Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
File: ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json)
Hash identifier: EdEAbs9didFNkW/wWhXwJ6Yk8N8wHcHu2J05+tC5uzU=
Subject key identifier: 68:4C:04:D1:1F:A3:41:4B:73:FD:B8:17:37:F2:5A:5B:BD:45:4F:1E
Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
Certificate issuer: /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Certificate serial: 019D371BC4014C08D5E94B451A90CA9AC10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
Manifest number: 0EDB
Signing time: Sun 29 Mar 2026 01:00:59 +0000
Manifest this update: Sun 29 Mar 2026 01:00:59 +0000
Manifest next update: Mon 30 Mar 2026 01:00:59 +0000
Files and hashes: 1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: 7HanUR8KKjrqUgPu4QW/Ae0NdpDWcsTbOBrQaCKDf1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:c4:01:4c:08:d5:e9:4b:45:1a:90:ca:9a:c1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Validity
Not Before: Mar 29 01:00:59 2026 GMT
Not After : Mar 30 01:00:59 2026 GMT
Subject: CN=684c04d11fa3414b73fdb81737f25a5bbd454f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:98:78:ba:60:3c:c9:0d:0d:a9:7e:af:3f:
35:ca:6a:48:86:ad:80:0f:04:90:34:6e:31:ae:69:
76:0e:9f:66:2a:2a:ed:d9:61:75:ce:fa:a2:4e:f3:
fe:fa:f5:89:be:fe:b9:72:3d:43:cd:4b:2a:c9:79:
61:31:68:3c:2c:e3:bb:98:6a:ed:00:c5:68:ef:da:
73:bf:18:2a:5a:ca:44:8b:dd:55:7b:1d:08:78:c1:
06:44:5f:0b:31:7b:8d:6e:42:1a:2d:f6:e6:bf:f9:
3e:d3:9f:0b:19:8a:59:b3:2f:26:68:eb:db:34:fa:
52:5e:da:86:54:80:96:19:ab:5a:b3:c6:f2:6f:39:
a9:ee:c6:cc:d9:7f:7c:91:9f:63:7e:6a:d5:77:84:
f1:78:d4:08:84:30:b2:36:01:4f:4a:51:65:d2:0b:
e6:c7:7d:b4:08:f7:47:47:e2:dd:9e:7d:38:c4:0e:
17:52:39:95:a6:9a:51:ef:57:c9:a5:9e:af:75:61:
ed:b0:a3:63:b3:9c:e4:b5:bf:ce:be:f5:40:54:e0:
80:f1:d2:c5:2d:f4:c3:41:4a:d2:11:ac:2c:a7:2e:
e7:7e:7d:45:9a:7a:83:b6:4e:63:42:79:0d:50:1a:
17:f3:01:e3:54:45:39:37:1c:b7:4e:7d:cc:58:db:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4C:04:D1:1F:A3:41:4B:73:FD:B8:17:37:F2:5A:5B:BD:45:4F:1E
X509v3 Authority Key Identifier:
keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:07:be:ea:a8:65:88:d2:ef:3f:91:cf:f1:97:a3:0e:bd:ad:
14:85:93:1f:83:55:12:a2:44:3e:08:8e:01:6b:a6:ba:1b:a1:
9f:11:c8:8d:7b:b7:9d:41:74:cf:35:68:5f:9e:2f:b0:af:26:
7e:b4:3c:4a:3e:a6:ca:0a:4e:39:c1:53:1b:5b:cd:06:3a:11:
69:c8:68:6f:2a:8f:48:d9:e4:ae:d6:2c:90:08:69:d8:a9:78:
4a:61:4f:d0:e4:fa:6a:25:89:c8:da:07:a2:e7:d1:ca:dd:32:
b0:2c:06:dc:a2:96:5b:71:50:91:8e:4d:13:18:bf:80:2e:05:
cd:27:f7:9e:15:ac:91:0a:e9:76:e3:78:6a:2f:22:25:63:fa:
60:f3:09:49:1f:f2:c2:30:90:ca:6b:dd:50:7d:8a:93:12:00:
2c:8c:04:5f:ca:93:eb:8f:84:9c:81:7c:c4:36:4d:24:65:7b:
d6:ea:31:90:ba:3e:46:d8:08:7e:cb:06:eb:df:50:c3:37:40:
df:33:78:b6:bb:19:e6:e8:e0:4e:dc:f8:ba:b2:38:e9:b4:b4:
54:fe:8b:51:aa:b7:30:dc:e9:55:c9:ce:39:27:e2:4f:b8:da:
04:91:1a:86:c1:96:fe:38:fe:3c:2c:94:33:5e:9f:1a:f5:8a:
a1:90:e7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:37 2026 by rpki-client