Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json)
Hash identifier: rXBY37W9P90YoxBzhFK35PLg2WCHlQ/C/zTgTrWlJEQ=
Subject key identifier: EB:47:58:A7:35:41:F4:7E:72:EE:07:6D:D7:9B:77:74:EC:31:A6:F1
Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Certificate issuer: /CN=6414775fdaeec7b0d5c927083988d555727c21b5
Certificate serial: 019D386577807125CE10C2FC7588C3F0DD59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
Manifest number: 0A3C
Signing time: Sun 29 Mar 2026 07:01:06 +0000
Manifest this update: Sun 29 Mar 2026 07:01:06 +0000
Manifest next update: Mon 30 Mar 2026 07:01:06 +0000
Files and hashes: 1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: q6+3iDxe/RVAL/DvbQBUSkHzajd09aA36NzasCxinfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:77:80:71:25:ce:10:c2:fc:75:88:c3:f0:dd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5
Validity
Not Before: Mar 29 07:01:06 2026 GMT
Not After : Mar 30 07:01:06 2026 GMT
Subject: CN=eb4758a73541f47e72ee076dd79b7774ec31a6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:9d:5c:b6:e0:3e:f6:00:cd:74:99:b8:7b:
3c:4e:88:94:a6:3a:a9:3b:23:bb:47:a1:fe:a8:7f:
ae:4e:f5:c0:d5:ad:30:3d:25:99:9a:f5:7d:2e:e9:
a7:91:4f:14:8b:e7:fd:13:82:0e:6a:f6:4f:0b:6c:
3c:f6:15:fb:ff:b9:7e:ed:e3:dc:8a:e1:40:7c:87:
8e:d2:b7:47:c1:2e:48:8d:43:ac:81:dd:6e:c3:64:
d0:61:38:0f:23:c3:ad:51:c3:ee:7e:97:f2:47:3c:
fe:2c:2e:49:1c:a6:33:64:26:20:6d:55:5c:67:6d:
44:d3:3e:f7:80:7b:cb:2c:c7:a3:8f:16:11:02:1d:
ad:5c:e4:f8:8c:5e:3b:af:65:ba:cd:0c:0a:31:cd:
b3:ec:04:20:4b:a0:ed:d8:d7:32:c1:bd:f1:39:3b:
3d:3b:05:4b:c7:55:ac:7b:e6:85:af:e2:63:20:70:
73:fa:6e:b5:14:07:2d:a6:07:e6:e8:5c:fa:42:07:
0d:7c:c1:67:1f:3e:4c:a7:76:29:e3:59:d8:5d:34:
8e:21:3a:26:22:e8:99:dd:99:4e:ec:e7:98:95:9c:
5c:03:90:fb:60:fb:41:e5:01:83:2b:fb:13:ab:59:
e4:34:da:34:18:08:d3:a3:60:20:9a:23:6b:23:86:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:47:58:A7:35:41:F4:7E:72:EE:07:6D:D7:9B:77:74:EC:31:A6:F1
X509v3 Authority Key Identifier:
keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a6:ed:3f:02:8e:8a:50:67:51:ee:6c:d3:d2:70:7d:95:dd:
65:b9:50:d7:7a:6e:ad:21:43:12:c3:6c:71:ce:81:fe:1a:48:
42:90:95:47:8c:cd:a7:80:61:47:c7:6b:31:ed:b7:e1:08:ac:
b4:19:7e:ef:79:b8:a0:1e:10:84:38:fa:7e:4d:78:94:87:f5:
7e:41:79:de:6b:3d:fd:0a:32:42:9d:54:69:85:6b:a6:e8:98:
b0:19:af:17:e8:46:03:0a:30:c6:60:f9:5a:a6:97:36:4d:d9:
e1:f0:12:b9:5e:c8:3d:04:ef:27:de:9f:c2:18:57:56:3a:9a:
67:b7:45:d3:55:5f:b4:a0:37:a4:0a:b2:a5:91:aa:09:92:53:
05:e2:74:fb:d5:fd:e2:42:40:ef:a1:97:8d:bf:a5:e8:bb:da:
9f:40:80:f1:73:93:31:69:72:1c:13:66:3b:53:64:9e:31:0e:
1d:5e:e0:32:8b:0a:48:9e:1b:54:83:f7:7a:e2:a7:d2:73:6b:
e6:17:03:cb:ca:06:2e:11:c3:d1:af:0a:3b:b8:0b:9c:78:73:
d8:36:de:d5:c0:56:b4:d7:71:52:84:2d:46:7f:cd:8b:5d:4e:
60:b6:e4:3d:f0:b2:22:84:88:2c:59:ca:3b:b9:b7:56:92:68:
dd:48:66:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:26 2026 by rpki-client