Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
File: zoip7Zmtl6w3FxISn-BU9pbcVn0.mft (raw, json)
Hash identifier: mlShTUTDpYRppRZs4dSdinZA00b8+CjSmTxMI4mNQuk=
Subject key identifier: 14:22:35:0C:EE:38:C5:4A:42:54:73:4E:FA:82:66:0E:65:7B:B8:3F
Authority key identifier: CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
Certificate issuer: /CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Certificate serial: 019D3865830D24916E26078D064D3EA5C9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
Manifest number: 0688
Signing time: Sun 29 Mar 2026 07:01:09 +0000
Manifest this update: Sun 29 Mar 2026 07:01:09 +0000
Manifest next update: Mon 30 Mar 2026 07:01:09 +0000
Files and hashes: 1: zoip7Zmtl6w3FxISn-BU9pbcVn0.crl (hash: 2boaKYXjlN5csVOsBAvzMGPiiM2310wBG0QqHjgIdAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:83:0d:24:91:6e:26:07:8d:06:4d:3e:a5:c9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Validity
Not Before: Mar 29 07:01:09 2026 GMT
Not After : Mar 30 07:01:09 2026 GMT
Subject: CN=1422350cee38c54a4254734efa82660e657bb83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:7a:6d:dc:26:c9:b6:ae:df:74:74:0f:be:
bd:57:98:20:4e:3b:ea:d3:6e:8a:61:57:93:35:06:
a8:b7:f6:52:e9:dd:40:b4:05:d2:f4:76:fe:3e:13:
51:32:cf:da:25:76:09:44:ef:5f:05:50:1b:20:9f:
71:23:82:71:16:da:11:ef:9b:c9:ed:c0:43:9a:50:
5f:1b:80:ef:aa:fc:d9:47:4d:f7:ac:9a:c5:33:67:
82:17:30:b8:da:65:aa:d8:31:70:b3:ce:8f:c2:dc:
80:b3:88:c0:af:78:26:e1:9d:fe:6c:9d:9b:d9:b1:
54:64:4e:22:fc:fe:49:9c:50:2d:92:5d:39:e0:42:
da:9f:b9:45:e6:6c:07:c7:a8:08:8e:73:7d:c9:cc:
58:68:42:cc:8a:dc:90:56:50:bc:58:b0:e1:93:d9:
b4:c8:18:8e:c0:08:85:d4:81:67:50:7f:4a:cf:f9:
eb:db:7b:75:62:96:ce:33:7a:37:d3:fe:af:b4:2e:
70:9d:4a:de:9b:ec:99:08:2c:67:67:bd:c6:20:8e:
79:af:26:0b:8b:68:b0:40:42:f5:de:8f:4b:96:7a:
62:b5:a3:82:b5:1b:d1:ce:76:d9:cc:b3:2c:ac:46:
f1:d3:0f:4b:9f:0d:e8:9c:70:25:b9:b1:98:9b:09:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:22:35:0C:EE:38:C5:4A:42:54:73:4E:FA:82:66:0E:65:7B:B8:3F
X509v3 Authority Key Identifier:
keyid:CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:99:40:22:28:fc:2e:ff:df:04:80:8e:48:72:68:da:71:cf:
27:3d:6a:6d:47:ee:ab:ac:46:25:e8:5c:51:9c:c9:12:07:9c:
98:f2:70:3a:ed:ee:7f:fe:7a:82:19:47:e2:08:1f:70:7f:78:
2e:26:05:f7:14:12:ce:5b:56:1a:f3:70:88:c4:31:74:fe:a9:
eb:3a:74:06:58:68:04:55:cc:c6:1f:19:3a:a5:ea:0e:07:a1:
d4:36:6d:7f:e0:09:80:37:90:ba:e0:d9:3e:bc:6c:4c:d2:e4:
82:97:b5:f4:50:2e:0b:33:a3:d8:20:d7:ab:57:43:c0:9c:45:
24:a0:5b:44:de:f8:d2:b7:48:0b:99:37:e0:06:7c:90:ad:34:
08:e5:70:ba:e0:9a:5e:6e:c5:a5:19:88:9a:10:c4:08:83:7a:
33:60:ed:1b:c1:0e:d4:c1:4a:fc:f0:f5:07:00:ad:b9:d5:ee:
eb:2c:8d:2d:bc:5b:6a:91:c7:6b:c6:00:b8:c8:65:b4:1a:d1:
bd:f4:5f:d6:eb:03:d2:65:98:b4:e3:6e:a9:ae:96:71:08:64:
47:a5:5b:12:df:91:80:b5:c9:a5:90:74:14:cd:2e:9f:7d:c2:
16:9a:09:ed:c2:81:f1:1b:49:88:7e:04:9f:73:91:0c:75:10:
93:4b:b6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:40 2026 by rpki-client