Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
File: zfyNbNSfmv4mTVQumpYU89SsHJ0.mft (raw, json)
Hash identifier: yYQjvUEDoP1ohpF16I9GYl64bvUYvULQlOqWr+y4D10=
Subject key identifier: 74:FA:24:06:85:82:D2:0E:41:F3:04:C2:19:C0:06:64:4B:F1:52:49
Authority key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
Certificate issuer: /CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Certificate serial: 019D382E2CDE145E59EEFFE3963D355388A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 06:00:43 +0000
Manifest this update: Sun 29 Mar 2026 06:00:43 +0000
Manifest next update: Mon 30 Mar 2026 06:00:43 +0000
Files and hashes: 1: zfyNbNSfmv4mTVQumpYU89SsHJ0.crl (hash: 0/LPgxCrn6nI9WRkUJ3X5AqxdXUF5k2f4+a+bbO63hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2c:de:14:5e:59:ee:ff:e3:96:3d:35:53:88:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Validity
Not Before: Mar 29 06:00:43 2026 GMT
Not After : Mar 30 06:00:43 2026 GMT
Subject: CN=74fa24068582d20e41f304c219c006644bf15249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:ed:f3:2f:07:2b:1f:27:e6:41:d7:9e:66:
76:21:08:e6:c0:12:ae:e5:76:d3:bf:8c:81:aa:2c:
49:11:ff:19:62:50:32:dd:b9:03:5e:f5:00:09:bc:
c8:fd:e4:9f:38:a7:16:ce:75:86:cd:3a:6b:43:4c:
a5:dd:98:99:2c:bb:90:f6:e5:05:07:6a:88:79:ad:
c8:41:c0:d7:3f:bd:a6:da:5f:50:dc:a6:99:54:8d:
fe:62:77:20:d7:ea:3e:2b:18:a5:92:1d:dd:ae:4b:
76:4b:38:09:21:b2:ad:f0:aa:f7:90:64:be:fb:15:
44:71:46:d0:74:6f:d4:cd:35:05:15:6a:bd:d3:f2:
46:23:f7:2b:20:90:1e:dc:88:80:1c:ce:0e:13:d2:
9b:2c:34:5b:67:28:90:8b:0e:2b:62:15:08:c5:f4:
08:c0:9a:6f:44:9f:e3:54:4a:2b:dd:e9:77:9b:cb:
83:5c:c8:d0:65:d3:dd:ae:d9:3d:86:b4:e5:b7:bc:
12:e6:be:85:07:82:e3:b5:6f:11:f6:42:21:01:91:
1d:34:06:f6:2d:7f:5c:b2:5d:2c:c6:b2:57:fb:3b:
40:fb:fe:40:fc:c5:96:0b:05:9a:e2:55:b1:6d:61:
6d:e8:84:d8:63:96:be:03:38:fd:16:5d:83:97:5a:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FA:24:06:85:82:D2:0E:41:F3:04:C2:19:C0:06:64:4B:F1:52:49
X509v3 Authority Key Identifier:
keyid:CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e0:4a:7b:6c:71:18:bf:fd:02:02:62:fe:3d:af:de:f7:4e:
6b:77:57:23:cc:b1:48:35:9e:76:1b:71:01:41:97:68:e1:6c:
0c:c0:5b:6e:05:b8:19:93:28:34:1a:7c:83:2a:84:85:8a:a3:
f9:b7:61:79:e9:65:ad:f5:e8:f9:5e:5a:5e:f2:96:4d:7d:8b:
31:a9:6f:60:4e:65:bd:4b:6b:9e:a3:16:47:1f:a7:80:1c:35:
49:77:7b:f1:20:2f:36:b5:6f:99:03:ad:b6:7d:5d:77:c6:5f:
32:c5:49:81:b8:f3:5d:e5:93:0c:8e:90:01:5b:58:ad:ce:87:
ff:50:6a:06:9a:fb:f8:a4:7d:99:a7:55:0b:e4:29:69:6a:94:
4a:34:0d:9f:94:4b:d4:a8:d0:2f:79:b3:2b:d8:80:21:55:98:
b1:74:32:34:2b:40:96:f6:38:5f:04:54:92:a2:5d:67:9f:b8:
38:85:66:79:ad:77:f0:28:fe:6e:02:67:73:85:c6:2d:f0:82:
ba:22:29:07:2b:30:e0:3c:d5:cf:bc:86:b9:43:54:9b:57:1b:
32:0b:b0:44:25:a3:48:6e:ff:40:e4:e8:da:47:9e:3d:77:19:
9e:81:cb:13:1b:7a:fe:41:08:d0:b9:de:22:2f:28:66:6f:06:
dc:29:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:48 2026 by rpki-client