Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
File: E_ZReahVuwpt3lZiFisrW6l0hxA.mft (raw, json)
Hash identifier: iuB0Rpjj8GWLTf6uYqA/qaJmQv/BjCWBEocjbgFCXB4=
Subject key identifier: A7:BD:13:55:D6:74:8E:A1:40:3A:ED:8F:B2:B5:4A:53:53:2B:A8:01
Authority key identifier: 13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
Certificate issuer: /CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Certificate serial: 019D3A1CEE420B8ACA3DAEC64A35BEDF55CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
Manifest number: 0B06
Signing time: Sun 29 Mar 2026 15:01:07 +0000
Manifest this update: Sun 29 Mar 2026 15:01:07 +0000
Manifest next update: Mon 30 Mar 2026 15:01:07 +0000
Files and hashes: 1: E_ZReahVuwpt3lZiFisrW6l0hxA.crl (hash: jsmNutDCqjyxmlpoNstE8UEs/TrWuaCSVvd5NoizwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ee:42:0b:8a:ca:3d:ae:c6:4a:35:be:df:55:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13f65179a855bb0a6dde5662162b2b5ba9748710
Validity
Not Before: Mar 29 15:01:07 2026 GMT
Not After : Mar 30 15:01:07 2026 GMT
Subject: CN=a7bd1355d6748ea1403aed8fb2b54a53532ba801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:6c:bb:2b:1a:83:8d:7b:0f:e5:66:76:fa:
cf:68:f2:f0:1c:89:00:2f:5e:b8:1d:d8:fe:36:13:
90:bc:3b:ff:02:ce:58:3a:8b:d6:2f:72:c7:50:75:
e4:a5:27:0a:14:30:8d:5e:cf:0b:9e:b4:d9:e7:b0:
18:70:6d:0f:1d:a6:08:15:fa:49:73:68:fa:b8:c4:
05:e3:1b:1b:f4:38:e6:e0:c5:03:09:95:bd:7d:8d:
6d:f0:17:39:1e:dd:13:b6:37:5b:fc:06:b1:dc:33:
e8:23:8d:c8:7b:47:1f:2c:15:5e:7d:1c:76:56:56:
06:47:5a:2d:1a:c9:59:34:3f:9a:75:05:3b:40:3e:
0a:3e:a6:70:e7:1d:a7:df:30:28:1b:34:ac:55:fc:
b9:71:6a:a6:36:f6:cc:b5:20:34:52:e7:1e:eb:6e:
d2:99:35:2c:0c:f3:bd:cc:b6:33:88:da:5f:97:35:
49:a1:02:94:b0:03:d2:44:b0:da:ed:f5:30:c9:57:
09:50:06:bb:cc:29:a5:98:13:7a:4e:8b:b5:22:30:
d1:e7:3a:33:e4:89:9a:df:b7:4f:bd:cf:e7:b9:a1:
64:58:9f:0b:df:e8:ea:86:ab:ad:3e:68:9d:f6:f4:
e9:d6:39:cc:10:4f:67:54:a7:68:f7:79:1e:ba:37:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BD:13:55:D6:74:8E:A1:40:3A:ED:8F:B2:B5:4A:53:53:2B:A8:01
X509v3 Authority Key Identifier:
keyid:13:F6:51:79:A8:55:BB:0A:6D:DE:56:62:16:2B:2B:5B:A9:74:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_ZReahVuwpt3lZiFisrW6l0hxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e3892-ea88-4058-b99f-21fdfa3607c9/1/E_ZReahVuwpt3lZiFisrW6l0hxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:33:b8:49:80:0b:1c:da:07:4a:3e:c3:da:54:ed:5b:d0:61:
b9:32:7f:06:a8:1c:45:04:9e:8c:45:4f:cf:fc:7c:bd:73:df:
30:49:55:5f:ad:14:c1:ee:ed:7e:87:7b:56:4a:73:4a:c8:fd:
23:fd:1b:ab:9a:0b:18:fe:ac:30:77:d3:47:6d:5a:07:46:29:
75:14:b1:3e:2a:80:b6:af:45:d6:9d:fc:f7:88:b4:33:8a:76:
13:8a:f2:70:06:f6:b7:09:6d:19:88:c1:e9:76:25:b5:49:bb:
77:f2:32:53:94:f9:f2:7b:a8:d1:f4:06:62:60:8d:cd:ab:71:
fc:5d:b2:a7:7f:44:2c:0f:69:e3:9e:20:9b:cd:2e:f6:3a:fe:
42:e9:39:c3:bc:d9:4b:af:1d:57:86:35:5a:02:39:aa:66:a4:
c8:6b:a4:ca:85:c7:e1:e2:4c:48:e0:82:9a:33:a6:ab:dd:cf:
42:79:ec:0a:2a:83:f0:b4:a0:f4:1f:e9:96:12:de:1d:c8:99:
bf:30:c5:49:a6:e6:ba:22:40:35:1d:71:3b:38:28:d8:aa:9d:
66:f2:d0:fa:a3:1f:80:bb:48:70:e4:3f:6e:d7:6c:6c:ea:42:
37:d6:16:c3:2d:fc:e9:79:57:55:54:4d:eb:86:8f:48:a6:7f:
da:c8:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:17 2026 by rpki-client