Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.mft
File: zdzNhA0BvLL8qSppg49M2mxqdKg.mft (raw, json)
Hash identifier: zNDt2CaC1J54OLjzWNk4q2qqL74WqHRjisKi2LHzv98=
Subject key identifier: F3:F5:3C:64:32:3F:C7:BF:4B:D4:23:E6:AC:D6:02:68:A0:B7:DA:2D
Authority key identifier: CD:DC:CD:84:0D:01:BC:B2:FC:A9:2A:69:83:8F:4C:DA:6C:6A:74:A8
Certificate issuer: /CN=cddccd840d01bcb2fca92a69838f4cda6c6a74a8
Certificate serial: 019D371B53E97CA0F7ACD4848B8175A25BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdzNhA0BvLL8qSppg49M2mxqdKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.mft
Manifest number: FB
Signing time: Sun 29 Mar 2026 01:00:30 +0000
Manifest this update: Sun 29 Mar 2026 01:00:30 +0000
Manifest next update: Mon 30 Mar 2026 01:00:30 +0000
Files and hashes: 1: zdzNhA0BvLL8qSppg49M2mxqdKg.crl (hash: HHlHRDE6tuSoJ0AQLU+I6DztsoZ9tX8TbYXj/Tea8WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdzNhA0BvLL8qSppg49M2mxqdKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:53:e9:7c:a0:f7:ac:d4:84:8b:81:75:a2:5b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddccd840d01bcb2fca92a69838f4cda6c6a74a8
Validity
Not Before: Mar 29 01:00:30 2026 GMT
Not After : Mar 30 01:00:30 2026 GMT
Subject: CN=f3f53c64323fc7bf4bd423e6acd60268a0b7da2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c9:72:fd:97:c6:b5:20:b2:2d:13:6d:44:ee:
70:9e:1b:2b:14:90:34:79:bf:8e:09:01:a4:78:b7:
f6:42:81:4e:16:74:6f:ff:91:35:aa:88:40:77:fa:
28:20:5f:5b:7e:cf:c2:1e:2e:9b:2f:80:4e:0f:76:
bb:df:46:3f:64:ab:0c:05:87:7b:9b:bf:94:53:4d:
54:e1:eb:81:95:ea:a0:1a:93:f3:d2:2e:42:75:a4:
2a:5d:96:9a:16:4c:a6:c7:8f:81:2f:de:24:fa:fb:
b4:f7:82:2e:bb:50:5d:39:55:c3:5e:20:33:b2:66:
3e:ce:3c:df:54:ad:b5:1a:3e:bf:fd:6b:c7:61:71:
67:53:5d:16:e0:6f:ad:20:8f:f7:f2:c2:99:66:89:
86:c3:35:49:a6:15:8a:87:65:b4:2c:65:a2:0b:a8:
c8:19:e5:0b:a3:2c:11:9e:5e:b7:10:4f:d5:fe:b9:
b8:ed:30:e9:33:ba:87:d2:c2:5c:c2:e3:88:b3:78:
44:d3:39:ab:5c:35:4e:f1:18:14:e7:b7:e2:19:19:
8d:c6:81:d2:e7:09:6a:51:22:64:61:de:b1:76:2a:
a8:96:b9:39:77:00:9d:ef:8b:a4:74:5b:93:35:a7:
1e:00:be:3e:50:95:22:8c:ec:2b:d7:94:e5:70:c8:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F5:3C:64:32:3F:C7:BF:4B:D4:23:E6:AC:D6:02:68:A0:B7:DA:2D
X509v3 Authority Key Identifier:
keyid:CD:DC:CD:84:0D:01:BC:B2:FC:A9:2A:69:83:8F:4C:DA:6C:6A:74:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdzNhA0BvLL8qSppg49M2mxqdKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4d:2d:8f:ec:92:a5:ce:ab:7c:73:50:79:b5:35:67:5d:f2:
97:d0:89:9b:34:9d:91:87:e6:71:b0:b2:1b:d1:5d:5d:bf:2f:
2c:9e:3b:52:2a:41:54:d9:07:4a:28:78:08:96:94:1f:4d:03:
a9:ed:5e:04:40:77:2f:9b:c5:29:79:b8:75:86:e3:6d:80:67:
2d:11:1d:15:2a:52:6d:15:5d:d4:d8:9f:77:78:90:83:48:9d:
25:67:7b:ee:b1:01:2c:ee:cc:b3:ca:f3:dd:09:11:9b:6a:2b:
9d:37:19:07:65:d6:31:aa:7c:2e:9c:73:4b:e4:21:f6:95:b6:
17:3b:e8:d7:60:18:51:0e:0e:a4:39:e3:5b:38:1a:08:16:f5:
6c:3d:04:d4:31:79:19:ea:a0:bd:24:2c:de:6d:83:1e:6f:ce:
b9:f0:49:26:ca:2f:8d:f8:b9:77:f9:a2:a0:10:34:7a:73:58:
ce:9d:5c:5a:11:84:2a:20:0d:39:18:e7:46:e7:2b:26:88:13:
0a:af:88:ad:c2:44:2d:7e:d7:8f:7c:d2:47:13:4a:40:3f:95:
01:73:5e:3d:50:5c:bb:d9:a8:ed:f9:83:4b:5f:ae:94:96:5e:
82:79:b6:0d:a7:c3:8e:f4:95:2f:55:00:59:9f:d5:a5:92:18:
04:d6:6b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:01 2026 by rpki-client