Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
File: zWv2DrCPHiOrqLp5fBFyREzhW3E.mft (raw, json)
Hash identifier: iUmCTwdOox6lhYmTf6/iwjh1nlUVVFRfvDi7K/nQA9E=
Subject key identifier: A8:0B:C0:4B:CC:DA:BE:AF:6A:70:AB:C8:27:60:FB:05:41:AF:C7:73
Authority key identifier: CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
Certificate issuer: /CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Certificate serial: 019D3865EA2A1633F5FC7D1C63497C195A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
Manifest number: 133D
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: zWv2DrCPHiOrqLp5fBFyREzhW3E.crl (hash: yaLfmDW9r48VufWlc6g/V3FVRRosS8292AMxmreWU0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ea:2a:16:33:f5:fc:7d:1c:63:49:7c:19:5a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=a80bc04bccdabeaf6a70abc82760fb0541afc773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:09:02:b0:67:14:a1:41:d4:8a:2a:5f:3a:
eb:da:48:38:28:f8:26:72:2f:2b:56:4b:25:d1:6d:
ee:6f:30:c7:e9:39:59:ac:a6:75:92:fc:98:8f:d4:
f4:4f:7d:a3:d6:19:b4:83:5e:7a:07:71:32:bf:14:
b8:43:b7:55:40:1f:fb:3a:02:47:74:9e:22:ad:99:
06:96:02:bd:cf:1a:e9:47:a9:c0:56:b6:7f:a9:4c:
94:99:58:ae:c9:74:94:ae:b2:80:cd:4f:5a:5a:74:
f8:49:e4:d7:57:56:9e:38:42:c9:bb:ad:34:f4:24:
dc:9d:51:c0:a7:35:1a:1a:8c:55:37:d9:de:66:6f:
5a:30:cf:98:42:b9:b7:5e:e9:33:78:00:97:ac:9d:
eb:e3:14:e1:6a:65:95:09:63:b2:fb:76:cd:d9:ec:
46:be:29:3a:e0:9c:f8:87:95:20:63:2e:6c:76:41:
4c:15:d9:c4:5f:6e:cd:45:77:5a:7f:4f:32:12:2a:
bf:f5:05:68:68:ea:25:0c:e9:61:84:96:cb:fb:84:
64:49:61:7e:4c:f3:27:bf:62:a5:de:a9:10:df:35:
1c:28:97:56:a0:0a:96:86:bb:c2:31:6d:7e:48:40:
08:7f:a0:60:2f:a3:0e:3c:98:91:40:07:1e:34:fb:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0B:C0:4B:CC:DA:BE:AF:6A:70:AB:C8:27:60:FB:05:41:AF:C7:73
X509v3 Authority Key Identifier:
keyid:CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a5:1e:3d:c2:35:1e:2b:5f:44:9c:68:2a:e7:a0:50:fc:aa:
a3:00:58:80:04:70:a1:1b:38:34:8c:75:7f:18:2c:34:d7:6a:
25:30:c5:b9:99:3d:5f:2c:41:ec:d8:4a:be:d2:14:c4:85:46:
bf:fd:c1:04:b4:a2:b5:33:da:bd:a1:e9:ae:30:72:96:e1:de:
9e:70:99:0a:f9:f2:d1:e5:30:a4:28:8a:a7:9c:50:41:8e:e4:
2d:bd:5b:99:3d:be:c1:99:69:92:02:cc:52:56:ad:d0:8a:97:
6f:2e:52:c8:31:df:14:f7:fb:d5:c4:f7:53:03:de:eb:5a:61:
b4:2c:9f:98:7e:69:00:3a:7d:65:1d:8c:51:2c:e8:33:1d:28:
0f:4f:e9:36:a5:73:04:d1:74:eb:96:3b:ec:47:08:14:fc:7e:
22:8c:fe:e9:f7:17:ca:42:d2:26:68:69:69:0c:db:34:fa:87:
7d:f1:b8:2c:fa:ee:bc:e4:75:28:5a:7c:53:6e:9d:53:ff:a4:
a5:17:d8:f8:20:80:fe:4d:98:e7:82:48:ee:dd:1a:5b:b6:4f:
8d:61:01:be:ed:28:d2:e2:af:6d:9e:45:58:62:28:54:ee:9c:
e7:08:1e:e6:85:f8:8c:6d:bd:2d:3f:4c:ec:fe:8a:18:96:3b:
81:ec:cb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:14 2026 by rpki-client