Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
File: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft (raw, json)
Hash identifier: bY0oepkfCH2Zly1opQ+KH5IjeiStbayC04kkiUGG4oo=
Subject key identifier: 80:EC:62:2E:2F:55:26:96:F8:04:0C:9A:34:CB:7F:86:8B:FD:B3:E2
Authority key identifier: 65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C
Certificate issuer: /CN=65a07d492468228aa306a66b056a0228c552ec5c
Certificate serial: 019D3A54453804EEBD867A9472DCE4BC24D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
Manifest number: 0FA5
Signing time: Sun 29 Mar 2026 16:01:34 +0000
Manifest this update: Sun 29 Mar 2026 16:01:34 +0000
Manifest next update: Mon 30 Mar 2026 16:01:34 +0000
Files and hashes: 1: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl (hash: CTOPQS2dtSjx1k0KjhfN8QXckvXuMxxr2pc9ZN4OjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:45:38:04:ee:bd:86:7a:94:72:dc:e4:bc:24:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a07d492468228aa306a66b056a0228c552ec5c
Validity
Not Before: Mar 29 16:01:34 2026 GMT
Not After : Mar 30 16:01:34 2026 GMT
Subject: CN=80ec622e2f552696f8040c9a34cb7f868bfdb3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:f8:93:0b:cb:dd:8c:b3:a4:5c:2e:40:c3:
34:98:7b:30:77:e3:92:62:85:a5:a8:a9:ef:f0:92:
3f:cb:b1:a5:34:b6:45:0f:e0:b4:04:1b:7c:f8:2b:
ef:9f:28:03:6b:c0:a2:fc:d6:f2:94:db:2d:b9:4a:
69:8f:5f:7a:3e:61:7f:60:77:17:96:70:6d:39:84:
6a:84:61:83:0f:d0:49:48:f3:bf:d2:c4:40:51:ac:
f1:e2:cb:52:51:4f:8e:48:2c:c4:5a:2f:e6:7a:f1:
91:f3:6b:ee:a6:8e:f8:19:9a:24:43:96:57:68:21:
a6:e1:b6:4e:44:d0:6d:b8:ee:ff:84:67:f3:37:ea:
b7:b8:6a:75:85:fd:35:bb:f0:3b:54:17:b6:1c:ad:
82:b4:f6:bf:10:12:5d:89:35:5a:76:99:ef:ca:74:
66:2d:49:4a:41:14:9e:2f:c5:95:4e:3b:f9:39:ae:
ae:66:24:b9:a6:31:f7:3b:5c:e4:f0:15:7b:b7:45:
77:d7:da:ec:e6:bc:c1:2f:1a:ab:8f:84:e1:25:65:
bb:2c:47:a1:ca:d5:d3:26:00:80:5d:60:0d:f5:fb:
62:62:2c:0c:37:9b:3e:75:5f:15:83:eb:96:d4:35:
c0:77:c6:5d:18:03:ca:46:d6:26:89:88:98:8a:f3:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EC:62:2E:2F:55:26:96:F8:04:0C:9A:34:CB:7F:86:8B:FD:B3:E2
X509v3 Authority Key Identifier:
keyid:65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3f:d0:d5:34:07:66:8a:cc:44:c3:74:86:5f:3f:07:76:52:
ba:40:39:f7:ab:2f:bd:0d:6a:9e:65:25:b5:4f:c0:17:02:0e:
d5:c9:58:e1:45:63:a5:b2:0d:1c:d4:c0:2d:ac:ce:c7:6a:ed:
49:99:d9:0a:b7:f4:bc:58:3d:65:3c:36:5e:e3:1c:b3:4a:94:
20:ea:12:96:9b:7e:cc:82:05:b5:47:51:6c:58:f9:c1:8b:fc:
6d:86:b0:1b:98:b1:03:f4:09:b8:82:8f:19:61:10:f3:77:42:
89:4d:c8:1a:ef:88:29:ee:f6:0f:79:9a:8d:1a:19:37:38:47:
23:56:b6:b3:b9:5f:59:1d:c9:93:da:47:5d:b9:09:59:87:1f:
dc:41:46:f3:d7:32:2c:d8:76:d8:76:af:e2:1b:19:e2:b4:51:
85:9f:67:0d:97:8d:ee:62:c8:e0:23:3e:cc:96:30:73:bc:af:
f6:45:bf:01:fc:08:b4:9d:e7:f8:bb:e3:10:d3:72:57:de:b3:
85:aa:ac:2c:6f:c6:d4:61:64:19:97:c8:85:f4:ba:00:ae:1e:
ae:e0:ed:b7:8c:3d:8f:a7:ef:14:9c:51:0c:ec:73:b9:3a:be:
7a:0c:9d:95:9f:df:47:cd:93:6b:6c:6e:4f:25:38:a2:cd:ba:
18:19:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:43 2026 by rpki-client