmE.crl (hash: 9UVFAjtEeWIxa7w0EbF6unW/nZDnGF4yXKjiItF0II4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ef:6a:eb:46:e6:91:e9:df:2b:39:00:e2:5f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf37a9f021e2810d84b218e2f699b26f53575e61
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=a5a75985cd09dd902bae2abda7ff5bdbc327b9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:7e:39:56:05:77:29:0d:72:75:ba:3d:7f:
e2:be:3e:f3:c5:58:90:01:dc:02:13:c3:5b:0b:6f:
ed:88:d0:ef:c0:3d:68:e3:8b:83:e4:73:49:bb:07:
b3:d2:b3:d9:4f:ce:b7:10:6d:a0:a0:db:46:72:41:
51:2e:e1:5e:63:e1:b4:2c:e8:3c:78:3a:96:fb:9d:
db:ef:30:da:c0:9a:89:1f:14:58:f3:4e:bf:38:1b:
68:cc:39:f6:18:82:92:eb:6d:51:aa:7e:ef:cf:1e:
1a:43:a4:14:59:45:12:89:eb:bb:82:46:5b:53:29:
07:6e:fb:bf:c1:06:57:22:c7:a9:e7:a2:42:22:88:
eb:05:06:10:f8:3b:cd:be:19:47:6c:cc:53:da:9b:
5d:dc:11:65:56:83:20:3f:61:cf:ac:b0:8a:f6:85:
fb:e2:ec:7a:90:19:d7:e1:1f:56:5b:30:84:1f:60:
8e:e6:66:f0:33:a7:26:25:2e:bf:dd:2e:fb:bf:0d:
5e:9c:3b:aa:ee:fc:41:2b:31:4b:9b:a4:90:57:8e:
1d:04:9f:ed:ce:74:e2:4d:24:b4:58:d0:12:19:7e:
19:a9:b7:d6:bd:65:37:f9:95:6d:df:5d:cd:73:02:
e6:d5:d2:2a:88:a1:ee:50:4e:f1:04:2e:f3:60:a0:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A7:59:85:CD:09:DD:90:2B:AE:2A:BD:A7:FF:5B:DB:C3:27:B9:E6
X509v3 Authority Key Identifier:
keyid:CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:43:74:16:54:30:d7:0d:8c:ca:92:e4:7f:cb:95:cf:9a:2b:
45:1e:9f:ed:c3:ff:7f:df:c9:4d:95:ff:fa:ea:d6:2a:36:58:
cb:5b:e0:59:41:65:5e:08:ff:b7:d7:e5:36:f9:2e:a1:15:50:
6e:47:66:98:5c:57:ff:fb:f0:7b:f6:cb:8a:69:82:fd:93:e2:
25:a1:51:f3:01:10:c5:6a:64:90:bb:00:fb:80:b2:56:19:7f:
c4:06:11:a0:eb:9f:66:7a:a0:b8:71:e8:06:f8:6d:09:68:28:
cb:50:6c:4e:35:43:fc:4e:76:a4:03:79:ba:a4:a4:e3:8b:aa:
8a:1e:e2:5d:a9:a0:cf:ac:fc:7a:05:7f:b2:24:d4:3a:cb:01:
05:16:20:05:78:de:c2:c7:7e:0e:8f:c5:3f:e1:13:08:64:f8:
85:1b:28:87:72:b5:71:ad:6c:1c:fe:6f:45:99:8c:ea:e9:3d:
4d:20:07:15:08:37:bf:ed:2b:12:77:93:e1:ca:10:d0:cd:36:
0e:03:47:7f:f5:ac:e3:f8:fb:0d:d5:37:58:46:da:7a:eb:cf:
a7:14:66:35:2f:be:d7:0e:25:bb:b2:c7:21:65:44:cf:99:e0:
de:29:eb:a4:ee:82:ed:45:d7:63:39:03:d7:63:0c:77:7c:c1:
86:74:4b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:06 2026 by rpki-client