Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier: 2rP3muslSnmZVUe6gxs0QAzXCdWqx4FYadQwGE9zD1A=
Subject key identifier: DE:55:4A:F1:B8:E7:88:5B:B7:83:1C:7C:B2:24:CA:EA:04:37:57:C8
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial: 019D38D359C7B36C43287332858FEC41E55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number: 154F
Signing time: Sun 29 Mar 2026 09:01:08 +0000
Manifest this update: Sun 29 Mar 2026 09:01:08 +0000
Manifest next update: Mon 30 Mar 2026 09:01:08 +0000
Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: W8eyYIs6W79BucMPVdCzBemuIN9Q61x2BlEmyOLKvMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:59:c7:b3:6c:43:28:73:32:85:8f:ec:41:e5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Validity
Not Before: Mar 29 09:01:08 2026 GMT
Not After : Mar 30 09:01:08 2026 GMT
Subject: CN=de554af1b8e7885bb7831c7cb224caea043757c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:38:76:fa:28:50:30:43:a9:07:c5:e1:12:
a9:c4:a8:f2:df:50:b2:f9:81:9b:fd:54:91:e8:16:
1c:c6:25:ef:01:8e:ed:5e:1c:5d:9b:03:a8:8f:66:
ac:69:d1:b0:73:3f:f1:6b:5f:8a:6b:32:67:45:c1:
c0:86:f5:fb:3e:9f:c3:f8:8c:b1:b5:0e:5e:95:d3:
4d:04:5f:55:11:05:29:0e:84:01:ef:73:5c:2d:b1:
b2:da:94:c8:a2:52:98:b7:b2:96:2b:3f:c5:0f:31:
17:9c:a8:1a:f3:92:39:69:18:66:9c:e2:5c:fc:64:
68:20:0b:aa:c3:81:b1:a5:e6:a7:0a:8c:fc:87:e5:
0f:08:de:46:5d:66:16:92:79:ec:7a:07:23:27:71:
89:a8:4b:32:72:d2:ac:c5:ed:34:ee:7f:b3:95:03:
c0:99:e3:d3:7e:cc:01:21:39:a4:56:f4:c4:78:67:
61:c5:20:06:52:de:bd:82:80:68:f2:e1:5f:cf:71:
71:05:85:c8:f4:20:d9:c9:d9:e1:81:d9:a2:a8:86:
8c:57:d4:2f:0d:61:29:25:ab:20:0e:96:ae:16:08:
a9:69:7d:01:fa:af:0f:58:bc:8d:d3:bc:dd:87:dd:
a5:df:b2:5c:45:85:f7:26:56:f0:5f:95:e0:a5:90:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:55:4A:F1:B8:E7:88:5B:B7:83:1C:7C:B2:24:CA:EA:04:37:57:C8
X509v3 Authority Key Identifier:
keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:89:aa:01:cf:ef:cc:73:a5:1a:de:58:3f:c5:20:13:8e:58:
56:06:c9:ec:42:f3:c5:df:bf:f5:cf:10:0f:c1:e7:a1:96:a5:
8e:5d:53:d0:f8:a4:65:06:dd:6f:1c:c9:99:96:b0:32:d5:cb:
74:96:32:43:7b:b9:fb:b1:08:8d:ce:d5:f9:65:15:0c:e2:f5:
6a:72:75:0f:ac:05:67:7c:48:0a:1c:db:40:09:24:17:04:66:
ed:28:3f:f9:6c:58:b6:36:5e:e9:cb:25:4c:98:c7:9e:85:f4:
b1:bf:4a:9b:6f:46:9d:93:d7:31:be:83:b3:86:80:cc:b6:fc:
5b:45:b4:7f:d9:df:48:b4:6e:f2:85:0e:bc:71:7b:19:ec:89:
85:a1:58:b2:6c:d1:cf:69:3a:93:27:8f:35:08:61:81:1a:11:
36:d1:3c:70:15:17:cd:90:9c:b7:66:24:1c:de:6a:2d:88:27:
f0:a5:65:23:4f:2c:58:b9:16:9f:7f:02:d7:bb:76:55:ec:ef:
0e:5d:32:6a:8c:ad:22:a6:21:11:b8:c7:07:6c:4a:04:47:b1:
e7:c1:2b:be:5a:31:87:a6:c2:c4:12:22:d1:75:ff:92:6c:90:
27:cf:d7:29:dd:0f:df:fd:c8:16:f9:e6:50:f1:c2:03:9a:32:
fa:35:98:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:34 2026 by rpki-client