Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
File: zEH27mce6lNY5xzn_BHJNsw3bGE.mft (raw, json)
Hash identifier: kspubTnv2gLvCpR4apBk4juQqec19AgRvMOJGmNsXuA=
Subject key identifier: FE:38:9B:DF:E8:B7:8F:15:AE:08:B4:34:F8:EA:3D:43:45:1B:CB:0F
Authority key identifier: CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
Certificate issuer: /CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Certificate serial: 019D37C0330BDC5DE748E9837CB860F157F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
Manifest number: 12BB
Signing time: Sun 29 Mar 2026 04:00:35 +0000
Manifest this update: Sun 29 Mar 2026 04:00:35 +0000
Manifest next update: Mon 30 Mar 2026 04:00:35 +0000
Files and hashes: 1: zEH27mce6lNY5xzn_BHJNsw3bGE.crl (hash: Z6ogIKhYHLWZqd4uSBT9d4NJ2am74m5ZP9QtIrh7Bnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:33:0b:dc:5d:e7:48:e9:83:7c:b8:60:f1:57:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Validity
Not Before: Mar 29 04:00:35 2026 GMT
Not After : Mar 30 04:00:35 2026 GMT
Subject: CN=fe389bdfe8b78f15ae08b434f8ea3d43451bcb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:05:ae:d6:11:55:15:0e:e8:31:53:20:44:
31:58:17:4f:1e:fb:a1:8b:83:1b:ea:5a:2f:63:df:
91:2e:cc:e3:90:04:fe:0b:6e:bd:57:6b:d5:03:34:
e9:da:06:80:1f:dd:31:a6:8b:3a:31:f1:92:6c:42:
2b:4c:a3:d5:3e:ab:91:23:77:bb:e3:7b:0a:d8:fd:
51:3f:4c:2f:7c:36:c4:5a:b4:80:5f:61:4c:98:c0:
ab:d8:1e:04:f1:88:45:d9:45:11:f3:1f:39:98:ae:
19:89:c9:1d:31:4d:c8:a7:1d:7a:87:f7:f6:ef:73:
bf:87:22:c6:75:b6:4c:24:a1:6c:7b:3c:bd:d5:b6:
fb:f6:98:61:9e:54:09:5f:4f:cd:ad:b9:4e:7d:66:
02:df:a7:79:55:55:69:83:4a:50:35:37:61:36:5c:
f1:8d:6c:45:59:3d:01:ab:b9:cb:4f:18:fe:e7:cb:
62:89:ec:80:06:8e:8b:89:4c:f7:28:c0:8a:c1:09:
83:11:bb:51:2e:64:34:9b:73:ac:c8:4a:31:68:92:
c3:5e:98:36:07:55:f8:8d:76:99:ea:5c:4f:0a:f1:
83:1c:51:24:55:64:47:d7:2b:38:90:7d:16:64:5d:
bb:37:e5:81:97:b5:ea:84:dc:9f:4c:dd:4d:9f:16:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:38:9B:DF:E8:B7:8F:15:AE:08:B4:34:F8:EA:3D:43:45:1B:CB:0F
X509v3 Authority Key Identifier:
keyid:CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:25:28:14:a6:90:8c:ae:96:56:d2:1e:e8:9d:1d:38:ee:d6:
9b:14:dd:a4:a2:40:3d:7a:48:3c:84:fc:f0:af:75:f8:0f:51:
c0:b7:38:7d:4f:00:7b:75:e8:05:ee:61:90:56:96:f8:64:0d:
62:a9:cd:2f:ac:eb:f7:0d:63:16:3f:50:9c:33:98:e4:2f:5c:
9b:88:a7:f7:d7:7b:76:33:ae:26:4d:6f:dd:6f:f1:ec:c1:70:
2a:0a:9d:6a:8a:80:94:9b:10:09:9c:fd:46:75:78:0c:ca:6d:
09:57:19:64:8f:0f:db:0a:f5:f5:f1:ea:cd:0b:4f:86:ee:57:
6c:9d:0c:46:0d:71:ae:c6:cd:6c:a9:ae:92:0b:44:d1:35:74:
c2:73:64:54:45:6c:bf:8c:6c:5d:d4:99:bb:6f:06:f0:76:51:
b0:05:15:ce:b4:54:75:ef:40:a6:05:39:97:65:46:c4:e3:20:
c7:28:f5:9a:73:ab:9d:f8:18:f8:b7:e7:d2:49:9e:db:75:1e:
d1:1c:96:68:93:9b:e0:93:82:ca:18:c9:c8:46:77:c0:5f:12:
b8:7c:80:ee:28:c4:ef:8a:47:0a:d0:c3:07:9f:72:91:14:94:
32:93:b2:9c:2e:cb:32:24:ca:9f:a5:22:3b:59:15:ba:31:d2:
68:ca:eb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:08 2026 by rpki-client