Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
File: ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft (raw, json)
Hash identifier: iOVrvddHu7hVX4bp5QzMf8LFnxVPXndeNDczW/apW4Q=
Subject key identifier: 3A:85:80:26:BA:8E:27:FD:E8:4A:7C:69:73:1D:E1:47:23:EF:D4:C4
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial: 019D389C59D8C632C812BFFFE991D90A1510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:01:03 +0000
Manifest this update: Sun 29 Mar 2026 08:01:03 +0000
Manifest next update: Mon 30 Mar 2026 08:01:03 +0000
Files and hashes: 1: ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl (hash: T11dRLCsrT0DcyLDI8abIuJ3sAN7m23vAt6S5Ra/PYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:59:d8:c6:32:c8:12:bf:ff:e9:91:d9:0a:15:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
Validity
Not Before: Mar 29 08:01:03 2026 GMT
Not After : Mar 30 08:01:03 2026 GMT
Subject: CN=3a858026ba8e27fde84a7c69731de14723efd4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:d2:f2:0b:26:d7:c6:df:a0:3b:0d:ae:63:
86:ca:49:cf:84:19:ff:f5:70:3e:d4:c4:63:e2:e4:
1f:f3:81:1a:ab:4e:a9:9d:8b:c7:20:b3:98:55:03:
41:8b:9a:fd:b6:c5:2b:34:38:8b:4d:fd:3a:e3:8c:
65:0c:ff:cb:6d:ea:63:2a:93:f0:16:61:86:b7:c5:
9a:72:79:bc:6b:6f:23:52:2c:82:93:14:d0:4a:be:
80:5b:fc:a2:d6:e5:ce:39:45:0a:82:f3:93:02:e4:
e5:af:be:87:13:03:21:3a:d9:93:0f:49:19:30:e7:
d4:10:00:ea:49:73:3d:9a:86:fa:78:8b:0e:9d:7a:
6a:2b:80:e1:2e:15:cd:80:09:b5:13:44:17:5b:d4:
44:f7:5b:61:fd:d9:81:87:c7:d1:f8:4c:90:e4:2e:
43:d5:c0:ef:69:fd:f5:c2:ba:55:f1:a8:05:63:b7:
c8:cf:11:29:29:ee:b0:61:4c:4f:fd:3e:90:37:51:
fd:9a:3f:e3:1a:11:a3:fc:6f:35:26:99:d3:f2:79:
8a:b3:27:5d:56:03:73:b4:4a:8d:8e:07:3f:b2:6c:
98:a2:24:2e:fa:74:07:54:ea:de:8f:c8:ba:68:1c:
f6:bf:37:9f:8a:0c:f3:50:ae:cd:06:c6:49:db:a7:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:85:80:26:BA:8E:27:FD:E8:4A:7C:69:73:1D:E1:47:23:EF:D4:C4
X509v3 Authority Key Identifier:
keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:66:e5:d5:92:a2:d0:51:e8:a0:2a:e1:4c:31:e6:c7:74:2b:
d1:41:e8:de:16:fd:0b:a9:e8:e2:b1:96:72:90:be:9e:a5:86:
e9:46:1e:4d:9e:a9:84:e5:04:0f:6b:e8:46:57:13:10:18:7e:
a3:dc:48:f9:f1:24:c5:8e:86:a7:db:27:1a:35:b7:5d:5e:8b:
96:34:08:1f:72:64:4a:14:00:8e:2e:83:33:7c:fd:ed:af:c2:
5a:fc:ad:16:1b:70:31:a2:87:f9:4e:4f:b8:5c:07:80:fb:fc:
74:7a:ed:fd:33:a6:2f:f2:09:01:a9:ba:11:11:3d:f5:87:b6:
a4:37:95:ef:84:27:d7:85:fa:78:18:38:ac:84:00:53:c8:2e:
ef:f0:5e:44:c6:26:74:a6:0f:67:ef:7f:a9:10:a6:cf:16:ad:
9e:98:fc:5a:03:7a:62:3d:fd:d3:bb:6c:6e:2a:45:6c:5b:e3:
9c:2a:82:22:be:d4:62:a0:a6:29:e4:54:a3:71:b7:3f:f3:48:
66:c7:41:a3:1f:4b:29:21:a2:f0:da:80:31:fb:88:aa:c0:b4:
d4:97:b9:88:40:4c:78:e0:e4:4b:6e:b4:23:40:ac:d4:db:e5:
82:1b:94:de:9d:61:f4:4d:02:7a:80:13:fc:3f:84:0b:41:db:
90:11:1b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:56 2026 by rpki-client