Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
File: ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft (raw, json)
Hash identifier: czN4hZiVRvb9yz058QGVGiuG9jI62A2v5nYRpx3GZtY=
Subject key identifier: F8:36:D3:FF:5A:9D:C3:BC:7D:83:FE:46:B4:7D:17:9F:1F:93:1B:9C
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Certificate issuer: /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial: 019D38D34BECBE202899BA731913DF7608C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
Manifest number: 13D3
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl (hash: qoqEd3xB5FSPPxSF/L2rP2W7LjXK9MTtTwNYHgh//Io=)
2: j7jUPHVWAdTQhKi59WB4Ng94oXI.roa (hash: 7naIK2I6whcQD7j7iach8+i3Y6ADAHh3rGPZHWfL1Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4b:ec:be:20:28:99:ba:73:19:13:df:76:08:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=f836d3ff5a9dc3bc7d83fe46b47d179f1f931b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:3f:f7:78:68:0f:73:0e:14:77:4e:73:be:
b1:64:ba:48:c9:9d:00:09:07:07:0b:93:f3:ea:4f:
0f:a7:87:94:e8:7d:39:05:d0:7f:d2:61:d3:af:f3:
23:58:64:a1:04:8e:0c:15:3c:1e:cd:ce:c7:18:39:
bd:9b:d2:67:63:d4:f9:52:16:63:36:05:f4:80:98:
a2:21:2f:be:2b:a2:d1:57:32:dc:5a:18:23:9e:18:
e7:ee:95:43:80:3a:4c:9d:6e:63:9e:c9:01:8c:b7:
63:a4:25:0e:53:2c:75:35:5d:78:8b:36:65:a4:17:
bd:6c:3b:5f:b0:b3:c5:da:f0:a3:6b:14:df:44:d0:
ba:05:09:26:f4:d3:2c:a6:02:87:33:9d:10:31:3b:
56:d2:01:21:34:da:5e:9d:70:e9:b1:7a:9a:df:8f:
d7:03:b7:5b:7d:90:39:86:0d:ca:4e:04:f3:9f:f7:
d5:c6:d9:75:ed:0c:1a:50:fb:2b:3c:55:5f:14:d8:
52:55:51:75:b2:2d:f5:ca:0e:ff:ff:7f:83:da:18:
48:f9:0f:d1:ad:2e:a8:3b:fc:c8:2d:76:61:62:be:
45:dd:92:ed:86:30:74:2b:5b:ec:28:d8:89:2b:a6:
4b:3e:4d:c3:13:62:e0:39:b1:4b:e2:23:6e:33:1d:
f4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:36:D3:FF:5A:9D:C3:BC:7D:83:FE:46:B4:7D:17:9F:1F:93:1B:9C
X509v3 Authority Key Identifier:
keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:56:13:2c:3c:bc:0a:a4:9c:13:2f:95:4b:1d:f4:0e:9e:14:
57:39:2c:fc:2e:90:2d:28:e6:a2:26:51:64:1b:9a:d8:8b:bc:
7d:d1:6b:49:7a:38:8a:1b:ba:fc:db:37:15:f5:c8:e4:84:fd:
fb:dc:b2:54:86:2a:77:fb:30:9f:01:2e:f6:68:a8:99:78:9d:
76:9d:0a:bb:58:af:b7:37:b3:b9:ad:bc:48:2d:ec:a9:5a:c9:
76:67:9f:c5:10:55:93:7b:fb:3b:57:a5:9e:cb:2b:16:3a:30:
83:75:fe:5b:2a:c6:35:06:d0:b7:34:f7:f0:6c:ee:07:81:25:
fe:b2:79:a8:5f:69:fd:72:f0:ae:a6:2a:df:1f:f0:01:1f:c8:
df:a6:c6:89:00:c4:69:35:b1:f1:a8:c1:6c:bf:b7:ea:cd:26:
36:d3:f9:4e:9c:a0:96:74:3e:bc:36:ad:74:6b:1e:08:ce:d7:
a5:ac:6a:5c:2d:bb:e7:46:a1:86:e2:68:37:8d:4f:b4:52:c3:
e5:ac:95:83:73:e6:77:d1:ea:c7:4e:f5:4d:4d:58:42:17:f1:
32:86:a4:e9:ec:1e:0c:78:41:81:91:f7:7e:90:80:a4:12:49:
62:0c:62:41:48:6f:e8:df:90:81:a9:8f:06:29:9e:59:bc:07:
b2:21:26:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:44 2026 by rpki-client