Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
File: z379uI0GEsUL1dfhZa94NPDdPwQ.mft (raw, json)
Hash identifier: LS++tqEWDqh3Q7zUNqrAXw2WDklN3RB9BRVlJVcRXPY=
Subject key identifier: 19:B6:A9:8B:30:FA:A0:1C:C5:EA:32:E8:53:2A:FF:22:8A:A0:D2:5D
Authority key identifier: CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
Certificate issuer: /CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Certificate serial: 019D38664237D8428C6FD6C42AA717841D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 07:01:58 +0000
Manifest this update: Sun 29 Mar 2026 07:01:58 +0000
Manifest next update: Mon 30 Mar 2026 07:01:58 +0000
Files and hashes: 1: z379uI0GEsUL1dfhZa94NPDdPwQ.crl (hash: bPukY69eCg0twSXs/qZSu7pLV6rRgVqu2ZCxrytIsx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:42:37:d8:42:8c:6f:d6:c4:2a:a7:17:84:1d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Validity
Not Before: Mar 29 07:01:58 2026 GMT
Not After : Mar 30 07:01:58 2026 GMT
Subject: CN=19b6a98b30faa01cc5ea32e8532aff228aa0d25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:de:25:3a:5c:84:74:9d:82:57:05:7c:3e:
85:50:ed:4e:38:f5:39:5d:4c:10:a0:ba:4d:1a:a4:
46:7e:5a:89:12:38:95:e5:38:09:1b:47:67:55:4a:
26:b4:ae:2a:0f:34:9b:fb:cc:ee:c2:5f:8f:74:4b:
ae:be:95:65:6f:8b:d1:72:8e:84:8b:b1:e6:44:92:
3b:8d:58:47:d1:fd:7e:0d:1b:aa:40:55:7f:fd:80:
31:b4:fc:1a:d8:72:51:6d:42:2c:4d:f6:77:1f:fb:
7c:ec:ce:8c:0a:44:47:19:65:f0:bd:68:e2:b4:60:
c6:98:f4:70:e5:f0:c5:94:13:b2:46:2d:76:2c:64:
27:56:f1:7e:7b:85:b6:5d:53:57:d1:d5:a7:4e:91:
8a:18:af:21:c5:9b:c5:f7:6d:ff:2d:0c:05:c7:4b:
45:30:78:f6:27:3e:fe:49:b3:2c:de:d0:71:19:11:
e3:b5:44:00:4e:42:63:aa:a2:2a:78:eb:5d:24:b7:
ed:67:d1:66:5f:c8:31:a7:18:07:74:23:38:a7:7d:
d3:1e:41:ce:af:3a:f0:fc:11:9f:72:c0:5a:7c:54:
78:8f:66:7d:94:11:a1:76:89:13:4a:b4:65:e9:01:
f8:46:99:2a:17:73:3d:4a:2d:78:b3:3c:46:2f:a5:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B6:A9:8B:30:FA:A0:1C:C5:EA:32:E8:53:2A:FF:22:8A:A0:D2:5D
X509v3 Authority Key Identifier:
keyid:CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:80:24:23:f8:99:10:2e:dd:98:e7:33:30:7c:8b:c4:86:ba:
09:1e:de:4d:43:60:5b:34:db:78:b9:65:b5:6a:0f:00:dc:fe:
da:b4:00:66:06:64:b6:3b:09:8e:9a:c8:6e:ea:3c:b9:9f:1c:
33:1f:ec:07:33:0f:86:a0:4c:06:68:c3:15:37:0a:37:2b:a7:
1d:a8:cb:fa:f1:4a:d8:2a:bb:c6:dc:49:d9:bc:7e:30:31:b4:
22:4c:af:b8:11:d3:6b:e8:31:e8:7d:eb:82:1c:b9:08:8a:25:
bd:39:f0:e6:8d:2d:cf:77:c4:28:01:fc:25:7c:a7:ba:5c:b1:
85:51:fe:5f:e3:1a:a1:76:b8:a4:45:a8:d4:39:67:70:e0:d2:
c1:a0:7f:0d:28:30:15:a2:c7:8a:e5:4a:78:32:43:e6:65:75:
b1:67:53:62:d0:16:f7:3c:8f:db:8a:18:2d:44:2b:c5:62:08:
12:ca:a9:9e:36:52:3d:de:c1:74:62:8d:f1:80:91:b5:60:c6:
1d:6b:67:e8:36:e6:76:73:46:8e:1c:1b:62:45:22:73:d3:b4:
c6:cd:7e:0c:7a:74:f8:62:54:96:37:5b:12:f4:5e:ca:fa:48:
65:a1:23:06:3c:ba:89:eb:f8:96:f2:cd:7a:68:34:1f:b4:06:
6f:25:97:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:25 2026 by rpki-client