Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
File: Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json)
Hash identifier: Xjd7Sd7E6wMbD/FmqmqDL5tzKPrTlJdzFr75uj6OJqA=
Subject key identifier: 5F:52:A4:7A:11:EE:25:50:D3:28:0D:A7:68:CA:6B:2F:2A:BE:CF:19
Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
Certificate issuer: /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Certificate serial: 019D386563FB3CDD8AE349601D475E1BF7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
Manifest number: 0C9B
Signing time: Sun 29 Mar 2026 07:01:01 +0000
Manifest this update: Sun 29 Mar 2026 07:01:01 +0000
Manifest next update: Mon 30 Mar 2026 07:01:01 +0000
Files and hashes: 1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: 3rzrdMCpehKE5WsxuRMEerFIEGwoOYLljogdJUL2sVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:63:fb:3c:dd:8a:e3:49:60:1d:47:5e:1b:f7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Validity
Not Before: Mar 29 07:01:01 2026 GMT
Not After : Mar 30 07:01:01 2026 GMT
Subject: CN=5f52a47a11ee2550d3280da768ca6b2f2abecf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:70:58:68:1f:e9:8a:17:9d:1e:48:85:15:
8a:d9:5a:5f:92:6e:16:12:a8:83:be:7a:c7:93:c4:
6b:83:98:57:e4:59:ae:27:b9:fd:8d:55:67:53:ec:
c1:7b:e5:de:24:d0:08:4a:f4:60:90:5e:e9:07:d0:
5c:50:f4:d3:e3:b3:a4:93:d8:aa:b9:51:3c:5a:cf:
7d:7a:cc:ed:e4:11:95:20:3b:2d:58:70:92:bb:23:
f7:9d:f2:8d:20:90:35:c0:4c:ad:d2:8c:4e:ba:7f:
8e:33:cb:df:f6:ff:c7:26:ef:92:3c:32:ec:c2:ec:
99:4b:09:18:a8:45:b9:36:18:fd:e3:d9:95:d7:0b:
fe:9f:cb:13:8b:d5:5c:de:fc:e5:27:80:6f:a6:aa:
d7:e2:74:7b:d7:fd:03:52:76:ad:35:46:9d:bf:15:
9f:ae:eb:60:60:c9:eb:66:71:ed:b1:d4:a8:31:80:
73:a3:02:d0:7a:cb:67:8f:73:d4:88:d0:bb:17:53:
1b:6b:ac:d4:32:f6:e4:e0:20:b0:70:42:0a:91:4f:
62:e2:fe:c1:2b:70:ae:ab:f2:d4:82:27:ef:33:0c:
45:8b:cb:86:65:a0:74:86:a1:db:45:02:89:b0:e7:
d2:c6:7d:de:bb:33:00:e7:ee:7a:93:30:06:da:fd:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:52:A4:7A:11:EE:25:50:D3:28:0D:A7:68:CA:6B:2F:2A:BE:CF:19
X509v3 Authority Key Identifier:
keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0d:9c:a5:a9:6c:65:fe:7b:cd:4e:f4:26:e6:86:e1:38:2f:
64:42:37:a4:f9:b1:27:fe:e9:9a:0b:51:66:a2:27:c9:07:37:
ee:41:90:e3:60:d2:2c:33:9a:90:e4:0c:48:5d:14:54:b3:20:
f1:f1:45:7f:79:39:be:2c:22:9b:53:f3:4d:57:1a:0a:49:09:
35:39:20:20:f6:c3:f4:eb:74:e1:0a:d1:44:b9:29:15:c7:21:
62:52:f6:5d:f5:5b:ec:87:a3:dd:d6:ad:55:31:a2:ed:07:58:
e7:71:8f:74:0f:16:21:81:9c:54:ba:c5:dc:46:93:38:c6:ed:
ef:f4:e8:b6:c1:bb:d4:b2:de:ff:ce:96:d7:44:df:b8:5e:66:
3c:c3:e6:fc:0c:5b:f4:a4:e5:6a:c0:e6:70:2f:83:c3:2d:6e:
f0:ef:d4:cc:25:0a:21:1a:6f:f0:b8:0b:33:2c:f9:d1:65:2b:
e8:97:cb:e5:d2:2b:95:20:5e:75:9f:cc:ee:28:a5:e9:e6:54:
cc:a2:c8:22:c5:49:ea:f8:4f:55:1a:7c:b0:a1:31:a6:99:7e:
8f:56:a2:ed:ce:95:9c:02:1c:bc:d4:95:5d:61:29:34:ea:e5:
a8:5e:80:07:aa:84:c0:3f:f3:b8:ef:2e:42:67:cc:09:8c:b4:
01:d3:21:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:32 2026 by rpki-client