Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: MUo7iqx+mlX9OcHszwMldfKRyPEKPqz/3pdH5vabCvI=
Subject key identifier: A1:10:20:50:26:1B:74:4F:B9:4C:F5:65:07:2F:C4:ED:F0:32:E9:3B
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 019D3752D32A7D2333104B7C88EB052B514F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0FD1
Signing time: Sun 29 Mar 2026 02:01:07 +0000
Manifest this update: Sun 29 Mar 2026 02:01:07 +0000
Manifest next update: Mon 30 Mar 2026 02:01:07 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: DXUJusFPc3iPonOZ0KCYHx/+SlcqTqf59gTwdI7+TuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d3:2a:7d:23:33:10:4b:7c:88:eb:05:2b:51:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Mar 29 02:01:07 2026 GMT
Not After : Mar 30 02:01:07 2026 GMT
Subject: CN=a1102050261b744fb94cf565072fc4edf032e93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:3a:0b:00:0f:18:12:f8:73:d8:8a:1a:d2:
55:08:94:ee:04:ac:a0:2d:ba:85:97:df:15:45:ec:
2e:1c:a9:84:6a:e1:e0:b6:5a:46:37:8e:eb:f6:ed:
4f:25:d8:50:b3:94:80:c9:bf:ec:25:57:d9:72:6f:
38:a5:63:8d:31:bd:d9:fd:8a:fe:29:7e:4c:ad:51:
6f:7b:9c:6e:05:5c:ee:93:b7:3e:af:d4:98:03:8c:
78:ee:2e:54:9a:77:22:84:45:ad:99:92:e9:55:7a:
b6:1b:51:36:f1:68:59:ee:68:62:d3:85:94:42:5d:
bd:d7:1d:ec:5f:50:0a:8d:c2:14:c4:f1:ca:6b:63:
ee:0d:61:4c:25:d5:11:a2:1e:74:0e:21:61:8c:35:
8a:fb:d7:21:f7:e5:9d:8f:f4:cf:60:d2:63:4e:94:
a5:25:bf:b3:f1:fb:bf:47:63:71:fa:8b:2d:c8:9f:
eb:90:51:bb:41:8a:15:6d:ab:a9:64:6f:d5:5d:51:
04:21:2d:9d:28:dc:2a:e5:d4:04:0a:bd:88:48:47:
1c:43:d9:dc:b3:f7:af:06:ef:f9:bc:19:48:0a:2d:
c3:af:c3:11:b1:6f:e2:c1:11:30:7a:96:4a:62:79:
d4:85:77:9b:d8:2e:33:88:6e:20:52:41:a7:83:f7:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:10:20:50:26:1B:74:4F:B9:4C:F5:65:07:2F:C4:ED:F0:32:E9:3B
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d1:02:57:df:25:0e:d8:a8:51:03:24:28:83:11:4d:47:1b:
12:e2:7a:2c:24:cb:d8:64:c6:d6:ca:d8:26:95:28:dd:17:a3:
3a:2c:92:05:a9:ef:83:be:44:1b:c9:e5:2c:e4:0a:35:09:a6:
b8:0f:20:d4:88:97:34:83:33:83:20:42:8f:c0:ca:d6:03:09:
51:f5:1a:d9:d5:3e:48:e7:bd:30:4c:15:c1:d3:95:ee:08:74:
eb:5c:5d:e4:28:8d:74:06:cc:01:57:07:aa:b6:61:45:38:26:
e4:47:c5:8f:e1:ac:c8:2b:e8:3a:26:7f:95:4c:d5:5a:53:54:
63:87:ca:4e:af:d4:7e:05:51:05:3f:29:5e:8c:c8:0c:45:fa:
7a:44:c1:ea:6a:86:e2:9d:6b:b0:fc:ca:9d:29:c9:7d:cc:4b:
9c:a0:8d:3f:60:f8:84:ab:60:c5:7a:46:cf:d5:9e:1f:2f:f2:
01:1e:33:84:57:0f:a4:ec:74:ab:57:a2:4c:c3:26:30:a2:e0:
30:89:c0:72:b9:1a:60:38:8c:6b:65:0c:39:de:01:12:07:44:
3f:51:43:2f:cd:3c:7c:a1:51:7c:7b:63:7f:cf:fb:6e:83:37:
a0:03:ff:65:05:df:79:36:ed:94:4c:94:ad:2a:82:1e:28:6e:
8d:40:36:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:32 2026 by rpki-client