Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
File: ZmW8l5kwxe64oYSlqQOei5nuMK8.mft (raw, json)
Hash identifier: OFLQRipB3ySwEWiThSXqjV4w0BkVQiMptnxANBU+tQw=
Subject key identifier: 4F:28:99:D0:3A:2F:B8:07:54:B3:EB:2E:CB:FF:21:11:03:51:61:4F
Authority key identifier: 66:65:BC:97:99:30:C5:EE:B8:A1:84:A5:A9:03:9E:8B:99:EE:30:AF
Certificate issuer: /CN=6665bc979930c5eeb8a184a5a9039e8b99ee30af
Certificate serial: 019D382E6B42F93900D2C83EF0D9B509D3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 06:00:59 +0000
Manifest this update: Sun 29 Mar 2026 06:00:59 +0000
Manifest next update: Mon 30 Mar 2026 06:00:59 +0000
Files and hashes: 1: ZmW8l5kwxe64oYSlqQOei5nuMK8.crl (hash: SPCmbu4WtY4xp+JYRGn5USvu/nY32KwTfujo1HTlVvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6b:42:f9:39:00:d2:c8:3e:f0:d9:b5:09:d3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665bc979930c5eeb8a184a5a9039e8b99ee30af
Validity
Not Before: Mar 29 06:00:59 2026 GMT
Not After : Mar 30 06:00:59 2026 GMT
Subject: CN=4f2899d03a2fb80754b3eb2ecbff21110351614f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:b0:ab:85:f2:e5:cf:16:05:18:0c:ac:70:
9a:07:e0:fa:16:1b:ab:87:8d:e7:ad:45:96:20:91:
86:84:0c:9d:47:4c:41:22:e9:51:df:0c:07:cc:f3:
35:b3:fd:a8:b9:ba:91:58:96:3b:7e:ab:d2:2b:9f:
d7:46:60:c2:19:2b:c9:45:34:83:eb:66:b5:01:64:
02:7f:1b:29:35:6a:63:b4:48:a5:ec:34:e2:01:73:
07:57:fd:52:2f:13:9c:30:47:3d:88:1e:c5:05:aa:
68:cd:47:f7:5d:d9:b7:11:1a:4e:c8:6d:99:eb:90:
21:36:96:96:e0:03:0c:df:3d:e4:76:14:e2:fa:77:
bb:10:cc:d6:4c:61:f8:25:1e:f1:4a:84:ee:1a:4e:
2c:64:96:4b:93:d0:8e:97:4a:86:ba:a6:1a:47:07:
69:8c:44:5f:22:57:df:3f:d9:9d:1d:5e:e0:97:3b:
78:7c:a4:5b:56:ea:af:df:8d:69:b3:0a:63:70:15:
30:a5:9f:5b:66:13:1d:47:67:66:49:b2:8b:2b:38:
af:51:75:38:d1:59:ae:98:67:17:64:e4:d3:b4:8b:
dd:48:d3:a2:49:f6:5f:2d:60:23:51:b9:5e:dd:cf:
62:10:7a:47:4b:10:53:9a:48:84:35:81:52:de:dc:
2c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:28:99:D0:3A:2F:B8:07:54:B3:EB:2E:CB:FF:21:11:03:51:61:4F
X509v3 Authority Key Identifier:
keyid:66:65:BC:97:99:30:C5:EE:B8:A1:84:A5:A9:03:9E:8B:99:EE:30:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:03:9f:14:a3:0d:00:ac:e2:5b:1d:12:b4:8e:08:86:18:4a:
37:c4:c9:9b:08:35:55:7b:d3:58:ac:7c:53:98:1d:32:10:5e:
9b:0e:6c:21:54:0f:27:6b:df:89:de:51:58:c0:58:87:88:1f:
88:22:1e:5f:e6:47:5a:37:a9:f7:ea:4c:be:ce:0f:85:92:d1:
60:cb:e9:bb:20:ce:15:82:15:16:5a:83:ed:84:da:fb:2d:43:
96:53:d1:00:bb:42:e6:da:9d:53:b8:3b:91:1f:f9:82:28:86:
95:1b:c1:69:fd:88:f1:86:70:17:d8:fc:60:d6:c9:49:a8:06:
27:99:80:ef:97:07:c8:3c:57:b9:ed:86:f7:8c:25:52:e2:72:
cb:a9:97:5f:63:2b:b6:b8:ae:0c:f8:6a:fb:3f:24:1b:62:9a:
db:8d:b2:04:4d:9f:7c:fe:06:2c:82:f8:de:d8:83:c6:ef:f6:
0d:94:6d:d2:b9:29:68:d1:d3:dd:68:6c:98:14:7f:45:ac:18:
5b:2c:b3:20:ac:3f:8e:25:eb:29:52:b9:b9:68:b7:6f:0f:c5:
43:9e:dc:d0:7d:c4:3a:85:5d:92:1b:0a:14:c6:d1:80:c1:6f:
32:7c:ad:9f:f0:d2:59:e2:e2:70:b3:c9:09:74:a3:14:69:be:
14:66:7f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:28 2026 by rpki-client