Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
File: zfQLRgtIuPNm_sXKObMcOAxkWjI.mft (raw, json)
Hash identifier: 9SYYmQ8e9vjJ3NFUDTlKuCLlDhoAbsKIQK8oIWS413g=
Subject key identifier: 8D:4F:01:77:B8:45:BC:29:CD:DC:8C:85:F6:36:1D:77:3D:E4:3D:44
Authority key identifier: CD:F4:0B:46:0B:48:B8:F3:66:FE:C5:CA:39:B3:1C:38:0C:64:5A:32
Certificate issuer: /CN=cdf40b460b48b8f366fec5ca39b31c380c645a32
Certificate serial: 019D378900E57EDC4F54987C6439021D276C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
Manifest number: 0355
Signing time: Sun 29 Mar 2026 03:00:18 +0000
Manifest this update: Sun 29 Mar 2026 03:00:18 +0000
Manifest next update: Mon 30 Mar 2026 03:00:18 +0000
Files and hashes: 1: zfQLRgtIuPNm_sXKObMcOAxkWjI.crl (hash: rOUVLqwG60lDuSk8KOylfb+uf4NO7G2KMmhXBIhyhG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:00:e5:7e:dc:4f:54:98:7c:64:39:02:1d:27:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf40b460b48b8f366fec5ca39b31c380c645a32
Validity
Not Before: Mar 29 03:00:18 2026 GMT
Not After : Mar 30 03:00:18 2026 GMT
Subject: CN=8d4f0177b845bc29cddc8c85f6361d773de43d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:0b:44:a7:e2:bb:19:4a:b8:87:a4:ce:d1:
79:96:1b:c1:78:fc:7a:fd:d1:ff:cc:62:84:c2:87:
86:3d:5e:03:cd:d6:4e:65:33:89:52:73:2d:0e:df:
cc:2d:f3:c9:2b:c3:66:1d:d7:2f:57:c9:6a:a5:5f:
d5:23:89:8d:1f:fd:4f:18:9c:ca:6e:73:e1:00:1e:
43:2a:5d:f5:cf:b2:53:ef:25:e7:dd:73:d1:6f:bd:
fa:69:4e:aa:2d:ee:60:cf:e4:a2:d5:41:d9:61:ee:
c7:fc:94:59:ea:86:b3:55:14:30:5b:bf:99:b9:2b:
b2:f2:d5:37:fc:75:a9:e7:7b:1b:b3:0a:2d:3f:bc:
ee:4c:e2:b6:13:2d:03:43:a5:2a:58:48:13:1a:98:
71:2b:95:7c:a1:d7:82:6f:3c:b7:f7:a5:10:84:31:
03:b6:d8:38:c9:2e:a0:2c:90:14:71:86:32:c5:11:
b0:39:6f:68:4c:87:c5:42:63:52:d7:41:51:df:39:
09:f2:b2:86:70:bc:73:94:13:0f:36:0a:20:e9:99:
1c:a0:ca:6d:20:65:d2:23:91:89:0e:ff:3b:69:a1:
ba:ea:cb:99:21:75:61:75:c2:83:9f:19:20:c3:7b:
fd:d7:3d:ee:71:58:4e:8d:d4:9d:b4:bc:e6:73:a1:
12:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4F:01:77:B8:45:BC:29:CD:DC:8C:85:F6:36:1D:77:3D:E4:3D:44
X509v3 Authority Key Identifier:
keyid:CD:F4:0B:46:0B:48:B8:F3:66:FE:C5:CA:39:B3:1C:38:0C:64:5A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a9:b9:6a:3e:3a:a2:82:07:9d:1d:ef:6c:a5:75:d7:c6:e7:
a0:be:67:88:5a:71:d9:0d:7f:42:59:5c:1d:38:74:c1:89:b5:
ad:9c:c0:a2:54:94:12:40:6b:c4:50:55:d0:88:ec:1a:c1:59:
63:07:28:9f:a7:29:f0:c6:ac:76:1f:fe:27:02:d9:be:40:cf:
3c:20:6c:8a:c1:89:56:78:0f:b1:62:87:58:11:0b:c3:6b:f2:
fe:4a:68:8f:3a:67:93:5c:ee:4a:b5:85:c8:05:5d:41:3a:3f:
e3:47:54:25:f2:9f:2a:2b:5b:c7:29:70:29:37:02:29:92:5e:
38:86:04:61:0a:7f:f3:7a:e4:31:44:01:bd:20:9e:a0:bb:1f:
37:31:1c:8e:32:f7:14:12:f5:01:ce:39:5e:e8:4f:72:26:c3:
ad:84:7e:33:21:08:d3:39:1d:7e:91:cd:f2:70:cc:0e:fb:44:
fa:da:79:6f:7a:a7:bd:d7:ab:65:a3:25:5d:53:f1:dc:72:d7:
4b:f1:a6:ee:2a:8f:cf:87:c6:43:79:84:0b:c7:bc:eb:4c:75:
06:fa:3f:47:91:db:bb:1f:4d:d2:e1:4e:4d:72:b6:c8:a3:d4:
bb:bf:2a:9b:0d:71:15:bf:37:55:c3:91:08:9a:e5:d4:96:af:
7a:99:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:28 2026 by rpki-client