Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
File: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft (raw, json)
Hash identifier: LuxANRWb3teStlrgfm1nUAE2x36O1ZhlfsEKqd7Y+y4=
Subject key identifier: 0D:EB:0C:FD:76:63:1C:42:05:DD:74:7B:24:65:CF:92:F8:7A:18:FA
Authority key identifier: B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C
Certificate issuer: /CN=b19d46a6a336353a90f174fa990fc2241201eb1c
Certificate serial: 019D3977C9155DF35A279B3F618965914778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
Manifest number: 0816
Signing time: Sun 29 Mar 2026 12:00:44 +0000
Manifest this update: Sun 29 Mar 2026 12:00:44 +0000
Manifest next update: Mon 30 Mar 2026 12:00:44 +0000
Files and hashes: 1: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl (hash: 1y9naS1ubRuMlf+/UXuBZqoGcFlhpRuBq2edJNFOS0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c9:15:5d:f3:5a:27:9b:3f:61:89:65:91:47:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19d46a6a336353a90f174fa990fc2241201eb1c
Validity
Not Before: Mar 29 12:00:44 2026 GMT
Not After : Mar 30 12:00:44 2026 GMT
Subject: CN=0deb0cfd76631c4205dd747b2465cf92f87a18fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:ae:1d:e4:9c:29:a1:10:97:f0:c5:b4:b1:
f0:b7:29:30:26:79:cb:da:4a:5c:ce:41:98:cb:4f:
b2:60:14:16:04:0d:8c:18:e4:e2:75:45:ca:d9:42:
b9:27:ac:c1:04:62:a8:31:0c:f3:ae:37:e9:3e:2e:
11:e7:02:40:ec:57:54:47:ed:c5:d4:3c:e6:93:0b:
fe:e6:ac:d1:25:4c:69:97:81:73:32:7b:f6:29:a5:
78:04:5f:2f:36:21:77:b5:01:7e:99:3a:da:12:9e:
40:e3:7e:5b:f4:c4:43:75:ac:ce:0a:82:e9:81:88:
37:4f:6e:81:cd:05:18:f8:96:03:2b:a8:c8:49:4e:
ee:da:21:f4:c1:48:93:43:01:18:be:b2:df:da:5f:
e7:87:d4:e6:91:68:1e:2f:fc:10:43:6a:8b:bc:6e:
1d:dd:27:f3:01:8c:3c:13:bb:96:32:9c:55:89:6c:
b4:2d:e8:ba:b0:37:27:23:fc:dd:5e:ba:25:2c:ce:
d1:27:53:19:70:d3:05:ca:8f:06:90:6c:2c:ad:a5:
0f:db:66:65:73:19:72:db:e3:9c:60:a4:87:d1:cb:
e6:04:27:ed:5e:07:03:19:d9:1a:dc:7c:c0:2d:c4:
45:b4:4a:c2:52:0d:dc:48:26:38:0a:02:70:44:1a:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:0C:FD:76:63:1C:42:05:DD:74:7B:24:65:CF:92:F8:7A:18:FA
X509v3 Authority Key Identifier:
keyid:B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:22:8f:3f:41:ea:4e:a7:9d:c1:67:06:b7:cf:e8:ba:25:86:
4c:c7:6f:8c:7f:c0:68:53:5e:f6:22:9e:ad:91:8f:88:06:fe:
36:4b:6f:d9:66:5c:56:d5:3b:eb:ca:2c:eb:19:63:d3:fa:f7:
51:26:71:2c:c8:a2:30:fb:fa:61:91:df:ce:aa:40:a2:ba:e7:
cc:e2:49:2e:a4:42:db:93:13:df:4b:99:42:06:ec:53:08:c3:
c9:4a:46:f2:e0:8b:b9:78:ef:83:5e:45:b7:70:79:d6:57:a0:
1e:34:3e:d7:3e:f8:ca:10:5b:12:c0:7c:8f:cf:a5:0f:81:34:
1c:5d:a2:43:27:99:d9:68:99:5a:58:5e:d5:60:95:41:b8:de:
28:e9:56:21:0d:03:b1:7b:36:b7:dd:87:21:fc:f6:05:a1:e6:
d8:15:42:ac:97:6f:ef:19:06:c2:bd:b4:48:c3:0c:91:8b:03:
95:02:76:b2:72:f7:14:db:25:8a:2b:f4:12:a8:bf:71:10:e1:
29:4e:0e:93:b0:ec:a6:02:37:b1:2a:56:ba:8b:cb:14:3b:f6:
d3:2d:4a:20:e7:a9:c8:b4:36:fe:6a:a3:dc:c9:79:3d:4f:64:
0a:c1:cd:72:b7:40:72:21:1c:7d:f8:97:7b:d0:e4:fa:94:8e:
b6:b0:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:16:04 2026 by rpki-client