Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
File: ZpDQciFADjewHnSnEvrnxtcDFZU.mft (raw, json)
Hash identifier: W3rg3IJwrRvIUz/hmkbOeootrtfhLb/bpb+Utj6bDhk=
Subject key identifier: 90:77:B2:51:61:B3:DA:03:2B:78:27:EF:8E:7E:06:1C:D6:44:57:88
Authority key identifier: 66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
Certificate issuer: /CN=6690d07221400e37b01e74a712fae7c6d7031595
Certificate serial: 019D37C09BC9E10FA2B00588C6358EBE928F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
Manifest number: 133C
Signing time: Sun 29 Mar 2026 04:01:02 +0000
Manifest this update: Sun 29 Mar 2026 04:01:02 +0000
Manifest next update: Mon 30 Mar 2026 04:01:02 +0000
Files and hashes: 1: ZpDQciFADjewHnSnEvrnxtcDFZU.crl (hash: apAf9wOSvhdH24XwDUBHTbDc4r21SjoMU+H0zhsg+l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9b:c9:e1:0f:a2:b0:05:88:c6:35:8e:be:92:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6690d07221400e37b01e74a712fae7c6d7031595
Validity
Not Before: Mar 29 04:01:02 2026 GMT
Not After : Mar 30 04:01:02 2026 GMT
Subject: CN=9077b25161b3da032b7827ef8e7e061cd6445788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:47:22:7b:45:41:16:c7:70:4e:f5:90:3d:
77:40:b0:9c:53:0f:98:dd:0a:63:1f:8a:25:f8:5e:
a1:a0:4f:60:00:bf:3e:ad:78:2b:39:72:27:51:5e:
de:7e:69:1d:0f:ee:7a:72:48:a4:6d:c6:35:1c:34:
cc:3b:1c:ba:90:40:11:4d:eb:9f:1c:d8:81:33:56:
0c:27:9e:06:0f:87:af:e6:61:74:df:d7:2b:b3:3a:
2b:ab:04:3d:34:18:81:dc:b8:c9:4d:04:2f:72:49:
a1:af:87:41:7d:5d:69:11:03:03:ad:5f:77:c4:9a:
2c:a6:14:5f:24:c5:c8:15:1c:07:79:62:36:29:fa:
40:fe:bc:17:be:81:15:58:8d:b7:35:ec:0c:45:f6:
03:34:3a:1d:9b:71:af:63:99:57:10:28:ec:51:f0:
f4:9f:31:bf:85:83:22:57:1f:c7:20:ed:31:73:14:
6e:a3:be:3c:8c:3c:88:74:2b:5e:c5:91:30:f8:25:
25:e6:57:02:9a:13:22:b0:e5:32:87:4f:33:32:af:
3f:fd:32:ac:85:a4:8a:c8:27:07:a3:83:22:b9:ec:
d3:8b:09:a5:ef:d3:d1:14:f9:48:79:52:d8:35:13:
a0:3c:1d:95:9b:de:0f:08:1b:90:a6:75:45:a1:f0:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:77:B2:51:61:B3:DA:03:2B:78:27:EF:8E:7E:06:1C:D6:44:57:88
X509v3 Authority Key Identifier:
keyid:66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:28:cd:36:00:90:52:88:85:7e:a2:7d:e2:b5:39:75:08:3a:
e9:f6:e0:8c:56:99:60:82:9f:8b:1f:d6:83:e1:7b:ec:0e:ed:
4f:35:f3:61:03:7f:26:b6:aa:ab:06:46:6d:48:01:a6:ae:58:
a1:73:67:ec:52:22:10:c2:a2:b3:7f:7a:f1:ee:cb:2d:be:4e:
6c:8b:22:e3:69:3c:44:64:60:e5:44:bf:5a:0c:fb:10:09:00:
c3:fc:63:99:a3:d1:c0:46:f5:c3:b1:48:60:d5:1c:cd:d7:cc:
a5:86:8f:b2:b1:ff:20:86:7f:be:ae:4b:21:11:b5:d6:fb:e8:
68:8e:da:42:a1:9f:91:94:98:67:5b:fe:53:04:e1:32:0a:76:
7b:8f:f0:18:6c:b6:59:fb:2e:a0:a1:7f:2e:97:66:d2:50:84:
c9:9b:9e:77:ed:29:93:50:14:86:13:38:e6:60:ff:e0:4b:58:
95:22:61:76:e2:26:81:21:52:08:25:34:d7:49:41:7e:eb:29:
0a:0a:8f:1e:66:9f:7b:b1:0e:02:0b:bb:7f:94:3a:6d:b5:dd:
f5:8a:a6:4e:27:3d:62:f6:d0:68:fd:58:2c:9c:b2:a3:9c:dd:
39:e6:e8:c5:35:34:09:ea:d6:f1:44:ec:12:35:40:59:3d:a2:
b4:03:fa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:07 2026 by rpki-client