Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/98bdc4-e7ed-43fd-a246-9fb8cb4ef050/1/zGkWT1yFMjMb7y1CVFy3Jln7eg0.mft
File: zGkWT1yFMjMb7y1CVFy3Jln7eg0.mft (raw, json)
Hash identifier: n883v0JZqhmPbDcglIz2Y7QdpPucDyLpKjAuUIZ8ZkQ=
Subject key identifier: 61:7E:B6:4B:83:C6:C2:6A:45:AD:1E:95:38:31:03:4F:EE:29:53:04
Authority key identifier: CC:69:16:4F:5C:85:32:33:1B:EF:2D:42:54:5C:B7:26:59:FB:7A:0D
Certificate issuer: /CN=cc69164f5c8532331bef2d42545cb72659fb7a0d
Certificate serial: 019D38656CFC3A6DDB05F018CB73A9C1CD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGkWT1yFMjMb7y1CVFy3Jln7eg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/98bdc4-e7ed-43fd-a246-9fb8cb4ef050/1/zGkWT1yFMjMb7y1CVFy3Jln7eg0.mft
Manifest number: 66
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: zGkWT1yFMjMb7y1CVFy3Jln7eg0.crl (hash: 16yKH5Yuz2h2Rbv0KacrwIAclfHsb6uu8GqnNyPPbMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/98bdc4-e7ed-43fd-a246-9fb8cb4ef050/1/zGkWT1yFMjMb7y1CVFy3Jln7eg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/98bdc4-e7ed-43fd-a246-9fb8cb4ef050/1/zGkWT1yFMjMb7y1CVFy3Jln7eg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGkWT1yFMjMb7y1CVFy3Jln7eg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6c:fc:3a:6d:db:05:f0:18:cb:73:a9:c1:cd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc69164f5c8532331bef2d42545cb72659fb7a0d
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=617eb64b83c6c26a45ad1e953831034fee295304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:95:88:3c:41:d3:a4:d5:e3:0f:ee:2e:20:
df:56:39:3d:65:30:44:d0:8d:fb:11:41:75:ac:eb:
32:71:db:f5:0c:84:69:e4:db:9a:69:f7:44:89:f8:
cd:1f:31:be:f6:84:b1:26:30:e8:65:ca:b5:d0:8f:
18:e2:41:8f:c9:3a:f9:f3:4a:ec:6a:e8:04:f7:36:
e5:bf:48:d7:bc:0f:5a:42:53:be:61:78:ce:1d:46:
1e:10:ac:4a:3b:a4:36:f5:83:26:39:bb:23:63:2d:
9a:c9:15:97:2e:e7:d7:4d:db:ee:43:27:7b:07:2d:
ed:d3:d9:0f:79:ee:8e:b3:a1:f0:d4:e6:c4:67:58:
4a:93:6d:16:e9:e9:17:fd:00:2a:73:db:8a:4d:6a:
6a:46:04:28:fb:d8:bc:c6:12:06:b7:5c:c3:ae:f2:
e3:0b:42:c2:b4:44:a5:0f:9c:45:d4:a3:6e:26:55:
ee:ac:6b:68:34:41:c1:13:ea:c3:b3:bf:4c:bb:5d:
3e:e0:0c:55:e8:81:2a:37:7d:e7:56:0c:4f:d7:9c:
cf:5b:db:1b:35:d1:2d:ed:10:6c:15:f6:6d:45:69:
ac:df:c1:57:25:21:28:86:18:88:97:1b:ba:50:6c:
e8:48:7c:07:0f:aa:8b:9c:18:dd:b4:58:cc:d3:ec:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7E:B6:4B:83:C6:C2:6A:45:AD:1E:95:38:31:03:4F:EE:29:53:04
X509v3 Authority Key Identifier:
keyid:CC:69:16:4F:5C:85:32:33:1B:EF:2D:42:54:5C:B7:26:59:FB:7A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGkWT1yFMjMb7y1CVFy3Jln7eg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/98bdc4-e7ed-43fd-a246-9fb8cb4ef050/1/zGkWT1yFMjMb7y1CVFy3Jln7eg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/98bdc4-e7ed-43fd-a246-9fb8cb4ef050/1/zGkWT1yFMjMb7y1CVFy3Jln7eg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c8:1d:f0:3d:cf:f3:bf:aa:a8:be:fb:b7:17:aa:d1:e5:c0:
d9:1e:99:29:4d:4b:b7:d2:9e:07:71:a0:0c:d6:06:95:b6:6f:
81:57:25:7e:46:53:fb:e1:fe:6c:18:67:b3:38:d4:33:2e:ef:
e9:95:1c:f4:8f:a3:18:f0:b3:8d:2f:b0:8a:84:8b:ce:cd:7c:
bf:1c:34:1d:c0:21:0e:71:e8:d3:c1:fe:a6:82:55:3d:ca:36:
6d:93:fe:f6:91:23:6d:2d:44:de:81:09:49:cf:02:7b:7a:62:
83:72:a4:6e:f2:34:25:25:b0:03:aa:0f:e2:1d:67:ab:4b:cd:
fe:6d:46:82:e0:2c:1b:2c:c5:b0:5c:5a:1a:a2:90:e1:7d:68:
75:4e:ff:fb:93:67:35:ce:d1:28:f7:79:42:e6:3f:81:0b:c6:
de:43:6e:8b:be:80:f7:9d:9b:b5:9f:34:5b:fb:62:5c:9e:2f:
98:40:7f:3d:92:d9:38:11:c8:5c:bf:76:b0:7b:92:b4:69:0a:
fd:10:11:c8:5d:0f:04:53:07:e0:8e:80:64:09:4f:33:2b:42:
19:88:a6:30:3d:73:f0:ae:a9:97:2d:66:45:a9:c3:3c:94:c9:
a5:f1:b8:95:6c:50:86:d2:62:b4:65:22:08:e4:b2:1a:11:33:
c2:d3:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:42:15 2026 by rpki-client