Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json)
Hash identifier: QKpm20TkzkjiD3avzIX1fuuNjs1fE1JKaQ90C75hgp8=
Subject key identifier: 6A:CC:1F:0D:A2:2C:D9:EF:DB:77:30:E0:0A:12:56:70:1B:13:01:58
Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851
Certificate serial: 019D382E2A7AC21B4D5A63AB940A6EB214A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 06:00:42 +0000
Manifest this update: Sun 29 Mar 2026 06:00:42 +0000
Manifest next update: Mon 30 Mar 2026 06:00:42 +0000
Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: k2D6+e+JlTnyFZuFepR9+IeSqHMs7K6VPm/bOmJVC/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2a:7a:c2:1b:4d:5a:63:ab:94:0a:6e:b2:14:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851
Validity
Not Before: Mar 29 06:00:42 2026 GMT
Not After : Mar 30 06:00:42 2026 GMT
Subject: CN=6acc1f0da22cd9efdb7730e00a1256701b130158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:c5:e0:c8:3e:37:ab:6b:e7:e6:7a:2b:06:
9f:a0:d7:9f:95:c9:05:7b:db:1c:9c:52:92:e4:16:
07:5a:ae:12:07:15:6d:95:54:1e:94:0e:53:11:32:
87:ef:fe:6e:f1:3e:b4:12:82:08:f3:9c:c1:11:13:
ab:3d:3c:45:78:49:11:76:00:a9:a2:bd:b6:33:a8:
91:cb:45:80:df:ef:4e:3c:91:c6:46:c1:9b:fe:95:
3d:99:da:cc:44:8e:f4:f9:9a:50:ae:c3:95:16:60:
72:dc:64:42:ff:fd:8a:b4:ce:b9:a3:05:e6:6c:4f:
60:93:80:d9:fd:27:70:01:42:7d:b4:f9:d6:f4:1c:
f3:01:08:23:19:ae:54:01:d4:f0:2a:25:3c:77:c5:
6e:7e:0d:93:a7:09:50:f6:48:87:a7:6d:2d:9d:d0:
20:a4:7a:5c:9c:26:83:5d:09:6b:50:f7:c2:a6:ab:
01:91:21:95:d3:f0:f1:1c:04:aa:c1:ac:c3:f7:81:
95:f2:b0:69:b7:a3:13:cc:d9:6a:b0:b9:18:dd:3e:
ce:20:6a:b2:bc:3b:bb:9d:41:20:ad:16:98:17:be:
ce:e5:2e:da:78:85:df:83:5c:c5:79:f7:72:65:de:
9e:05:5f:4d:13:94:29:d3:83:4d:66:fd:cd:06:a8:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CC:1F:0D:A2:2C:D9:EF:DB:77:30:E0:0A:12:56:70:1B:13:01:58
X509v3 Authority Key Identifier:
keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:26:7b:6e:25:b0:98:20:eb:fa:40:f1:5e:54:99:36:af:7d:
06:72:03:6e:e5:48:d8:31:5f:7f:eb:60:45:dd:30:3f:74:0a:
62:2a:55:27:54:91:2e:90:7e:40:c2:c7:75:60:82:14:69:70:
ca:f9:52:fb:2d:dc:6d:09:d4:9a:24:cc:fa:62:f7:74:8b:a0:
a0:1a:00:9a:05:d1:8f:65:b7:08:eb:9f:de:2a:29:ad:82:55:
a2:6d:b9:bb:df:be:28:60:30:4c:b4:fb:39:cf:a4:4f:7b:d7:
8b:20:b5:df:64:aa:8d:b1:c9:da:22:63:30:54:e0:84:31:e9:
68:77:d1:90:5b:e2:b6:73:4b:a2:4e:26:73:3c:19:ef:e0:07:
4d:ea:1c:07:9a:ff:43:b4:bf:05:04:c8:2b:6e:fe:69:e9:1b:
65:bb:18:a2:ac:40:cc:fd:52:7b:3b:c4:db:ea:84:6a:c2:c1:
a1:66:1c:10:dd:c5:c3:67:82:23:a8:ec:34:83:dc:c0:6c:9c:
b0:d0:fd:39:79:19:60:2e:00:7c:5e:88:82:57:3c:ef:d8:93:
af:e0:38:cb:fa:06:4e:58:54:49:97:61:a0:74:0b:c1:9c:2e:
c8:03:6b:c3:f3:7c:e4:9b:84:0c:f6:92:5a:7a:e6:13:a7:7f:
0e:d2:76:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:16 2026 by rpki-client