Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
File: Zur1u0vnZQbp7F5pTYtYUKmOciM.mft (raw, json)
Hash identifier: IWrDsqDBXfWlxUBxCw4i9gi3LjCMo4hr2xEdLgxAhAI=
Subject key identifier: 92:13:EA:97:1C:60:5B:26:9D:DE:1A:8B:C4:81:90:34:94:B3:03:F7
Authority key identifier: 66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
Certificate issuer: /CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Certificate serial: 019D37C04454DCF77C082B8FBF39B3E8CDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
Manifest number: 0EFB
Signing time: Sun 29 Mar 2026 04:00:40 +0000
Manifest this update: Sun 29 Mar 2026 04:00:40 +0000
Manifest next update: Mon 30 Mar 2026 04:00:40 +0000
Files and hashes: 1: Zur1u0vnZQbp7F5pTYtYUKmOciM.crl (hash: SKXnZw1fyLrczJH4Mh1QEzJwcfPkkdx6PwPnBDJ6zYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:44:54:dc:f7:7c:08:2b:8f:bf:39:b3:e8:cd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Validity
Not Before: Mar 29 04:00:40 2026 GMT
Not After : Mar 30 04:00:40 2026 GMT
Subject: CN=9213ea971c605b269dde1a8bc481903494b303f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:fd:62:77:62:3b:fb:8a:7a:f0:a8:d8:56:
0e:92:67:3d:b0:c1:02:2f:06:f0:f2:22:36:5d:7f:
69:6c:28:c2:4c:43:e9:c9:c0:2c:a5:14:d9:a6:77:
1e:1d:2d:cb:82:da:a7:9d:b6:14:ef:00:da:c1:ae:
2f:7d:f5:d7:4f:ce:ec:38:8e:da:65:14:4a:e0:93:
f2:01:a5:71:d0:d8:82:96:c4:39:84:e4:4f:2c:3a:
d0:5d:85:0f:58:ed:4e:58:8c:77:43:20:d2:d6:be:
ca:46:49:0a:aa:53:3f:f1:be:aa:c8:0b:6b:6a:ae:
d2:bf:a1:41:7f:80:0a:82:7d:cd:0d:1e:cb:55:41:
24:64:28:8f:e8:7a:9c:c8:bf:2c:26:ad:a8:1e:a0:
95:bd:96:e1:8a:6f:b9:a4:0c:81:24:48:30:c5:10:
bb:16:48:2a:bc:2e:5a:a9:a7:4d:b8:74:2c:11:a1:
de:c6:0a:25:f6:73:16:44:18:ff:a7:59:e0:db:89:
bd:be:b0:06:0b:fb:f3:47:fe:c3:43:e1:16:74:5d:
b7:6a:56:78:19:72:7c:c1:93:51:cb:7f:0c:c2:92:
60:07:0e:68:2a:ff:f2:54:ea:95:bb:4b:46:03:94:
b1:f2:0b:fc:7a:99:3b:20:48:06:13:db:ee:6c:6f:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:13:EA:97:1C:60:5B:26:9D:DE:1A:8B:C4:81:90:34:94:B3:03:F7
X509v3 Authority Key Identifier:
keyid:66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:06:11:e8:84:40:70:1d:92:ed:38:42:e2:86:55:87:5a:5a:
9c:1c:36:39:38:be:10:36:45:de:8c:44:d9:f1:b1:7f:8e:af:
4a:2c:5e:6a:18:90:09:cd:b6:94:d1:2c:37:8d:6a:c9:a5:11:
8e:b6:e2:b8:0b:68:76:fc:d7:ab:16:5d:c6:b8:36:5e:2c:c5:
ff:db:f6:c3:c0:31:36:67:33:6f:22:a1:99:57:8f:a1:2e:26:
c6:bc:ee:f4:7c:d1:89:9a:a0:46:bb:42:34:68:95:a5:8f:c6:
7d:13:75:22:11:8d:17:01:3b:ca:02:d1:26:ae:04:bc:7b:30:
21:19:ed:fb:81:41:e7:ee:fa:09:cd:2d:3d:90:4b:d2:d3:dd:
a1:69:fd:75:a1:c2:30:ac:17:e3:c9:fc:c3:22:4d:f1:16:c2:
c2:50:9f:f1:c8:43:e0:bf:bd:64:cd:a1:86:06:97:ae:76:fa:
d6:43:cf:48:ea:1e:2d:d5:2f:1b:dc:2a:90:6b:50:e3:ab:fa:
bb:64:fe:eb:c8:48:53:8b:de:ac:13:6d:69:fb:5c:61:af:59:
9a:99:3f:b2:19:2c:a5:aa:6f:36:17:b2:c5:4b:ad:d5:bd:75:
e5:d7:7c:15:d7:68:01:48:b0:bc:4b:1b:89:3a:4a:fb:1e:df:
44:40:de:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:50 2026 by rpki-client