Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json)
Hash identifier: hzuD3ufUN3j5IYemTqNjEC4NyUrCU0Zj9mIAJ8RL4/M=
Subject key identifier: 85:72:6C:19:C3:B8:9C:D7:68:2D:47:8B:CB:57:BF:0F:05:EE:05:7D
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial: 019D382DF217293FE61E370AA6D29D1E7D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:28 +0000
Manifest this update: Sun 29 Mar 2026 06:00:28 +0000
Manifest next update: Mon 30 Mar 2026 06:00:28 +0000
Files and hashes: 1: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: 93CExZuNA1ie3EGyYcwSkPQi0n4HQQOHtx1eqd+fC/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f2:17:29:3f:e6:1e:37:0a:a6:d2:9d:1e:7d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Validity
Not Before: Mar 29 06:00:28 2026 GMT
Not After : Mar 30 06:00:28 2026 GMT
Subject: CN=85726c19c3b89cd7682d478bcb57bf0f05ee057d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:e1:29:8c:95:e0:4a:28:34:2b:9e:89:07:
33:03:51:77:cd:1e:3a:e8:28:be:6d:51:17:5d:12:
15:9f:bd:be:07:6b:36:ac:49:c1:c6:4c:8c:6e:e6:
10:7e:12:cc:03:95:66:cb:d4:08:67:60:8f:de:7b:
27:a8:e9:d0:75:f1:33:b4:39:00:c9:80:ba:ad:ec:
4a:11:5e:a1:76:59:32:18:ad:96:a9:c1:fd:0e:d4:
5d:43:ce:12:be:5c:08:cc:ad:f7:4d:fe:82:2f:aa:
95:f0:59:3b:d2:98:04:33:3b:07:f0:66:40:73:52:
3e:f7:b5:77:66:d2:6c:d2:b7:4b:01:6e:6e:8b:b7:
13:ab:19:ab:ee:0c:e7:fc:ef:14:ac:1a:c5:e0:e7:
b5:fe:a9:b5:96:5a:7c:7c:d9:f8:4e:28:a3:57:f9:
3d:f5:90:33:0c:2a:05:db:4a:dd:36:55:7b:3b:c2:
f0:45:4c:52:58:34:7c:7b:92:c5:b6:82:0f:fb:90:
a6:4d:4d:03:63:aa:9e:4f:39:c3:ae:8d:23:03:43:
77:1b:ea:6f:75:c8:f4:a9:7b:ee:9a:e7:ba:fa:a2:
13:1d:a9:e2:57:e3:25:0e:31:24:9b:c1:55:a4:29:
45:f8:3a:f4:f3:95:a6:23:8b:fc:c0:05:b6:2a:dd:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:72:6C:19:C3:B8:9C:D7:68:2D:47:8B:CB:57:BF:0F:05:EE:05:7D
X509v3 Authority Key Identifier:
keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e2:a6:79:6e:c0:3f:17:f4:f0:f7:36:44:24:73:8e:75:ed:
3a:98:a3:8a:6b:1c:9c:3d:2f:cf:17:74:97:69:f2:74:d3:9a:
7d:db:09:ff:5a:05:69:0a:56:4b:cd:90:ea:77:da:eb:36:e2:
32:98:92:a1:6b:46:28:9f:c7:88:72:95:b2:e3:4a:db:bf:51:
f4:be:8b:01:fe:7d:6b:31:5f:4c:21:5a:94:a1:98:14:c2:3a:
98:82:37:34:c0:9a:57:c6:fd:5d:0f:40:5a:4a:de:f8:a9:76:
66:70:0b:d9:df:62:62:ec:fe:5c:7f:42:0c:35:08:47:19:6b:
1e:13:ca:87:f6:f1:44:ff:1e:a3:4f:52:87:a1:84:b3:06:15:
a5:c7:a5:d4:2c:d7:19:21:92:72:09:36:d7:b3:a0:ed:8e:44:
83:8b:cc:6e:8e:ef:22:9a:7c:8c:ab:b9:ce:13:80:2a:46:5c:
ea:94:51:e8:a6:d1:be:93:8a:8c:10:81:da:d5:c0:af:54:ca:
25:19:eb:95:bc:09:af:aa:d0:71:43:ab:a9:6e:64:92:42:3d:
49:49:b4:a4:eb:ac:45:a5:6b:8c:6a:58:5a:2f:74:60:18:48:
18:84:b3:ac:b2:16:14:f5:1b:77:1c:39:32:60:14:eb:3e:f3:
77:00:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:49 2026 by rpki-client