Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: gkEvlIb0TuxY1fevM/SlE5ZOEC2m8sKxI5m/Z8SAzUE=
Subject key identifier: 63:6D:6B:99:F7:27:20:D2:9D:5C:32:D1:57:5D:42:4E:FA:05:FE:83
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 019D3866215496E508BC2C70BF93660DA152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 108C
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: 86Y/dYmvk8GVvg+v+BiWBiDpkAf9aGFqnRKZK8Oi7Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:21:54:96:e5:08:bc:2c:70:bf:93:66:0d:a1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=636d6b99f72720d29d5c32d1575d424efa05fe83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ad:18:5b:4e:84:d1:26:84:5a:21:32:67:2f:
3c:9b:cf:76:16:ff:c8:91:09:4b:d7:74:04:80:26:
b4:51:09:25:d0:5d:e2:6b:93:89:18:1a:b0:33:c8:
5c:71:a7:76:23:a6:aa:a6:bc:85:1a:b4:53:d8:a3:
84:a2:ff:49:bb:56:ae:98:f0:a5:be:f7:9b:fb:dd:
0a:89:17:6f:56:2b:63:d8:05:e1:29:7c:22:7d:81:
d8:cc:fa:df:fe:56:9b:89:76:2c:85:eb:0f:cc:82:
c0:a5:59:77:87:af:04:30:a0:0e:a5:23:b6:83:41:
6f:ac:3a:36:de:c8:f5:b4:75:0b:92:f4:2d:10:e5:
9b:6e:22:24:dd:3d:56:67:60:33:ac:5b:0e:d5:2a:
fc:67:5b:97:46:8e:fe:da:30:b9:91:6f:c2:0f:ec:
ef:47:52:da:80:cf:82:a8:72:c5:a9:aa:0a:50:74:
df:16:d9:55:e8:13:49:72:d1:fb:dc:eb:2c:b2:c5:
f9:d6:3c:23:a0:89:21:f2:67:9d:0a:bd:17:fe:94:
2a:c4:60:fb:6b:ef:5e:5c:ba:27:dc:ae:0d:55:d1:
e6:f6:39:5a:a4:07:32:1e:15:e6:28:75:50:e9:1b:
6c:1f:3e:c4:b1:e4:8e:71:43:4d:00:7b:89:20:d5:
71:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6D:6B:99:F7:27:20:D2:9D:5C:32:D1:57:5D:42:4E:FA:05:FE:83
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ce:94:64:46:50:8d:98:13:25:b3:a0:7b:94:ea:1c:7f:9f:
e9:28:4c:95:f7:aa:14:c5:4a:0c:d7:8e:30:0b:8b:0f:4c:3e:
6e:a7:e7:96:2e:cb:1a:89:7a:1c:2a:b1:96:3e:c6:cf:bf:5d:
be:ad:e1:e1:78:6f:92:6e:d3:f5:32:ba:65:d2:5d:fa:02:a9:
da:6a:d4:f1:ee:a3:57:ce:7a:71:1f:4e:24:ee:14:87:18:b2:
06:7f:09:38:4e:f2:d0:20:68:cb:a8:15:e1:d1:8f:7b:3a:f8:
ba:ef:ed:7f:21:27:70:7c:25:88:b1:46:b7:f3:2b:ae:6a:51:
e6:c4:e6:45:38:9c:f7:e0:a2:12:85:a6:76:04:5a:7a:ec:5a:
81:ab:31:4b:ab:14:b1:ea:15:53:df:92:4c:b0:f0:ed:99:ab:
7d:47:76:1c:cf:5a:6e:a0:62:4c:19:8e:0d:1f:c6:2b:17:36:
8b:f0:18:8c:51:be:51:9a:f3:8e:31:fa:19:96:c0:17:fc:10:
8a:af:c0:b2:33:e5:b7:5e:83:0d:31:8f:dc:56:f6:fd:11:bb:
69:51:39:51:cd:f2:a1:ac:84:c3:ef:e9:0c:f3:e5:2b:b9:0f:
52:ea:e3:81:ef:4c:99:c0:49:56:5f:39:83:64:e2:cc:ed:60:
5a:72:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:57 2026 by rpki-client