Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
File: ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft (raw, json)
Hash identifier: dbO9F8KlHIDuyVycK0SqwDu2a8lImpE3MQL1dAZi+TI=
Subject key identifier: 33:AB:4D:E9:96:5E:A6:00:63:22:82:29:6F:9B:12:E6:9F:9E:C1:9E
Authority key identifier: 65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA
Certificate issuer: /CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
Certificate serial: 019D38D39370350FC535E26D49CBEB204C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
Manifest number: 08
Signing time: Sun 29 Mar 2026 09:01:23 +0000
Manifest this update: Sun 29 Mar 2026 09:01:23 +0000
Manifest next update: Mon 30 Mar 2026 09:01:23 +0000
Files and hashes: 1: ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl (hash: HF2XUiaMed6mTQ2EdWT3yxCWSiyMsJcsoSIIbBBHwKM=)
2: dy0uGDpljv7j5vN1k0xUoGoU7is.asa (hash: MtMPaeqf6Ehy28FIGVz134V+Wh0h0IlU4nHF4tldJDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:93:70:35:0f:c5:35:e2:6d:49:cb:eb:20:4c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
Validity
Not Before: Mar 29 09:01:23 2026 GMT
Not After : Mar 30 09:01:23 2026 GMT
Subject: CN=33ab4de9965ea600632282296f9b12e69f9ec19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:a1:09:ad:8f:d6:42:84:87:11:f4:6c:56:
e5:ef:6f:95:7c:08:47:0c:53:48:95:43:7e:a9:c2:
0d:7b:43:1e:c1:db:4f:08:e1:7b:66:62:bc:67:29:
32:ed:9c:8c:ab:40:c7:14:1c:e4:43:89:ef:00:61:
f2:f3:68:10:bc:87:9a:8b:5f:87:eb:77:30:14:f9:
dc:3c:80:5b:c2:02:fd:a5:1b:e7:45:d1:c8:a8:28:
1e:3a:23:bd:9b:25:d3:b2:c1:fa:e4:6f:3e:84:90:
99:4b:5e:69:ff:65:68:84:aa:9c:66:ae:26:2a:72:
7f:b6:53:76:54:66:6a:7c:0d:b3:84:b5:1f:70:13:
ff:20:41:be:6c:50:20:ae:17:1c:53:e2:0e:7c:05:
b2:87:5d:64:ee:c0:1f:f5:10:7c:86:28:21:49:59:
26:e8:49:fd:70:67:bc:be:f0:44:1a:8e:54:23:e7:
50:43:d6:88:98:0d:8a:10:65:de:be:e2:e9:de:ac:
7c:5e:2f:60:06:a8:ec:e9:dd:06:32:42:cd:d3:42:
81:da:ca:30:28:73:30:6c:db:dc:7b:1b:64:45:dd:
5d:00:92:13:64:f5:1b:95:ec:db:eb:80:34:7b:cc:
a9:b1:d4:3b:34:05:15:7d:09:41:a9:a0:66:2c:1b:
4b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AB:4D:E9:96:5E:A6:00:63:22:82:29:6F:9B:12:E6:9F:9E:C1:9E
X509v3 Authority Key Identifier:
keyid:65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:89:cf:c2:91:f9:e3:4b:eb:b2:7f:72:92:61:08:1b:72:bf:
0d:b1:04:ca:80:66:6c:7f:a9:43:b5:91:fc:0c:92:81:39:25:
8d:9d:5c:ff:1d:50:ff:6a:d9:6d:2c:b1:c0:b0:95:4c:70:9e:
be:c5:d3:74:e9:03:6e:5a:2b:9c:bc:21:4f:e8:17:49:31:90:
71:64:22:b7:35:6e:75:27:48:b1:32:d7:e6:c3:f9:6c:4c:8b:
84:f8:99:8d:a0:ec:68:01:1f:da:3f:51:d0:9f:1b:5c:79:fa:
6f:f8:df:bd:d7:1c:ad:a6:d1:16:5f:ea:b5:1f:81:82:11:9c:
bc:4b:30:6f:b7:60:f4:9a:b3:10:38:84:dc:f4:8e:68:3e:12:
41:e0:b2:97:3e:f9:ce:75:c3:c0:b5:40:d7:d8:84:63:f1:d8:
1b:b2:85:0f:8e:0d:33:1f:f9:4d:3e:d7:96:bf:88:03:8c:7f:
af:c6:fb:b6:4a:df:aa:4f:e2:5d:c2:03:c8:fc:fc:f4:21:d2:
0c:b0:bb:3a:2b:4c:3e:b6:0d:2f:3d:e2:66:0f:3e:f8:70:e7:
3c:7a:cd:ac:ce:8c:ab:94:a2:d1:4d:ba:af:f1:87:34:06:cb:
70:d7:64:e2:f3:cb:e3:50:56:c3:70:cc:fa:5f:49:64:bb:65:
e5:5e:c7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:43 2026 by rpki-client