Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: HABp+u8XBznHcGovpL3tjLMRQZneVikDxd3gYIUBOYk=
Subject key identifier: 38:7E:BE:9C:33:7C:50:EE:68:1B:8A:DD:05:49:22:FE:57:6A:7E:F9
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 019D3865892FC3E8F8BFDF742D4CB795BBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 121C
Signing time: Sun 29 Mar 2026 07:01:11 +0000
Manifest this update: Sun 29 Mar 2026 07:01:11 +0000
Manifest next update: Mon 30 Mar 2026 07:01:11 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: EebzYEmZUm0+4lSo/Dm4mZLdMsYDNbeada2E0t0/UEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:89:2f:c3:e8:f8:bf:df:74:2d:4c:b7:95:bb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: Mar 29 07:01:11 2026 GMT
Not After : Mar 30 07:01:11 2026 GMT
Subject: CN=387ebe9c337c50ee681b8add054922fe576a7ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:db:52:1e:b2:52:2c:6d:04:cd:59:93:02:
21:4d:2e:33:08:52:45:15:93:83:e5:b3:3d:27:6e:
0d:0b:6a:f1:f0:72:2c:6b:64:20:d9:44:97:9d:e8:
11:02:a9:d3:bc:61:2a:33:a5:44:b5:22:23:87:83:
9e:be:54:8d:12:99:16:ea:ed:db:82:0e:d3:a6:25:
97:a6:20:3a:54:91:ed:88:60:1f:63:90:ab:65:b0:
2a:9a:73:b8:02:d5:06:71:a4:54:2c:3e:a5:17:1b:
60:84:f9:73:30:b5:71:49:ff:f5:fe:d6:05:6a:c8:
fa:13:4d:c7:32:84:27:3b:95:48:13:e9:4c:af:f5:
f3:c9:22:8d:79:84:1e:b7:b3:0d:56:d6:88:aa:ed:
a2:f6:36:ed:92:9e:e7:56:11:da:98:b2:3e:e7:f3:
1d:f5:38:cb:26:8e:fe:73:27:48:7e:dc:bb:8b:0f:
2e:50:4c:27:98:94:1a:9c:9e:d9:fa:90:94:7c:8b:
5a:99:04:fb:0b:c7:38:a8:4e:7a:d2:df:bd:7b:c3:
52:c7:8a:c0:73:88:4f:a0:a5:b7:81:be:c4:0e:a4:
df:5e:ff:27:90:f6:3e:6e:bb:e8:b5:4f:ba:58:b0:
56:1b:72:7f:0c:47:5d:c1:15:b6:2c:54:5a:b7:02:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7E:BE:9C:33:7C:50:EE:68:1B:8A:DD:05:49:22:FE:57:6A:7E:F9
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0e:d9:e3:a3:63:c1:a3:de:3f:55:5a:be:08:76:9c:18:6e:
7d:b9:7c:59:17:59:80:f0:ec:dc:25:10:a0:0d:a9:db:63:d8:
93:1c:bf:7d:5f:d7:12:58:35:ac:1c:ef:e3:1b:2d:e4:ae:d2:
e9:d7:1c:61:e0:4b:0b:3e:60:78:7b:48:83:df:f1:bf:a7:93:
1e:47:30:cd:7d:3f:03:26:08:19:40:6c:bc:af:a1:36:93:2b:
4c:2a:a5:2c:4c:0f:8b:fd:bc:d4:ab:35:e4:5b:09:c8:f3:d1:
7b:bb:61:a8:e4:ef:e0:d6:36:91:94:d7:3e:43:5c:c6:8d:2d:
d5:ba:c1:26:67:aa:7a:60:fa:72:9f:30:27:52:42:19:38:43:
33:93:ce:c4:6d:30:b2:0e:9c:8a:18:d5:f6:7f:2a:56:88:27:
1f:f0:af:89:e8:a1:b7:35:5f:ef:cf:85:a4:c8:26:49:60:88:
10:f9:f0:e6:ca:a7:32:5f:94:4b:95:d3:83:1e:25:31:2e:df:
4f:b7:19:86:c5:7d:f9:d5:9f:ec:a3:8b:6e:86:65:fa:98:86:
5e:58:5e:05:23:06:a4:95:f7:45:44:0c:75:6a:7e:6b:76:a6:
c7:15:f5:90:0b:d5:d8:d9:fa:a8:c1:86:5a:d0:b7:73:15:52:
06:f0:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:33 2026 by rpki-client