Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
File: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft (raw, json)
Hash identifier: LkhrUxKZgXAzeckFImCl36t6dSU9ZhBeyYPLgLX5Om8=
Subject key identifier: 89:8C:C3:DE:7A:77:D8:FA:CF:0D:2C:00:F8:1B:85:BC:3D:A6:47:84
Authority key identifier: CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
Certificate issuer: /CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Certificate serial: 019D39AEE7DCABD67E1B232A4DAB26604122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
Manifest number: 0B6C
Signing time: Sun 29 Mar 2026 13:00:57 +0000
Manifest this update: Sun 29 Mar 2026 13:00:57 +0000
Manifest next update: Mon 30 Mar 2026 13:00:57 +0000
Files and hashes: 1: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl (hash: oMrtmehMHxcxY4f6FcCU5SKBGojPbmgsVJE2hdkweqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e7:dc:ab:d6:7e:1b:23:2a:4d:ab:26:60:41:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Validity
Not Before: Mar 29 13:00:57 2026 GMT
Not After : Mar 30 13:00:57 2026 GMT
Subject: CN=898cc3de7a77d8facf0d2c00f81b85bc3da64784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:9a:7b:75:54:7d:7c:25:89:0a:f4:d6:14:
bb:28:71:00:85:30:9f:2d:cf:5f:49:c2:a0:d9:47:
b5:b5:68:54:c9:e4:38:11:46:a5:33:25:20:4d:d8:
b7:dd:31:02:0c:94:ce:39:7b:52:43:f1:1a:24:4f:
c6:f2:21:c6:4b:d3:fb:81:dd:4b:f8:d6:95:d7:7b:
13:2c:8c:07:77:86:d7:e6:29:37:f5:00:cc:b4:c4:
f4:d2:ce:37:7b:6e:e8:3d:b0:65:db:68:eb:1b:29:
66:f1:98:3f:8f:0e:e3:75:e9:2d:6c:b8:e2:70:24:
1a:24:ec:ca:02:c9:10:b2:f5:bb:64:f4:52:9c:13:
a8:98:d3:16:49:56:f1:d4:83:08:c4:cf:a3:2b:94:
03:17:de:11:26:3d:bb:7e:32:61:b2:50:58:01:28:
49:49:1e:7f:fc:e0:19:46:52:03:87:c7:bc:ea:4d:
19:f8:9a:c4:21:67:fa:b7:14:06:27:c3:68:0d:02:
9b:3f:d4:b1:b8:d5:7c:d7:9e:1e:6a:a5:d5:d7:f4:
04:4e:80:6d:e7:3e:d9:82:44:81:1e:2f:b1:e1:c5:
8b:f1:43:d5:39:73:e7:62:6c:c1:14:56:7b:3f:6d:
d9:bb:80:ec:16:d0:c6:a8:06:96:cd:7f:29:20:b9:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8C:C3:DE:7A:77:D8:FA:CF:0D:2C:00:F8:1B:85:BC:3D:A6:47:84
X509v3 Authority Key Identifier:
keyid:CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6f:7d:4a:b4:30:24:79:cf:92:d2:17:22:85:6e:4b:5d:4d:
cc:1b:70:70:c5:6a:df:cb:30:5d:fa:00:c9:64:73:a7:9b:21:
29:16:bb:7d:13:7d:9f:84:f4:f6:f7:55:21:4c:a9:76:f4:7f:
0e:ce:32:f9:37:94:f1:69:76:54:a0:aa:9a:0a:03:6d:89:73:
4d:f2:5b:04:71:2c:d9:dd:49:50:a6:6f:e2:4d:a0:02:c3:0e:
18:46:cd:7a:13:a3:9a:81:fc:78:79:a9:18:f5:98:21:f3:ae:
d5:33:cc:68:06:5d:eb:62:97:0f:77:23:f1:de:9f:21:64:87:
c2:8f:57:dd:25:bb:dd:11:b3:c3:d5:e9:84:58:3f:53:cf:bc:
eb:28:22:bd:18:b2:61:91:b2:c4:d7:b8:f0:0a:9b:a5:74:2b:
2c:38:8e:46:5a:29:1c:9b:6c:ef:c8:d7:ea:d8:29:33:a7:63:
d4:88:97:e9:38:3b:3e:1a:69:67:89:ec:65:1e:02:8d:f6:2b:
eb:72:a8:ea:c7:a9:c6:d6:14:c3:0b:db:40:7e:07:41:36:0f:
cf:67:81:6d:3c:b6:95:2c:bb:04:fe:2e:fa:04:59:0b:88:0b:
51:c8:2c:2a:4d:a7:fe:40:a1:82:2f:41:7d:0a:2c:01:f0:78:
5f:4d:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:44 2026 by rpki-client