Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier: a8yix8Ls296Tw3+NhT8yuGwP/dFbp+qokLWCLmu/X3c=
Subject key identifier: 2F:4F:1E:F6:3B:F1:AF:18:D1:8A:E8:9C:11:60:FA:9B:01:BA:B9:65
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer: /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial: 019D371B626759684FC260378C221ED49058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number: 1437
Signing time: Sun 29 Mar 2026 01:00:34 +0000
Manifest this update: Sun 29 Mar 2026 01:00:34 +0000
Manifest next update: Mon 30 Mar 2026 01:00:34 +0000
Files and hashes: 1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: 4dOBBeNl5PKfoqQscVpo/1uBT9n2rqQwzi3yIh+KFmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:62:67:59:68:4f:c2:60:37:8c:22:1e:d4:90:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
Validity
Not Before: Mar 29 01:00:34 2026 GMT
Not After : Mar 30 01:00:34 2026 GMT
Subject: CN=2f4f1ef63bf1af18d18ae89c1160fa9b01bab965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:51:00:2c:d5:ec:21:cc:6c:52:d1:85:91:
8a:73:2f:0c:4b:96:a4:8d:30:7e:85:18:b9:37:53:
79:31:cf:26:c9:b2:80:d6:96:ac:72:a6:0f:01:da:
18:57:23:d8:be:cb:57:21:e6:d7:54:af:2e:15:c8:
fd:3c:41:da:70:6a:38:0b:72:da:b6:29:e7:44:bd:
d2:47:8e:36:79:e6:38:b6:c9:ce:5b:83:d1:36:26:
aa:cd:ad:cc:bb:5c:d1:45:65:75:16:9f:74:f7:9a:
b8:c0:dd:ca:9f:06:35:c7:c5:ff:ff:84:32:b7:ed:
8e:c8:86:fb:42:68:03:0c:c7:2f:ce:61:51:02:4c:
6c:07:3c:f2:b0:9b:33:b6:f9:78:20:2d:d9:d6:6d:
ab:b9:99:77:90:52:5b:79:44:60:b1:84:5e:b8:a4:
2f:af:28:75:c4:8e:cd:4d:eb:b1:f7:3f:1e:29:4a:
d7:a1:06:fd:2b:2a:68:a0:21:db:b8:96:60:d5:f3:
39:40:10:ac:07:43:2e:60:d4:b5:5d:01:0c:4d:02:
76:ef:a8:c1:90:81:cf:d1:b2:1d:c0:43:6a:cd:e1:
43:49:b5:e3:c1:d6:c1:f9:3c:8c:f0:b1:9b:1c:a9:
61:02:e9:75:27:93:14:e8:df:ec:c1:3f:ce:d2:86:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4F:1E:F6:3B:F1:AF:18:D1:8A:E8:9C:11:60:FA:9B:01:BA:B9:65
X509v3 Authority Key Identifier:
keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d9:6f:8b:c2:de:ce:d4:33:ef:81:59:96:b1:84:33:55:02:
54:1b:c1:76:f3:78:e3:59:1b:44:35:8f:a8:b2:8c:4a:db:58:
17:8d:23:75:7f:f1:10:3f:1c:43:db:c9:e8:ac:ad:95:51:bb:
f5:2b:d6:d6:c1:e8:41:ca:11:a5:17:07:2a:59:a2:1c:05:aa:
63:16:32:b9:d5:f8:83:7f:2a:21:c8:ac:26:7f:6e:4f:43:c4:
c9:88:3f:8c:9c:fe:8c:03:23:bb:93:88:3f:41:fe:53:f6:a7:
da:80:0c:0d:7b:2a:55:b5:61:ab:de:27:26:18:15:80:de:0d:
3d:d0:2c:aa:a7:d1:fd:fc:95:68:ee:bc:bc:6d:8b:80:94:4b:
63:47:92:90:04:25:7c:9b:41:75:5c:35:66:78:1b:a7:b2:b1:
a0:20:39:ef:8f:f5:49:22:a2:f8:02:c4:05:f7:09:6a:b8:f7:
f5:50:c1:2b:6e:23:43:dd:05:88:32:14:7a:00:42:b3:0d:b6:
4e:41:75:24:98:6c:17:8b:10:54:aa:24:e5:cd:31:98:fe:1d:
1d:a8:66:64:d8:ed:53:7b:be:9a:ae:b9:b0:e1:de:c3:93:21:
04:be:af:3d:7b:c1:57:71:89:84:9a:0e:92:2e:68:57:e2:d1:
e6:88:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:37 2026 by rpki-client