Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
File: zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft (raw, json)
Hash identifier: LZnSUqW6gYgQ4GLD6mgdGTW9MYlHUPXHSKFPnal9xsI=
Subject key identifier: D8:1B:1A:3C:88:86:82:45:84:E9:3D:76:D3:0E:E4:8D:D6:AC:97:3B
Authority key identifier: CD:A0:54:47:4F:AF:D9:0B:0E:A4:7C:55:76:5B:BE:6F:37:63:75:31
Certificate issuer: /CN=cda054474fafd90b0ea47c55765bbe6f37637531
Certificate serial: 019D39E5FF0F62E6B2EAB99D38F91866FBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
Manifest number: 0344
Signing time: Sun 29 Mar 2026 14:01:07 +0000
Manifest this update: Sun 29 Mar 2026 14:01:07 +0000
Manifest next update: Mon 30 Mar 2026 14:01:07 +0000
Files and hashes: 1: zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl (hash: NbO9wvqWAuo/nAZ2M8zIot+F27vcCE2m/GiGL8mg7dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:ff:0f:62:e6:b2:ea:b9:9d:38:f9:18:66:fb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda054474fafd90b0ea47c55765bbe6f37637531
Validity
Not Before: Mar 29 14:01:07 2026 GMT
Not After : Mar 30 14:01:07 2026 GMT
Subject: CN=d81b1a3c8886824584e93d76d30ee48dd6ac973b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:2d:c8:c4:49:19:92:42:f9:de:e5:3f:eb:
86:c1:d1:eb:b0:6b:7f:2f:59:7a:89:9d:9f:d4:37:
f1:20:e2:1e:f6:d6:84:22:cf:41:7f:b9:7e:fa:02:
7a:a1:31:0f:61:5a:c4:a0:c4:b7:a8:4b:08:cf:04:
d4:3e:de:26:f6:d4:fd:58:22:64:3a:79:96:21:14:
30:cc:84:05:10:8a:fc:4d:22:2a:fc:06:ed:e9:ff:
90:0d:38:04:48:10:f6:03:45:9c:b1:0c:a3:c1:6d:
dd:bb:cc:8a:3c:1a:56:25:4f:ac:ef:ba:7f:64:1d:
68:0f:57:da:9f:c3:d9:7c:89:97:92:b9:ab:0b:1a:
ce:97:42:be:f0:c2:63:b0:b0:18:6c:f1:e2:0e:97:
d5:bb:c2:1a:c2:a0:87:01:c0:90:33:d0:6f:cf:25:
82:31:20:2e:1f:24:1b:dc:39:9c:07:0e:9c:6b:c5:
43:3a:6d:29:cd:03:06:4e:02:60:cd:66:84:82:8d:
33:dd:e6:ff:93:13:2e:10:b1:b4:d4:83:98:6e:da:
22:6c:0c:e4:a3:1c:03:7f:f1:cb:51:b5:bf:1a:3d:
92:a4:5c:48:22:c3:3f:78:aa:82:ba:16:60:54:be:
ff:55:bf:2d:aa:37:ac:45:9e:46:39:2e:52:04:02:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1B:1A:3C:88:86:82:45:84:E9:3D:76:D3:0E:E4:8D:D6:AC:97:3B
X509v3 Authority Key Identifier:
keyid:CD:A0:54:47:4F:AF:D9:0B:0E:A4:7C:55:76:5B:BE:6F:37:63:75:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaBUR0-v2QsOpHxVdlu-bzdjdTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bac904-2802-436e-ab40-8137c5299aee/1/zaBUR0-v2QsOpHxVdlu-bzdjdTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a6:8a:90:61:8e:c1:62:bf:e1:e2:cc:fd:52:ec:b9:b1:8f:
bd:a5:07:b0:5b:26:57:5d:b7:39:fc:c4:5a:d0:37:b6:4d:10:
f6:a4:c5:36:1a:95:3a:95:92:99:d7:70:d9:62:4b:3c:0c:1e:
7b:ff:41:f7:67:40:c3:09:19:5b:fc:4b:db:47:52:aa:20:66:
b6:b0:e1:17:7b:5b:3b:6e:c2:98:c7:ec:59:92:ec:01:6b:cf:
37:94:fc:08:2b:4e:29:90:fd:4c:15:ab:14:75:86:7e:7b:b7:
18:69:48:1a:84:a5:25:3b:c4:cb:4e:de:6f:1c:e4:ee:5e:9e:
c6:85:36:de:63:62:2b:bc:4e:51:ec:49:46:c6:08:51:ba:66:
d5:3c:3f:c4:83:ff:2a:bc:c2:2f:f7:8d:f6:ac:94:e4:ab:a8:
9c:09:e6:41:3b:7f:dd:73:6e:2c:3d:f1:3b:88:8f:f1:fd:c2:
76:53:64:8f:49:03:1f:61:d1:b9:e4:cf:93:52:1a:a9:6c:94:
cb:25:72:62:1b:5b:e7:a9:70:46:58:82:2b:1a:4c:d9:cd:3f:
53:72:33:de:ef:8a:5e:d4:39:10:02:15:26:5a:a2:9b:3a:b5:
81:2a:b9:6c:95:99:1a:9b:aa:76:7c:70:7e:ba:db:01:bf:a4:
b8:50:ed:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:11 2026 by rpki-client