Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
File: ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft (raw, json)
Hash identifier: j9o54oYdm+hW1V/YaKQc30rxdQMwrq349BcNFWBE+I0=
Subject key identifier: 1F:DC:B7:DA:9D:15:48:1E:EE:B7:E8:0B:1D:DB:29:81:CD:AC:D6:76
Authority key identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
Certificate issuer: /CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Certificate serial: 019D38D319BB5790E726BFDD08F7E694B603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
Manifest number: 1204
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl (hash: x23nYA65Nkb2pZR5gzIEIUMaX16whWcV1YSar4Bq5Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:19:bb:57:90:e7:26:bf:dd:08:f7:e6:94:b6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=1fdcb7da9d15481eeeb7e80b1ddb2981cdacd676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cd:49:aa:e2:1a:eb:a9:63:4e:c0:8e:6e:31:
9d:82:45:34:1e:2b:d2:e2:98:0d:6f:a6:c6:ef:47:
d2:b2:a9:8b:19:3c:56:bd:ae:38:ee:d5:5c:e6:2f:
28:3f:91:1b:91:48:fd:a0:b6:0e:f0:14:7a:5a:51:
6e:d4:0e:22:f6:09:96:55:0b:34:50:46:39:9b:83:
05:ed:f2:b1:f5:fb:56:08:3c:e9:db:c2:80:2a:0c:
9e:3a:be:d8:fb:72:dc:0e:f0:4d:8c:9a:dd:75:8b:
0d:c5:19:56:f2:2c:b4:a4:68:94:30:03:48:7f:69:
81:a0:f0:31:2c:c1:d2:3a:bb:ae:a1:a3:8d:92:21:
d7:2f:13:c3:a9:62:aa:46:a9:e3:e5:90:92:3f:33:
53:93:7b:2e:21:fc:80:47:7c:50:9d:44:49:54:3b:
99:0f:26:bb:c8:30:8a:c4:a7:ff:36:ec:fc:8b:d8:
c4:f0:a6:83:ae:b6:e5:8e:11:a2:52:9d:5f:0e:6c:
ac:56:6a:2e:a6:ac:18:d2:37:a6:26:1b:73:47:8e:
f2:37:80:3a:e8:20:e4:b2:72:a6:b3:32:0d:2f:9e:
2a:80:74:17:43:f6:65:3c:9b:8c:e2:9d:8d:7e:03:
c0:e6:41:e5:e2:8f:41:b9:ab:12:18:07:b2:6f:34:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DC:B7:DA:9D:15:48:1E:EE:B7:E8:0B:1D:DB:29:81:CD:AC:D6:76
X509v3 Authority Key Identifier:
keyid:65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9f:1a:d7:9a:88:f2:bb:04:92:72:ae:b2:44:a9:fe:57:64:
b1:29:34:29:7b:02:0a:58:a6:5b:00:bc:f4:e5:19:7f:fd:5d:
9f:b2:c3:ea:26:48:e8:43:f8:9d:db:e8:44:d5:dd:0f:19:e5:
88:7d:45:ac:01:26:89:3f:d4:09:c3:34:10:f2:d9:da:db:26:
4e:f2:9e:d0:a4:0a:72:a1:03:14:c6:cd:ae:b1:ae:87:73:d8:
ff:76:c3:b2:17:a5:10:af:a2:34:95:77:51:71:30:6a:03:2a:
e9:bb:7f:c9:2b:75:62:89:d2:94:53:ac:aa:7a:ff:fb:25:59:
f1:5b:1e:1c:b0:85:c3:9c:ca:d4:2e:37:7d:e4:3f:5c:59:3c:
ae:49:d4:a8:ea:55:fe:50:50:da:0a:54:fc:73:71:cd:d2:8c:
dc:8d:ba:29:65:9c:af:5d:e1:30:83:db:5c:f5:dc:5a:69:9e:
4a:84:bc:f1:41:a0:b9:53:82:b5:03:98:9f:2a:94:d6:54:9d:
e7:f7:e6:f6:45:e3:de:84:00:d1:e0:cb:39:cd:40:e7:82:4f:
79:09:9b:11:4e:d1:60:de:46:38:cc:a0:a4:09:11:12:17:d3:
48:44:c3:cb:6f:96:d5:2a:34:b3:aa:49:d2:eb:e6:be:c4:f8:
57:bd:bc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:15 2026 by rpki-client