Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
File: ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json)
Hash identifier: gKzS3XCCsnET8geA/ENW582XKiKkrAoCeCeBO9uu6XU=
Subject key identifier: 42:BC:1A:A5:1F:35:91:82:AB:1B:C8:AE:2E:05:CF:B4:84:55:30:F8
Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
Certificate issuer: /CN=ce22ec994542ca7acaadd58727e4606ab4490040
Certificate serial: 019D39AF76BF95CF576AC13925330E63EC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
Manifest number: 1173
Signing time: Sun 29 Mar 2026 13:01:33 +0000
Manifest this update: Sun 29 Mar 2026 13:01:33 +0000
Manifest next update: Mon 30 Mar 2026 13:01:33 +0000
Files and hashes: 1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: af9wmjxLsNGHSfwvFOSAvIzQ5iba0dKVS8IuK1OQP1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:76:bf:95:cf:57:6a:c1:39:25:33:0e:63:ec:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040
Validity
Not Before: Mar 29 13:01:33 2026 GMT
Not After : Mar 30 13:01:33 2026 GMT
Subject: CN=42bc1aa51f359182ab1bc8ae2e05cfb4845530f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:a4:3e:2b:0f:08:fa:df:7e:64:fd:d4:b9:
c4:99:20:a8:ef:23:75:dd:aa:11:1d:67:d2:b3:0b:
cb:1b:82:f3:a2:df:6e:e4:cc:58:c7:2e:05:0d:fc:
91:c2:15:d4:22:62:b4:1c:fe:a8:ae:a8:03:18:f9:
67:96:8d:62:9f:d5:05:33:ba:1e:e9:f9:b4:a5:c2:
35:fe:24:df:4a:f8:52:9c:f8:13:50:b1:27:88:c6:
c9:f7:62:30:30:7c:05:e7:0f:bd:b7:9c:c4:48:db:
1f:17:71:fd:0f:6a:10:b3:51:f6:4f:84:56:d6:93:
bc:26:e2:49:09:91:aa:45:c8:a6:77:25:16:2e:e7:
12:8e:f9:4f:91:6b:19:24:73:e3:c2:4c:9f:ef:20:
ee:6a:f5:91:dc:0e:0b:3f:e8:b7:bf:87:a7:f8:6f:
09:b3:93:4e:f0:af:f8:d0:1d:3a:b8:bc:0a:9c:a5:
64:98:11:5f:1d:6b:a6:26:30:ca:d2:08:8d:80:d0:
b3:78:7b:76:14:11:20:d8:24:26:ea:60:9f:04:77:
4b:47:62:c5:09:8e:22:4f:a2:5d:76:6f:c4:1e:54:
ba:b7:72:a8:f0:3c:1c:73:a5:af:eb:4b:3c:5f:89:
71:da:c7:7e:57:d4:f8:f0:a4:0f:8d:25:4f:18:9c:
95:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BC:1A:A5:1F:35:91:82:AB:1B:C8:AE:2E:05:CF:B4:84:55:30:F8
X509v3 Authority Key Identifier:
keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:87:4a:62:f7:05:77:b5:03:7e:07:e5:80:65:49:8e:26:8a:
ef:4e:b9:c2:75:08:c8:35:dc:f6:df:77:44:ec:d5:b0:ac:2b:
56:40:2a:56:a4:47:80:3d:83:65:a9:9e:1c:79:87:38:2c:02:
3f:c6:59:33:65:03:03:fe:4d:67:3c:0a:0e:2e:e4:b3:2c:d9:
03:1d:39:5c:82:c5:30:74:e4:01:e3:d1:48:c2:d0:8f:33:56:
4a:86:3a:5c:58:a0:bf:3d:56:b8:0a:ab:d6:b5:26:cf:12:a9:
2a:fd:df:6d:13:86:68:62:51:ea:fe:de:99:6a:94:e5:c6:09:
d7:00:0b:fd:97:30:c9:4c:b3:a8:49:49:9a:9a:56:77:d8:ed:
b3:09:7c:b4:57:3d:f8:cf:29:eb:b1:32:17:1a:10:91:2a:43:
b6:20:ba:29:75:d1:a5:ac:d5:67:59:c1:07:fc:f2:20:48:92:
21:90:e2:db:d9:b7:14:02:7b:6e:c2:af:1d:a2:b8:f6:f1:59:
00:a4:dd:5f:ef:62:48:84:6e:7b:a2:1e:ca:87:24:a4:ae:fe:
4a:b0:be:19:ee:c7:5e:1b:b1:8e:5c:3b:d3:67:63:bd:52:88:
27:6c:bd:89:17:73:56:52:a2:1e:97:07:fa:32:dd:59:27:de:
e9:eb:83:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:56 2026 by rpki-client