Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
File: zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft (raw, json)
Hash identifier: eKeLf0KSYAvFnaK2FDJlqTGMfcywzOEsMyXXoHqPtLw=
Subject key identifier: 6C:43:99:A4:6D:07:10:FD:CB:87:22:0F:5A:1D:A5:3A:08:AF:2C:E2
Authority key identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
Certificate issuer: /CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Certificate serial: 019D3789254115F93B6F15781C867AF40538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
Manifest number: 07F0
Signing time: Sun 29 Mar 2026 03:00:27 +0000
Manifest this update: Sun 29 Mar 2026 03:00:27 +0000
Manifest next update: Mon 30 Mar 2026 03:00:27 +0000
Files and hashes: 1: zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl (hash: IEaT8SleTwHhtoUmE0BGPsJRJ2kQx5a6/L3dMW5dv0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:25:41:15:f9:3b:6f:15:78:1c:86:7a:f4:05:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Validity
Not Before: Mar 29 03:00:27 2026 GMT
Not After : Mar 30 03:00:27 2026 GMT
Subject: CN=6c4399a46d0710fdcb87220f5a1da53a08af2ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:84:69:ef:1d:fd:5e:af:0a:da:82:c3:a9:
4d:f7:58:01:57:45:69:f6:91:3b:ec:f3:e4:93:a7:
aa:6c:11:1e:4c:a1:d9:d9:83:b9:0f:00:49:db:55:
f7:39:c5:c5:c6:08:52:07:cd:11:cf:b6:bc:fb:cb:
7e:78:4b:bc:35:49:5e:ec:25:5d:bd:14:c9:80:92:
6f:ac:76:7d:e0:2c:68:94:a9:fb:44:8d:7b:f8:4c:
74:64:9e:b5:cb:bf:45:61:98:5b:ec:a9:f1:ca:05:
a8:f4:f9:fc:35:df:4a:e7:98:4a:cb:38:c4:40:9a:
91:58:c0:fb:3c:bc:c8:4e:0f:27:b7:8b:2a:c3:fb:
e8:f0:a1:78:73:21:e7:77:1d:02:5a:35:1d:79:e2:
c1:cb:fd:e2:23:bd:68:a8:5b:87:10:4b:6c:d5:6c:
96:46:74:d3:10:d3:3f:19:e8:e8:8d:e9:fb:75:af:
de:9f:d7:f1:02:90:03:b7:1f:ab:e4:57:b1:90:6b:
fc:b8:16:4a:08:7d:9d:4e:73:b0:0b:ca:9a:78:f4:
be:74:4b:93:e3:f7:bb:10:57:d9:a4:a2:fc:6a:6c:
25:61:20:0d:9d:fe:fc:67:36:52:ee:be:cc:8a:cb:
d6:15:93:da:24:37:84:ca:ef:ef:17:7d:a9:80:cc:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:43:99:A4:6D:07:10:FD:CB:87:22:0F:5A:1D:A5:3A:08:AF:2C:E2
X509v3 Authority Key Identifier:
keyid:CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:47:10:89:d7:95:c3:bf:08:4c:b4:d2:86:41:b1:ef:78:b4:
26:40:14:43:90:3d:b4:ff:1f:20:cf:8a:e0:30:65:9b:ed:1b:
0c:17:39:fd:14:dc:15:64:91:ad:d7:77:4e:26:f6:97:1c:c4:
17:b2:2f:e3:a0:a0:44:96:06:b6:14:bb:aa:d5:19:8c:b0:e3:
b4:e5:21:6e:ec:67:a5:f4:57:48:99:e2:a4:28:d3:e4:ac:b7:
ee:74:6a:87:d9:d6:de:59:46:64:16:32:f6:06:ae:dc:9c:19:
98:f3:ee:18:dd:3a:ef:2c:4a:f3:77:dc:65:30:8b:55:8d:da:
cb:81:ec:ed:9f:99:d2:af:3a:d7:09:8b:28:51:b7:bd:35:e2:
80:57:2c:0e:8a:73:67:83:40:26:41:5b:77:c3:3b:da:41:35:
df:dd:ca:f6:12:a3:d0:1b:a8:68:61:7b:68:fe:8a:da:00:b9:
86:4c:98:81:55:6d:44:fd:6e:37:f9:64:54:50:7b:7c:0c:1a:
c6:d9:05:5a:3b:cb:ed:23:e5:9d:ca:e2:f3:3c:e4:9c:1c:10:
a6:d4:80:19:e7:d3:57:cd:1e:54:39:bd:35:2d:f6:0b:93:fc:
ae:6a:83:dd:9f:8b:60:21:6d:70:7c:82:e6:61:07:05:6f:5a:
65:2a:c7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:22 2026 by rpki-client