Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
File: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json)
Hash identifier: eO1UwQ2lAXOR9zrFuiiRsZdwIznOIFCgsTSgHcFPrAQ=
Subject key identifier: C3:D5:93:13:A5:91:75:D0:DF:59:80:73:A5:08:59:50:46:AB:8E:BC
Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
Certificate issuer: /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Certificate serial: 019D3941056E617294C4C5FAC859ADC2E477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
Manifest number: 1059
Signing time: Sun 29 Mar 2026 11:00:55 +0000
Manifest this update: Sun 29 Mar 2026 11:00:55 +0000
Manifest next update: Mon 30 Mar 2026 11:00:55 +0000
Files and hashes: 1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: aZ06JyRFA6Oxsv0yNwHZKs1jpsWhleIgvS2uF5sNS+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:05:6e:61:72:94:c4:c5:fa:c8:59:ad:c2:e4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Validity
Not Before: Mar 29 11:00:55 2026 GMT
Not After : Mar 30 11:00:55 2026 GMT
Subject: CN=c3d59313a59175d0df598073a508595046ab8ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:b9:2d:2d:9d:af:c9:50:2e:24:19:8e:ca:
67:06:f2:04:74:52:a3:77:84:17:0d:73:49:c6:20:
5e:90:73:f2:f4:e1:eb:c7:0f:c2:09:0a:73:8f:b8:
1a:50:2b:a2:9d:fe:94:e1:f7:97:57:0b:05:71:81:
f2:3b:cc:bf:81:23:23:11:a2:f7:8e:68:87:7a:81:
7f:2d:fa:78:ea:11:1f:c2:96:4c:ed:ec:58:66:38:
c2:58:8a:87:51:85:48:06:cf:3c:65:79:92:da:a9:
24:63:73:f1:1e:0a:b9:32:fe:69:63:1d:d3:68:ef:
89:1f:32:c2:27:b9:1a:d2:4b:78:65:4e:97:65:eb:
cd:c4:f9:2e:8c:1e:fb:ed:e2:31:9b:0b:90:ab:e5:
a3:9a:21:8a:8c:28:5b:38:d6:b6:af:34:35:f8:77:
83:35:b3:78:8b:8c:a0:62:06:52:0e:7a:5c:ce:2a:
f4:9f:59:c7:0c:28:79:5d:b5:7b:da:ff:97:3d:19:
e5:c4:e0:ef:0c:a0:ac:87:4b:42:d2:63:72:80:8f:
5a:d0:6a:bf:9a:ad:4e:bf:b1:d2:de:28:93:1e:e0:
e8:ff:01:85:05:b4:6f:d7:d8:ab:bd:d8:cf:dc:34:
37:0d:e3:27:eb:d0:ef:c4:3a:4d:45:56:36:f1:ad:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D5:93:13:A5:91:75:D0:DF:59:80:73:A5:08:59:50:46:AB:8E:BC
X509v3 Authority Key Identifier:
keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:74:4c:d9:d9:b0:33:e0:50:b0:76:31:40:53:c1:08:24:a5:
d6:35:87:eb:5e:f0:c3:69:7b:99:0d:92:24:c8:4d:e7:f7:07:
3e:a2:b0:80:02:f6:7d:73:77:1a:33:af:03:85:3a:b6:d8:8c:
60:ca:5c:72:49:ed:e2:10:97:e4:5b:80:a6:ac:2f:ed:6f:2b:
24:d6:ad:3c:7b:c7:f5:f7:d7:b8:51:6f:68:80:07:e5:71:38:
ed:1f:64:44:76:d7:a5:81:71:ed:a2:8e:e2:7c:28:c8:61:e1:
e7:1a:d3:da:c0:6c:8f:6c:e7:e5:13:32:99:f2:5f:97:4c:9a:
9a:10:7b:24:42:a4:b3:4c:13:26:87:e5:e2:b9:e3:01:a4:2c:
a6:ed:5c:a7:3e:22:2d:5f:37:29:56:47:80:9f:a6:6d:fb:7a:
26:6a:c0:2b:70:ae:cc:69:55:65:d6:8a:28:4f:2d:b6:5e:62:
b4:00:e6:97:49:c6:25:86:fc:7d:c2:23:28:d8:49:63:11:f5:
f6:ba:9d:df:eb:ed:f0:e7:82:c7:dd:19:16:64:51:39:e9:31:
f6:7d:2f:58:32:01:fe:9e:47:4c:0b:9b:bf:41:49:5f:55:d3:
ab:87:ad:d3:e4:c2:3b:ad:63:54:8a:64:ab:51:12:a2:44:bd:
aa:5f:7a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:49:20 2026 by rpki-client