Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: EybEOHRf/fMhqx97U2nQYpUwlJQq3/csO+V7DotOz5s=
Subject key identifier: 6C:44:60:02:91:0E:8A:1A:3F:94:6C:E8:5B:06:C6:14:26:FB:8C:93
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 019D39E5B40EDFEC083E30DDCED6A79DF6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: 07F1
Signing time: Sun 29 Mar 2026 14:00:48 +0000
Manifest this update: Sun 29 Mar 2026 14:00:48 +0000
Manifest next update: Mon 30 Mar 2026 14:00:48 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: zyfCsT837e7xSMSel8zKrVDB2eutNKCFua8J/cBBRi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:b4:0e:df:ec:08:3e:30:dd:ce:d6:a7:9d:f6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: Mar 29 14:00:48 2026 GMT
Not After : Mar 30 14:00:48 2026 GMT
Subject: CN=6c446002910e8a1a3f946ce85b06c61426fb8c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:3d:2b:36:77:90:04:77:f0:d9:6f:06:28:
e0:9e:36:54:2b:82:fc:f3:02:37:e7:7d:8c:a0:86:
7e:ee:57:a2:28:49:6f:70:13:e8:a7:8a:a7:1a:7c:
6f:25:4e:64:d6:53:58:1d:e8:2f:a3:40:e5:06:98:
63:4d:9d:35:9d:d6:09:ad:a9:80:e9:1d:79:cc:8f:
f1:de:fe:de:92:99:08:50:d9:b9:a8:3c:3a:a4:0b:
09:b5:4a:c7:cb:30:b9:f6:8c:0c:f5:8b:23:7a:11:
14:85:2b:28:39:a9:3f:63:45:ef:85:93:02:68:e3:
92:ee:fb:36:aa:08:db:ab:7f:e7:fe:d4:45:16:5c:
12:7f:35:61:f8:88:e8:11:e8:e1:da:fd:ff:14:a6:
e0:34:88:d4:21:c6:a7:a2:20:2d:74:47:98:22:e7:
27:b6:fe:2d:83:70:cb:1a:b4:6e:52:9d:6d:d6:e8:
85:15:52:7d:28:74:ac:f2:04:25:12:29:05:ce:ad:
ef:c7:37:55:bc:88:90:3e:3e:3a:43:8f:c4:de:17:
90:32:78:06:fe:ce:c9:7f:76:38:ad:b4:74:44:4d:
78:e2:63:05:8a:6d:48:77:9a:92:b9:a6:1b:2c:3e:
bb:23:80:0a:a7:9b:97:d3:26:74:bc:6b:72:42:7f:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:44:60:02:91:0E:8A:1A:3F:94:6C:E8:5B:06:C6:14:26:FB:8C:93
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8f:c2:99:0a:60:54:70:77:f8:01:94:30:37:a2:83:ae:ad:
e9:9d:1c:81:f5:b8:66:37:66:65:41:ec:03:15:b9:66:b8:b5:
29:e9:80:d7:bf:97:98:93:93:60:be:46:69:7c:9f:01:8b:09:
85:74:d6:5f:fd:6c:02:b6:e9:97:d3:e0:22:9e:ca:0a:55:ae:
83:1a:0d:c6:5c:b3:46:77:12:64:f9:26:ea:97:23:c8:18:d8:
27:fa:5a:1c:a8:61:ff:22:d0:16:39:47:9d:df:96:97:fe:8a:
75:b2:7d:5f:51:03:b4:cb:a7:fd:c4:cf:bc:b1:78:e5:a5:c0:
7c:9e:24:78:ab:7a:cf:8d:19:7e:e9:70:9d:ce:d4:ee:63:80:
29:ef:29:9f:10:91:43:55:46:41:76:09:cc:82:40:65:0d:c7:
65:38:9c:f7:da:09:c8:38:59:f5:7c:f2:4a:10:64:41:64:c8:
b5:15:13:c7:4a:d9:a0:45:ab:c0:87:ae:e3:b0:ca:bc:30:f2:
97:81:33:a5:ab:06:8d:ba:49:32:d8:04:75:24:13:ae:c2:6d:
64:56:16:ce:5a:ab:0d:73:f7:b3:48:6d:11:9a:73:14:18:a9:
50:7f:81:f0:3e:51:27:fe:bf:6e:e0:55:01:e0:8f:13:f2:81:
02:83:d2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:33 2026 by rpki-client