Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
File: zEaGqhpTLOSwws4IIxfiSU6BgaI.mft (raw, json)
Hash identifier: k5Fb+x/0PPtkrUs/ORmWFLYgTU2Ms6UVjEZ7r/pCyMQ=
Subject key identifier: 39:36:EF:8B:4C:C7:B1:DE:C1:BF:67:90:1D:FB:38:43:7B:67:63:A3
Authority key identifier: CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
Certificate issuer: /CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Certificate serial: 01A08B6836F653E6BD1862083107DFAA4C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
Manifest number: 1961
Signing time: Thu 10 Sep 2026 13:00:57 +0000
Manifest this update: Thu 10 Sep 2026 13:00:57 +0000
Manifest next update: Fri 11 Sep 2026 13:00:57 +0000
Files and hashes: 1: zEaGqhpTLOSwws4IIxfiSU6BgaI.crl (hash: JL4WXFnEI/oSEQVEDekl50Zw8NKlMeb0Fd6AQngn5cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:36:f6:53:e6:bd:18:62:08:31:07:df:aa:4c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Validity
Not Before: Sep 10 13:00:57 2026 GMT
Not After : Sep 11 13:00:57 2026 GMT
Subject: CN=3936ef8b4cc7b1dec1bf67901dfb38437b6763a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:5b:db:b4:97:37:7a:7e:68:7e:00:5a:59:
43:73:6c:95:66:13:08:ae:2d:65:b8:40:16:19:64:
9d:f0:b3:bb:c0:75:5e:7e:62:d1:78:66:d4:96:e0:
4c:11:8e:1a:6b:66:76:96:e3:55:94:78:b9:8b:31:
b7:1c:74:20:81:1b:10:a4:da:88:5a:96:81:33:d7:
ba:8a:45:cc:5c:91:e9:02:5d:ec:cc:5f:8e:a2:2b:
d9:7f:05:43:6a:6e:70:83:39:1d:06:e8:85:83:76:
42:91:fb:d5:32:3b:54:ac:1e:6f:4d:42:29:de:03:
87:55:9d:12:fb:87:67:71:c4:fa:3e:2d:de:e4:62:
44:04:50:3c:91:3b:0f:b9:18:b5:35:ac:c1:5e:f9:
1f:42:64:c2:72:22:de:46:6d:8e:56:b2:30:68:6e:
fb:99:87:40:21:52:2b:ef:3e:c4:fb:5a:f3:cb:e2:
ea:1a:ef:7b:11:ba:4c:42:b5:23:29:ae:2b:0b:2e:
ed:d1:07:64:e9:20:32:95:c0:dc:7b:de:af:c8:43:
6b:f0:18:07:5d:bf:ca:a2:d2:76:a5:5f:9e:3a:47:
97:35:8a:c3:42:61:02:6c:3a:24:26:35:61:08:e1:
41:aa:ca:66:8e:62:45:e3:d5:1b:b7:13:99:2e:07:
46:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:36:EF:8B:4C:C7:B1:DE:C1:BF:67:90:1D:FB:38:43:7B:67:63:A3
X509v3 Authority Key Identifier:
keyid:CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:20:a2:2e:f2:b5:51:39:df:04:35:a7:c3:e3:0f:67:f1:74:
85:d4:5a:9f:71:4f:09:7e:67:a3:cc:43:12:6f:cb:e7:48:00:
f3:38:70:e2:a2:04:ff:ac:97:01:b4:b7:ea:25:ec:58:45:1c:
f1:37:9a:22:d6:f6:85:f7:d8:1e:c9:27:44:59:f7:6c:4c:cc:
b8:7b:c0:9e:77:1e:47:b8:b6:c4:1d:1d:9a:56:8b:84:04:fd:
cc:c0:69:4b:f7:67:52:4f:9e:3a:83:26:5f:6e:73:c1:92:07:
1c:d7:f5:ed:85:92:01:2b:50:69:62:19:da:1c:21:71:21:19:
65:1f:f3:98:72:49:72:79:35:1b:2b:e1:a7:eb:be:cb:72:c8:
e3:c6:3a:9c:26:63:34:9e:aa:12:45:16:cc:22:0e:11:08:40:
7c:ba:ce:a1:f9:5f:e4:0a:9f:e5:99:98:c3:48:b7:f7:cf:05:
c7:52:f0:35:ec:ec:fe:07:c1:cf:71:60:7c:0a:65:a2:b5:50:
49:31:bf:58:33:08:76:0d:a7:a0:7c:cd:64:f3:aa:aa:67:ac:
c5:ef:f4:a6:fb:0d:c5:71:53:17:36:d1:8a:93:48:44:76:a1:
b4:5c:62:8c:6a:d5:c1:cc:94:04:75:88:e2:87:a0:77:49:86:
6d:1e:90:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:13:00 2026 by rpki-client