Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
File: _zEXrp1q4OHko4t0mrv52eSSwoU.mft (raw, json)
Hash identifier: 4wcGgM44aD0UhjRt68UGeR5x5xyUx/ocZirmikI57Q8=
Subject key identifier: 95:B2:EC:68:9C:2E:CC:AE:C7:1E:C4:82:D2:A7:B1:F0:87:FE:86:FB
Authority key identifier: FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85
Certificate issuer: /CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285
Certificate serial: 019D386580BB211B6865CBC6DDF23CC2E74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
Manifest number: 0439
Signing time: Sun 29 Mar 2026 07:01:09 +0000
Manifest this update: Sun 29 Mar 2026 07:01:09 +0000
Manifest next update: Mon 30 Mar 2026 07:01:09 +0000
Files and hashes: 1: _zEXrp1q4OHko4t0mrv52eSSwoU.crl (hash: 9eG6GkwfUg7jOOIdG8wYni/8JIwF4L5cPhjjtzQ+ccA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:80:bb:21:1b:68:65:cb:c6:dd:f2:3c:c2:e7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285
Validity
Not Before: Mar 29 07:01:09 2026 GMT
Not After : Mar 30 07:01:09 2026 GMT
Subject: CN=95b2ec689c2eccaec71ec482d2a7b1f087fe86fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:ba:d6:9d:6c:f8:bb:d2:ae:51:4e:7d:7a:
b1:66:dd:7f:c3:16:28:6b:83:19:a6:9b:c6:ff:84:
2a:6a:88:69:08:18:a9:0d:16:9c:1a:45:0c:bf:08:
0a:46:b5:5f:11:e7:e3:d2:ec:fc:be:1c:90:7a:44:
ae:b3:f7:74:22:6a:3a:17:d8:02:73:df:02:c4:b6:
d5:2d:56:37:10:52:1a:b7:64:10:ff:c0:4d:fc:a3:
32:84:b9:29:3d:71:07:5f:ee:ec:ad:27:5d:44:22:
2a:cc:c8:87:ae:59:e8:8b:fe:d5:b0:dd:1c:6b:1c:
aa:9a:3a:4b:a3:9a:8a:55:37:4c:98:e0:f7:72:03:
5f:31:36:fa:e4:b6:74:e6:1e:02:b9:a9:1b:34:f0:
0e:34:a2:b7:db:42:c5:11:fb:49:8e:5a:e8:17:5a:
ea:b7:ce:cc:94:3b:16:09:b5:2b:55:ae:39:ec:22:
f2:93:82:a7:8f:2a:b3:03:98:6b:3e:2a:5c:92:d5:
e6:cb:91:61:db:c9:cb:5a:18:2f:3c:25:4b:af:ca:
88:5d:b8:d3:fc:45:08:a0:b6:9c:7f:48:61:5a:3f:
d7:51:51:ce:ce:99:ea:4c:0b:9f:b1:d5:26:6c:a8:
a0:7a:a7:d7:08:ba:28:36:35:3b:28:e5:79:8e:cb:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B2:EC:68:9C:2E:CC:AE:C7:1E:C4:82:D2:A7:B1:F0:87:FE:86:FB
X509v3 Authority Key Identifier:
keyid:FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d5:4d:fd:87:ab:45:56:95:ab:78:ed:04:2a:46:39:af:10:
29:e6:fc:f2:43:a9:40:46:2f:67:26:91:f8:5b:e6:e8:68:55:
fd:b4:11:33:88:38:6a:7f:74:2d:0f:d4:8a:2f:0e:2a:09:26:
e4:8c:44:ba:60:1d:d1:41:cd:fd:44:b3:81:17:94:12:e6:8c:
ae:91:29:c7:1f:32:63:6d:ae:e3:1d:fe:f2:26:06:29:ec:e7:
24:4b:a7:6d:bc:70:82:b8:71:cc:27:22:aa:09:2e:55:dc:2e:
76:8e:28:63:91:88:6d:28:14:b5:2d:61:24:71:90:f8:0a:c1:
b4:34:c5:2b:0c:6d:32:76:0f:b1:63:98:9e:65:b8:e2:6d:3a:
c7:1a:4a:b5:80:fb:ec:f2:f5:90:f7:c7:f8:da:4b:31:47:c3:
5d:68:ca:a5:19:b7:1e:5c:87:e7:fa:c0:0b:20:bc:e7:c9:9c:
81:c8:cd:ad:c7:ac:de:3c:55:92:c5:58:f5:00:a1:f8:81:1e:
d5:c8:bf:f8:35:47:09:65:3a:0e:5f:8c:f8:2f:30:63:d6:08:
13:6e:c4:5d:55:43:6d:25:19:c1:b7:9d:00:70:3c:47:a9:87:
68:ec:4a:38:4c:34:7f:77:5a:4d:19:bf:24:53:2c:92:72:aa:
55:92:b5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:27 2026 by rpki-client