Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json)
Hash identifier: wTRyVQQTLhG1rq+8+vt9CoObyb54cPjiIoKc1cYgjHg=
Subject key identifier: 52:CD:8A:E5:83:F8:21:53:34:85:01:68:0B:3A:3A:5F:E5:E5:14:F6
Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Certificate serial: 019D371BCE72E16BE46896645D42C234FD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
Manifest number: 1363
Signing time: Sun 29 Mar 2026 01:01:02 +0000
Manifest this update: Sun 29 Mar 2026 01:01:02 +0000
Manifest next update: Mon 30 Mar 2026 01:01:02 +0000
Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: kBpzEOhmysSPYSARV5cSFCRyRmw1lJdAHADlcwBwBMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ce:72:e1:6b:e4:68:96:64:5d:42:c2:34:fd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Validity
Not Before: Mar 29 01:01:02 2026 GMT
Not After : Mar 30 01:01:02 2026 GMT
Subject: CN=52cd8ae583f82153348501680b3a3a5fe5e514f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ef:db:13:1e:20:73:dd:85:92:5c:27:83:ff:
c0:77:eb:af:1f:36:90:8d:e4:37:2b:90:b8:8b:41:
b9:ea:a2:2d:fd:04:1f:df:6e:b4:98:00:8d:ab:6d:
cc:8e:4e:1c:87:5a:40:b4:83:c8:0b:42:a5:5b:30:
eb:da:f5:ae:10:f7:83:49:d5:3f:fd:f4:2a:52:5b:
38:06:dc:76:9a:8f:43:0a:d4:2c:28:93:c0:95:c7:
09:83:44:78:ca:fd:d9:b0:76:42:04:90:21:60:70:
4c:a4:c5:ee:bd:15:f3:43:95:d6:9a:56:fd:2c:05:
3d:8e:5d:ba:c5:a6:b0:9b:69:0f:2c:08:32:d0:5b:
03:21:56:d8:64:4e:a2:b2:1d:b8:cf:d5:94:83:38:
17:9e:c1:7b:76:ea:7b:df:90:76:55:25:66:16:3b:
d9:49:3c:9d:eb:4c:34:74:2d:7e:49:41:89:5f:f7:
71:05:94:6e:2d:aa:60:62:5b:b9:19:29:a1:09:02:
81:87:6c:9b:37:cc:0f:4a:1e:34:f7:08:50:7d:3f:
c4:ea:8d:8f:08:06:b7:02:05:c6:ef:e4:b1:48:8f:
af:78:12:eb:56:19:21:a1:4d:e7:1e:e0:04:be:14:
d9:e5:fe:c6:71:84:1d:23:cf:a2:30:d3:db:c7:31:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CD:8A:E5:83:F8:21:53:34:85:01:68:0B:3A:3A:5F:E5:E5:14:F6
X509v3 Authority Key Identifier:
keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:9d:fc:d7:48:83:63:d9:13:b4:16:b9:f5:d9:09:a4:de:ca:
f4:24:9a:f3:fb:d9:69:23:5a:48:79:71:8d:7c:bd:02:13:b0:
6a:c7:87:b5:ff:90:50:0b:a5:a2:ba:48:f6:10:69:cf:28:e1:
d7:0a:9a:13:8e:45:a3:82:f8:5c:ad:1a:12:67:e4:ed:bc:c7:
29:4e:1d:7e:ad:e9:27:00:76:1b:d1:e2:e1:68:27:df:ca:c9:
c2:7a:fe:04:af:ba:77:4f:8f:65:ef:75:1a:fb:cd:4d:60:d7:
58:7b:c2:00:ca:da:ca:f3:7a:3e:67:85:34:1e:16:42:f6:47:
b5:e3:03:42:0a:8e:08:7f:e9:fa:df:43:5a:eb:23:88:10:0a:
20:28:1e:0b:23:fd:b9:70:2e:e4:2a:fb:7f:dc:ba:3d:c9:7d:
52:0c:88:62:48:e1:23:bb:94:f0:a3:bc:d6:25:19:69:05:8c:
44:fd:ce:e6:71:91:08:a5:ff:73:fe:1e:ef:3a:fc:bf:d2:85:
d9:9f:32:ad:96:af:3e:37:96:23:52:cd:6e:2d:f9:5a:60:8b:
84:09:33:41:39:65:4e:ee:4f:ff:8a:ad:13:ac:ac:a6:6f:6a:
57:30:cf:25:93:ea:6d:29:3d:cc:dc:cf:f1:00:1b:c8:11:e1:
55:42:b5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:28 2026 by rpki-client