Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File: z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier: I70Y+wdJ4EV8YblcZQszYuHJK9pEOWvLLjJnLTG2O0w=
Subject key identifier: BE:7B:58:1D:BC:66:7D:91:02:EA:9B:B1:C9:A5:20:B4:25:08:A2:A1
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer: /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial: 019D38663ECF32067F3C5421261F4EBD2916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number: 1440
Signing time: Sun 29 Mar 2026 07:01:57 +0000
Manifest this update: Sun 29 Mar 2026 07:01:57 +0000
Manifest next update: Mon 30 Mar 2026 07:01:57 +0000
Files and hashes: 1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: cruFevYw21Q8o2y3/ghyxc0sDv8lLyLv/iqb+MhL7MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3e:cf:32:06:7f:3c:54:21:26:1f:4e:bd:29:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Validity
Not Before: Mar 29 07:01:57 2026 GMT
Not After : Mar 30 07:01:57 2026 GMT
Subject: CN=be7b581dbc667d9102ea9bb1c9a520b42508a2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:36:13:7e:2f:83:a3:bd:f1:ca:7e:49:06:aa:
79:14:c3:2d:e4:93:fc:31:0a:91:91:da:24:df:f0:
96:e2:e3:cc:44:b8:e6:5d:64:7c:6f:a5:d4:60:ea:
57:a8:c0:7b:06:00:72:a5:72:ba:d1:da:da:50:41:
c8:b5:ae:03:aa:6f:98:ce:62:c5:b4:a9:bd:a1:5a:
13:9d:c1:c8:2c:85:eb:87:d6:cc:bd:cc:dc:d4:85:
17:fc:9f:bf:3f:ba:06:05:93:5a:6f:48:c7:a3:a0:
a5:e9:2c:a9:05:98:f5:69:20:ad:96:d8:cf:0a:0a:
6b:b3:41:52:75:80:c8:3e:7d:c9:59:30:50:d5:54:
01:6f:2d:f0:aa:20:54:d5:02:9c:24:86:f1:10:98:
0a:78:a1:2f:94:37:0c:bf:c8:3c:45:ff:18:d2:12:
8b:6e:ca:48:07:75:35:cc:3d:f2:b6:7a:c1:92:f4:
a6:9a:c3:46:9d:39:4f:4e:be:06:d1:c6:8b:91:6f:
92:0c:9f:ef:f8:5b:b4:c2:e2:f6:19:46:f9:0b:51:
d5:b5:37:4c:6f:63:70:44:49:00:da:a2:34:01:5d:
29:fd:88:14:38:79:de:02:cd:7c:c6:fd:ca:20:b9:
7b:c9:4b:ed:99:43:0f:48:bf:08:c4:26:9a:74:3c:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7B:58:1D:BC:66:7D:91:02:EA:9B:B1:C9:A5:20:B4:25:08:A2:A1
X509v3 Authority Key Identifier:
keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8e:fc:23:cf:31:c8:3c:44:6b:7a:71:21:83:7d:7c:b2:86:
f8:8f:02:a4:6f:02:b4:a1:d7:f5:c8:d4:1f:18:81:74:36:76:
67:a9:d0:d0:98:e5:fc:7d:68:1f:0c:1f:c7:07:1d:6a:a2:6e:
5e:2d:62:03:bc:37:ba:85:a1:c2:eb:6e:be:de:e6:b5:8d:20:
b9:62:56:b2:15:15:5b:b1:76:24:81:4c:df:e0:a8:9d:f6:62:
16:3c:3c:17:ab:48:16:99:46:49:7b:ab:07:b6:b0:8d:13:a1:
e1:ae:7a:1a:3a:2d:7c:38:fc:b8:76:a5:d2:fb:6e:75:e1:a3:
00:60:ad:d3:98:3d:21:98:b5:44:a9:3a:55:47:55:9c:9f:aa:
41:c8:61:00:ba:a1:86:0f:a1:29:3e:8a:cf:33:74:d3:85:2a:
60:84:e9:02:8e:82:1c:3a:5b:3d:22:10:7e:c3:16:47:3c:9d:
4b:d0:da:96:c0:8c:da:de:b1:c4:88:21:c3:76:ca:43:08:54:
91:26:cf:94:ae:1c:63:53:a9:de:40:33:f3:e9:75:40:b5:5c:
e8:3d:3c:5b:5d:5e:70:fb:e8:d9:b5:e4:79:61:7c:14:9d:d4:
cb:c8:b6:45:44:e4:1a:ae:3b:37:4c:a6:3e:39:7a:b0:7d:56:
69:8b:78:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:53 2026 by rpki-client