Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
File: zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json)
Hash identifier: ZoJqOqb/KhegfOO6flXMMmDmzf/QXPxi+AHFLH/15Yk=
Subject key identifier: 50:3D:75:12:F6:8D:8A:40:C4:84:7F:05:16:51:B6:06:20:45:FE:6A
Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
Certificate issuer: /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Certificate serial: 019D3940E9991BA7C767B5E5193B962DFC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
Manifest number: 0C0E
Signing time: Sun 29 Mar 2026 11:00:48 +0000
Manifest this update: Sun 29 Mar 2026 11:00:48 +0000
Manifest next update: Mon 30 Mar 2026 11:00:48 +0000
Files and hashes: 1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: mQoCh2RiASitIGElOR0RhV0N6ofAEHG2bnTbbXGi5iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e9:99:1b:a7:c7:67:b5:e5:19:3b:96:2d:fc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Validity
Not Before: Mar 29 11:00:48 2026 GMT
Not After : Mar 30 11:00:48 2026 GMT
Subject: CN=503d7512f68d8a40c4847f051651b6062045fe6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:b4:06:1a:77:35:3d:f3:be:16:09:95:5a:
65:64:67:be:91:36:62:86:e1:98:d3:cd:ad:d4:e3:
a7:dc:90:84:82:b8:b6:2e:16:17:04:f9:d1:83:a1:
ce:fe:dc:dd:dd:e9:c1:54:95:ba:94:2e:78:48:b7:
86:28:23:24:90:5f:0e:fd:84:00:79:d5:f9:16:c3:
54:37:dd:03:79:1b:81:f4:6c:45:e2:c1:91:f6:55:
1f:d2:05:4e:68:27:3d:f1:c7:e5:87:b6:25:61:a7:
4f:38:80:4f:46:e4:80:ab:9f:3d:51:4e:9b:aa:d0:
d6:16:14:68:cd:a2:bc:ab:70:48:b6:ed:c5:5a:7c:
9a:3a:84:53:7b:d2:5f:18:ec:e4:85:0a:02:92:0a:
20:40:c5:bc:b2:f5:ec:17:b0:b8:f6:4e:b7:6b:a9:
ed:46:cd:8a:01:18:61:19:f6:d0:37:e5:ba:bc:8d:
f0:60:d5:96:fa:88:c6:20:80:28:68:08:20:c8:41:
59:5c:a2:31:5f:bf:b7:9a:7d:f1:aa:f8:d8:c5:ac:
a7:9a:be:cd:d4:e0:9d:7b:8c:ff:21:59:59:9b:bb:
db:55:45:66:93:fd:93:a6:e0:af:e9:5e:22:7a:31:
77:65:b8:6b:a7:ff:2a:70:8a:39:44:fa:ea:b9:f0:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3D:75:12:F6:8D:8A:40:C4:84:7F:05:16:51:B6:06:20:45:FE:6A
X509v3 Authority Key Identifier:
keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:08:0c:b8:a2:a2:cd:10:28:cd:36:ac:ac:37:f7:5d:49:28:
24:7e:e4:7f:67:27:c7:f4:0d:9f:10:8e:87:51:86:8b:55:e2:
59:b8:bc:c9:b7:05:a0:85:df:61:35:87:cb:24:2f:eb:2c:a1:
0d:c0:ce:aa:99:38:c3:a1:f7:22:1e:25:cb:6a:20:09:4d:53:
bb:aa:b3:f3:e9:a1:6f:ef:4f:cf:27:fa:e5:73:38:98:bd:e0:
00:a2:72:a8:26:fb:2f:6b:d5:0e:7d:5b:09:4a:7d:92:78:5c:
e9:ad:71:e9:56:8d:50:d9:e0:28:24:ea:59:32:c5:0f:29:13:
23:e5:0c:38:58:6e:7f:35:f7:d7:df:54:17:12:cc:1d:e0:46:
36:6b:14:61:18:0d:3d:6b:71:d9:7e:3a:dd:a9:7c:d1:01:7b:
4a:33:c3:5a:d1:9b:46:5d:54:a6:ea:92:7d:4f:c3:94:28:6a:
d3:11:91:aa:ff:83:c2:a0:1f:ed:7c:e3:34:ac:26:cc:e2:e8:
f7:86:ab:a6:77:40:0c:a4:93:b3:8d:ce:06:32:d0:83:32:87:
ec:ba:f4:c4:04:47:9b:c2:d6:38:66:51:66:4e:18:f3:d8:13:
52:37:79:7e:e4:c1:fb:4d:e1:ac:7b:2e:45:d2:4f:81:0b:c9:
e5:0a:16:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:39 2026 by rpki-client