Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier: RsVMBTJISwr0C3Wtqq6exeYYwBjv3KnHyiXVL8VAtGU=
Subject key identifier: 2C:AB:9A:F4:FE:AC:B9:1D:5A:35:86:39:36:19:D0:74:4A:69:41:64
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial: 019D38659A0C29ADD233F7E65847FDF9643D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number: 11E6
Signing time: Sun 29 Mar 2026 07:01:15 +0000
Manifest this update: Sun 29 Mar 2026 07:01:15 +0000
Manifest next update: Mon 30 Mar 2026 07:01:15 +0000
Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: 7Zq3pxIGFt6Ap+p7dX24J3rVYnxCLhDoJOtHp+FvTCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9a:0c:29:ad:d2:33:f7:e6:58:47:fd:f9:64:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Validity
Not Before: Mar 29 07:01:15 2026 GMT
Not After : Mar 30 07:01:15 2026 GMT
Subject: CN=2cab9af4feacb91d5a3586393619d0744a694164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8e:55:11:f5:6b:e1:99:62:6b:21:6f:77:eb:
59:97:9b:6e:5c:63:d0:75:2a:e3:27:c8:ea:77:a2:
35:3b:25:f4:fe:ab:7d:cd:85:dc:12:f6:63:99:4c:
58:42:cd:46:16:f3:cf:19:13:20:5a:06:25:e8:5c:
92:42:60:04:8f:40:68:2c:a6:a5:3d:38:a6:55:ea:
bf:82:bd:4b:de:1d:9b:bc:08:d6:09:c6:1a:e8:9c:
b7:b5:fe:7c:1d:5d:ab:2c:0b:57:fe:94:de:24:3f:
d9:25:39:44:a5:cb:4e:a3:e3:87:a8:15:ad:fa:cc:
01:bb:a2:c3:48:e1:2c:01:40:49:12:50:ea:d6:c2:
fb:00:fb:8b:a9:ab:1d:c5:05:c6:0e:fd:0f:bf:08:
a9:90:95:f8:6c:d9:5c:0d:bf:bb:95:6b:d6:91:1c:
f0:36:cd:40:64:30:5c:0e:5a:a8:38:c0:a0:97:08:
d9:f4:f3:f4:8d:4b:e4:f9:93:2f:45:ce:9e:e4:88:
18:d5:b5:ea:bd:60:a4:48:ff:f4:0f:a2:57:46:50:
8a:f4:a0:86:62:3a:43:72:b7:b3:76:90:a8:19:25:
83:d4:0f:77:71:92:09:eb:64:7e:40:fa:56:c8:0e:
38:91:4e:33:fa:11:70:80:f1:6a:e6:34:7e:a3:bd:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AB:9A:F4:FE:AC:B9:1D:5A:35:86:39:36:19:D0:74:4A:69:41:64
X509v3 Authority Key Identifier:
keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:99:41:1e:52:34:fb:cd:bd:aa:24:f9:b4:b5:ab:7c:8c:4e:
83:6e:10:97:5e:e0:a3:4d:48:cb:61:52:56:74:4e:4c:57:4d:
c8:fe:81:f3:ed:1b:c9:aa:86:14:36:53:29:05:97:16:07:ac:
58:8f:ee:2c:91:c8:fd:4d:32:82:0b:a7:f4:2c:11:bb:ab:6f:
60:74:fa:60:db:0b:fd:67:d9:05:f4:f0:b2:5e:c0:f9:f5:c4:
cb:55:f8:26:e7:af:c9:01:9f:85:21:28:f5:2c:41:10:69:b0:
ee:38:4f:7c:b8:67:d7:79:42:d3:9f:54:df:ab:b0:a2:05:c4:
30:bb:8d:b5:54:5b:df:2a:93:e1:9a:e8:61:f1:74:ae:1e:74:
3f:8c:bb:c2:14:25:0c:ac:b5:51:50:a5:ee:be:a0:12:eb:ec:
7c:c7:ba:0d:d8:83:7e:2b:a0:66:da:f8:d0:55:16:8e:b3:1e:
26:7e:8f:7a:2a:ba:3f:82:7a:ae:cb:bb:fd:ed:5f:69:db:cc:
1e:af:6d:fa:b8:d5:01:97:db:2a:46:b5:d6:88:a9:7c:4f:1c:
9e:d9:e9:6e:fc:ce:54:85:38:76:74:c2:53:6d:1e:6e:a3:e0:
4a:dd:f4:b9:60:0f:0c:75:fe:2c:17:54:ec:74:7d:54:7d:fd:
e8:74:db:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:26 2026 by rpki-client