Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
File: zEUACR782QXnLqRfJ4JIZh8iWy8.mft (raw, json)
Hash identifier: c3LWW/SokksvNWarsU521ekdljvs0C8SyXhXNlB0pVA=
Subject key identifier: 9D:EB:86:14:49:74:A0:A0:B5:9F:AE:45:57:A0:40:1B:26:85:08:46
Authority key identifier: CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F
Certificate issuer: /CN=cc4500091efcd905e72ea45f278248661f225b2f
Certificate serial: 019D37F72C9B674716C1C4E94DB98E7FEABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 05:00:38 +0000
Manifest this update: Sun 29 Mar 2026 05:00:38 +0000
Manifest next update: Mon 30 Mar 2026 05:00:38 +0000
Files and hashes: 1: zEUACR782QXnLqRfJ4JIZh8iWy8.crl (hash: edZMHV2CeG6+9n87N+3nG6Lk+7lHhGtL+p1ZY5jRW7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:2c:9b:67:47:16:c1:c4:e9:4d:b9:8e:7f:ea:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4500091efcd905e72ea45f278248661f225b2f
Validity
Not Before: Mar 29 05:00:38 2026 GMT
Not After : Mar 30 05:00:38 2026 GMT
Subject: CN=9deb86144974a0a0b59fae4557a0401b26850846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:05:ff:d8:27:b6:83:46:c9:a5:e4:5f:57:
27:e8:6f:1c:49:e4:76:77:29:a7:d9:cc:88:03:11:
bd:aa:24:5f:ec:7b:e4:6b:97:39:cf:94:55:f3:e5:
f2:40:8a:b1:bf:82:c7:f6:26:30:0e:51:ab:24:28:
0f:26:b3:9f:a2:ac:1a:61:76:56:d1:c6:a2:d7:d9:
8a:b8:cc:18:0e:0c:59:88:12:e0:dc:9c:39:78:25:
fe:fe:88:63:24:0b:4b:8e:86:62:f3:3d:9d:db:45:
a2:7a:fc:7e:2a:06:6a:69:2b:90:aa:8b:9a:e1:3a:
89:3e:6b:bf:8a:97:3f:2c:05:f7:fc:24:b9:72:9b:
cd:70:e6:b3:bc:6a:c0:69:56:ba:58:c6:9c:60:db:
ad:c5:68:e3:02:aa:b6:96:ef:35:e2:aa:f2:5b:fd:
e7:6a:1c:97:52:8a:b6:46:66:33:0c:ac:e0:e3:b8:
de:3e:e7:4d:5e:76:4a:f5:7a:54:ea:28:58:92:5e:
76:35:c4:04:25:be:84:e2:55:f5:ef:b9:be:4c:12:
5b:b6:ab:10:d1:8e:ff:6e:fb:27:35:ac:ba:2d:6f:
48:ef:39:d4:d1:6e:8b:44:e2:75:18:5d:0c:15:59:
bf:a0:12:4c:b7:73:e1:cc:78:d6:13:e2:76:ca:73:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EB:86:14:49:74:A0:A0:B5:9F:AE:45:57:A0:40:1B:26:85:08:46
X509v3 Authority Key Identifier:
keyid:CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:9d:23:c2:4c:54:89:39:2f:89:4f:ba:21:20:15:ee:71:f5:
5e:7d:28:d9:d6:4e:5e:5f:85:f9:3a:fc:3c:43:85:e6:e4:e7:
d4:7e:5c:81:4a:5d:8f:af:7e:44:07:35:cd:0a:79:2a:16:c7:
ba:76:2e:19:f7:5f:7a:0a:dc:e5:72:55:3b:2f:b3:e9:ce:7e:
20:36:0c:6b:46:e3:7c:47:0d:5a:e3:84:1b:92:64:e1:f1:85:
de:82:6d:49:88:20:e6:d6:a3:f1:b2:ec:54:67:ef:47:10:02:
a8:c6:9c:f7:df:78:e3:33:60:dd:a7:c1:e3:4e:dd:4e:73:46:
4d:3f:fa:62:7e:67:8a:6d:8b:a3:d1:77:60:67:10:8a:ff:57:
5d:3b:c3:86:f8:75:14:25:4d:ac:02:5a:13:8a:5f:5e:60:32:
21:e0:f3:6d:d1:e2:c4:b9:fe:a0:5f:95:28:67:6e:c9:2a:08:
3a:17:4a:e6:14:15:df:6f:ad:68:d9:10:f1:e9:88:99:b4:12:
c3:83:89:73:12:97:78:4f:ff:f9:a5:fb:b5:54:5b:dd:8c:3a:
2b:47:0a:e1:7d:b3:4e:e3:b4:ac:77:13:25:07:8b:0d:64:fd:
6c:b3:e9:71:9d:ba:6d:1f:c5:56:cd:8f:21:11:a5:14:fe:86:
44:bf:e2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:13 2026 by rpki-client