Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
File: ZYzRSR-oTUghjThg8zI9ybhoV4w.mft (raw, json)
Hash identifier: 5jCabo+YmpaThRVbMEoweULP0tFL/ytpu9ONFXUfVyk=
Subject key identifier: B7:D0:D3:2F:87:1D:EB:D5:1F:1D:82:5D:99:83:F5:49:A6:6D:61:78
Authority key identifier: 65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C
Certificate issuer: /CN=658cd1491fa84d48218d3860f3323dc9b868578c
Certificate serial: 019D3865FF24B345FC3E6B78FF6F10F6B55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
Manifest number: 10F7
Signing time: Sun 29 Mar 2026 07:01:41 +0000
Manifest this update: Sun 29 Mar 2026 07:01:41 +0000
Manifest next update: Mon 30 Mar 2026 07:01:41 +0000
Files and hashes: 1: ZYzRSR-oTUghjThg8zI9ybhoV4w.crl (hash: pJla6LgwE+YgARrn/ngnlaIUKFm32dGN+XCj0Qrb3kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ff:24:b3:45:fc:3e:6b:78:ff:6f:10:f6:b5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658cd1491fa84d48218d3860f3323dc9b868578c
Validity
Not Before: Mar 29 07:01:41 2026 GMT
Not After : Mar 30 07:01:41 2026 GMT
Subject: CN=b7d0d32f871debd51f1d825d9983f549a66d6178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:63:13:2e:00:68:f5:f1:ec:96:9c:38:61:
b9:3b:b3:81:73:71:6b:fb:0a:f6:23:b1:12:d0:0d:
b2:4c:9a:61:9a:db:99:c5:db:9a:28:f5:9b:b6:1f:
ac:bf:10:18:16:7e:c0:08:08:53:6c:ef:ab:31:3b:
2a:cd:2c:09:84:1a:63:b6:57:b1:ec:d2:32:03:60:
f9:81:04:01:62:e5:d2:91:30:4c:db:1c:f5:47:d4:
ce:d4:74:34:1f:0a:9e:42:16:40:c6:a6:ac:9b:79:
9d:6f:dc:c0:df:17:21:03:17:77:c5:f4:10:43:96:
7d:e6:ac:98:5b:73:87:cb:cb:ed:74:02:68:29:a2:
0d:4f:29:ca:a6:f2:61:1d:31:f3:aa:73:ba:cb:0e:
c2:de:a5:72:94:b4:c2:e7:92:a3:c5:85:1c:5c:28:
93:dd:e4:ac:1e:00:5c:4a:2b:27:16:8d:95:d8:4b:
3c:0a:64:9f:56:8f:82:07:e4:32:da:d3:f9:c3:0b:
42:d7:1b:f1:fa:bd:fb:4d:6e:fa:19:3a:e9:76:c9:
fb:7a:5f:2a:43:2e:1c:c8:ac:fb:bc:67:db:54:12:
ed:c7:e3:11:7e:c2:88:b9:4b:58:03:fa:9b:43:5b:
cb:62:3b:bd:34:88:68:d0:72:17:fb:74:aa:56:6d:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D0:D3:2F:87:1D:EB:D5:1F:1D:82:5D:99:83:F5:49:A6:6D:61:78
X509v3 Authority Key Identifier:
keyid:65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a4:5d:34:5c:1f:bb:01:c8:5e:e0:0b:ca:22:76:2f:1e:5f:
62:fc:5b:67:f9:98:3e:84:64:e0:69:8d:cf:48:fd:18:69:1e:
7a:9b:02:c5:80:4f:51:46:be:f9:fe:8c:79:ae:de:87:91:8a:
01:46:b1:5e:02:c1:52:37:66:fe:be:3e:8c:b6:90:12:5f:2d:
1f:56:70:9d:58:4c:8a:07:b4:5a:95:55:7b:33:9f:3d:91:07:
14:22:d5:f4:61:57:1f:42:26:80:80:e2:f7:96:e0:4b:27:65:
40:6f:fe:b1:fb:e4:5d:e7:c0:cd:aa:fe:d1:35:7b:cb:f2:05:
a3:92:24:d2:57:83:cf:43:5f:40:34:3f:57:52:15:b1:e0:2d:
56:fc:d0:95:42:82:e5:a1:b0:99:cc:60:5b:89:98:3a:86:28:
0f:74:fd:5e:87:d6:ea:50:c8:25:ea:cb:9b:83:f8:6b:0d:45:
77:49:77:76:91:dc:dc:97:7c:b7:ab:47:bd:23:5b:6c:e0:90:
b0:a4:60:07:1a:6a:02:88:b6:fb:c4:5e:ef:c4:e3:8c:f5:17:
1e:33:c0:ab:09:ec:e2:1f:6a:66:3b:94:03:e9:e9:a0:4e:c1:
ce:5c:bd:50:5a:08:7c:36:ba:1b:40:50:06:c3:ce:45:be:b2:
1e:0c:94:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:13 2026 by rpki-client