Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
File: z32kMRhYgiWjduwhScczbEYzZEA.mft (raw, json)
Hash identifier: XQJ+uye//nB1HzQ62XZVM+RKHfVn7HivRiDRdIFZfIo=
Subject key identifier: 51:75:E9:4D:38:69:8D:4A:B3:14:10:BF:FB:8C:1F:F5:4A:AF:D6:A6
Authority key identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
Certificate issuer: /CN=cf7da43118588225a376ec2149c7336c46336440
Certificate serial: 019D382E9A2803827BB20CB2E14FB33102DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
Manifest number: 10AD
Signing time: Sun 29 Mar 2026 06:01:11 +0000
Manifest this update: Sun 29 Mar 2026 06:01:11 +0000
Manifest next update: Mon 30 Mar 2026 06:01:11 +0000
Files and hashes: 1: z32kMRhYgiWjduwhScczbEYzZEA.crl (hash: zXMrbXlPyKmAP3vVyfcgA7HQS5WH5f+bb7Nsmaq6JTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9a:28:03:82:7b:b2:0c:b2:e1:4f:b3:31:02:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7da43118588225a376ec2149c7336c46336440
Validity
Not Before: Mar 29 06:01:11 2026 GMT
Not After : Mar 30 06:01:11 2026 GMT
Subject: CN=5175e94d38698d4ab31410bffb8c1ff54aafd6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:02:85:25:bb:74:bc:e3:15:9e:b2:86:f5:
7d:40:d3:87:dd:c3:35:2a:7b:85:1d:9a:7c:b0:d3:
1b:94:f0:e7:09:78:3a:ed:19:46:fa:e6:d5:d0:72:
d8:b9:df:24:64:2d:ee:8f:2f:be:46:b1:35:99:b1:
88:90:d9:55:98:6c:5a:f5:fe:91:64:ef:82:d5:3d:
ff:a4:c8:7d:eb:4d:c8:13:81:c3:51:ff:13:a2:10:
e5:df:c1:66:d2:21:b3:c9:93:f0:29:6f:00:f8:b0:
d9:af:00:a7:a1:ed:9d:93:d3:7f:58:db:c6:e3:3f:
fa:db:e3:42:6a:d2:f9:1c:b1:27:4f:91:ec:fe:ca:
85:fd:93:5e:db:13:d7:78:05:57:4c:3f:7d:02:8a:
ca:9e:1c:ca:0f:9e:ab:63:f3:c7:f8:97:cd:20:72:
f5:11:ed:0d:fc:a3:38:03:d5:2f:e1:85:c7:3b:ad:
b9:a1:11:4d:b7:8d:91:1c:6b:67:9f:03:a2:c5:b0:
0f:dc:b4:aa:a4:77:97:92:ca:2f:b6:0e:09:44:f4:
7d:c5:f7:fb:ea:31:98:40:48:5f:d3:7d:24:ee:0a:
0e:7b:09:02:00:96:6a:ad:74:ce:b7:37:0b:1b:75:
6a:7a:ef:41:14:e5:ee:ae:ba:44:2f:08:30:c8:de:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:75:E9:4D:38:69:8D:4A:B3:14:10:BF:FB:8C:1F:F5:4A:AF:D6:A6
X509v3 Authority Key Identifier:
keyid:CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:91:17:d9:3f:a4:6e:13:7f:35:24:3f:23:b2:d2:0b:d0:af:
bc:11:04:16:13:07:35:46:7d:b2:a2:c8:a1:4b:dc:99:4d:e5:
94:a6:5c:a5:01:48:37:bf:31:39:3b:e4:e4:a8:f3:59:c5:c6:
b3:7f:ad:4f:9a:87:15:aa:75:cb:af:47:7a:d5:f5:6a:1e:ed:
41:18:90:38:f7:f0:60:0c:88:8e:9c:e9:5a:14:f2:20:3d:a9:
22:12:4b:9c:fa:d7:88:ab:40:c6:8d:83:68:6a:4a:ee:8b:96:
0e:49:79:8d:37:d4:13:22:53:40:9e:18:af:05:e3:10:13:b8:
ce:8f:6a:21:a5:78:27:a3:b2:12:a6:28:a3:1f:77:f7:71:43:
bd:42:c2:d9:ac:db:16:40:c6:7a:68:fb:4f:84:d2:65:34:02:
b1:a5:89:6f:e8:ed:c5:fa:f4:2a:a8:bd:14:52:67:ac:21:65:
98:a5:32:c0:13:a4:77:18:c5:1e:6b:7c:5a:68:d7:88:8f:fe:
c6:af:1d:0e:e9:cb:40:8b:69:6c:15:cd:0d:07:9d:4a:c7:48:
26:e0:7e:93:0b:c7:8d:2b:d6:9e:7f:36:b9:a8:0f:94:50:49:
84:76:19:7a:f4:ad:64:d7:5f:5e:fb:76:ba:dc:09:da:5e:ff:
fc:06:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:18 2026 by rpki-client