Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json)
Hash identifier: s1I+B7HM22DmGHJaMsJ9hxwiwTD9WvWvNrb26sGiorQ=
Subject key identifier: E0:A4:A9:48:E1:93:E2:0F:2C:0C:9E:0E:05:2C:7A:43:0E:50:76:49
Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Certificate serial: 019D37C0A9939797FAC68C5F57CBAA666663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
Manifest number: 0CDC
Signing time: Sun 29 Mar 2026 04:01:06 +0000
Manifest this update: Sun 29 Mar 2026 04:01:06 +0000
Manifest next update: Mon 30 Mar 2026 04:01:06 +0000
Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: NADZzf8LfiOCbuwuU60RwvNacHeU3aWDZi7YbqUruV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:a9:93:97:97:fa:c6:8c:5f:57:cb:aa:66:66:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Validity
Not Before: Mar 29 04:01:06 2026 GMT
Not After : Mar 30 04:01:06 2026 GMT
Subject: CN=e0a4a948e193e20f2c0c9e0e052c7a430e507649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:30:ce:3d:1f:ff:a6:7c:4f:1a:04:97:13:
bb:68:03:88:2d:c3:13:75:f4:e8:4e:61:eb:7b:77:
09:a6:41:16:3d:0a:a8:0f:e7:01:0d:8a:f6:29:58:
09:e6:2b:d7:84:96:02:99:71:5b:b8:aa:86:10:93:
ba:60:ca:b5:be:c6:b9:2a:f7:2a:bc:71:72:ed:70:
57:39:a6:fa:40:35:e4:0f:bf:b5:d7:c1:8e:05:57:
9b:8f:28:64:ea:ed:c7:a0:e5:ef:ab:51:aa:5e:3e:
9c:fa:27:4c:0b:4d:bf:81:ba:83:47:03:c1:32:82:
12:73:4c:e3:74:22:3c:81:3b:bb:6c:ac:6d:f4:ac:
aa:0d:8e:29:6e:62:df:ae:5a:71:ab:88:b7:48:3b:
b3:c9:f2:d9:1f:9d:c5:c9:83:c0:64:47:0f:23:90:
6d:4a:ec:3b:89:06:2d:aa:66:83:38:ed:15:41:42:
d4:73:8d:b7:7b:0d:99:19:c2:39:dc:35:dc:d6:9a:
a0:91:dd:bd:1a:81:7d:f8:cf:90:1f:0d:ca:e8:73:
3f:d8:b0:3d:c6:c2:b3:eb:57:7f:fe:ba:e9:b7:dc:
9a:3e:38:12:69:2c:79:85:65:a8:61:92:68:f4:e1:
67:05:e6:87:43:50:60:dd:fd:41:b5:7a:da:82:2d:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A4:A9:48:E1:93:E2:0F:2C:0C:9E:0E:05:2C:7A:43:0E:50:76:49
X509v3 Authority Key Identifier:
keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:56:e6:14:b5:d9:3b:7f:1f:7e:01:a8:d0:aa:e3:27:31:4a:
b7:8e:0b:dd:d4:d9:c1:b8:4c:f6:9b:8e:89:84:da:8e:10:a4:
83:fb:c0:d4:c1:6d:bc:ea:9f:78:df:61:20:38:39:48:ac:54:
ab:d3:8d:5d:32:27:65:9f:e3:64:d0:70:eb:82:de:b3:c2:e2:
6b:b1:9a:d7:09:86:51:1b:07:74:8f:a1:7b:cd:59:26:1d:9e:
93:45:14:fa:38:4f:f7:11:3d:aa:3b:3a:b6:e7:21:5d:a9:2c:
f2:bc:dc:46:14:31:d5:96:fb:bf:3a:cf:3c:0e:da:e5:68:c4:
a5:24:29:35:58:1f:cd:8c:84:e2:be:82:ba:b3:4f:02:75:a7:
20:88:ad:19:ed:84:7f:63:38:43:b0:7a:39:57:71:a4:17:f3:
6f:0c:0c:5d:46:75:51:71:9f:b1:38:00:c3:17:88:bb:1b:41:
b9:d8:99:27:c0:ac:f7:d8:4a:a9:63:c6:34:9f:ab:2d:c9:8d:
2b:a4:6d:17:bb:2a:4f:3b:90:68:bb:6e:14:92:4a:ba:a5:39:
8c:41:d5:8e:6d:76:3a:65:55:af:24:cf:10:6a:e9:63:54:ce:
1c:cc:70:17:b9:68:93:12:80:d3:da:e1:87:31:ce:5e:4a:d6:
f1:4f:b9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:34 2026 by rpki-client