Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
File: zvcELPfCTHnXmEiy6MqzNXpkD9s.mft (raw, json)
Hash identifier: FoTe33RWkL/fkFxO6J6tLb8UWu43zZFdtmkEy9w9lnM=
Subject key identifier: CB:6D:65:17:6F:DB:9D:1B:77:A9:1C:A8:1E:16:8F:E1:79:66:95:1C
Authority key identifier: CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
Certificate issuer: /CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Certificate serial: 019D3A546E5306477CFB9F8C753D09A1B9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
Manifest number: 0AAE
Signing time: Sun 29 Mar 2026 16:01:44 +0000
Manifest this update: Sun 29 Mar 2026 16:01:44 +0000
Manifest next update: Mon 30 Mar 2026 16:01:44 +0000
Files and hashes: 1: zvcELPfCTHnXmEiy6MqzNXpkD9s.crl (hash: uOwsXAyhjNamhRW5cz4KrWMu6RyewPygVK+QIIcATo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:6e:53:06:47:7c:fb:9f:8c:75:3d:09:a1:b9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Validity
Not Before: Mar 29 16:01:44 2026 GMT
Not After : Mar 30 16:01:44 2026 GMT
Subject: CN=cb6d65176fdb9d1b77a91ca81e168fe17966951c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:b2:b3:e7:89:d8:83:58:98:2f:98:e7:69:
b9:6f:11:4d:09:b1:db:3a:f5:89:ac:5a:8b:0c:db:
f1:21:91:f0:b3:d7:93:8d:dc:5d:4d:51:4b:05:b4:
62:c7:18:cb:7e:61:15:da:44:d4:2e:a2:fa:34:b4:
47:14:80:80:e9:e1:7e:01:00:29:ed:c9:a9:4d:01:
c2:fb:18:ae:5a:f2:40:9d:b8:7d:48:5c:d7:eb:c4:
e1:08:d0:70:52:93:2e:3b:a5:34:d4:e2:3e:34:c3:
b4:23:d2:39:b7:09:15:86:e1:30:48:08:6c:1b:f1:
f8:25:38:27:3c:bb:78:83:9f:6a:bd:d9:39:3f:f1:
fc:e8:5b:f2:91:1b:e2:9b:45:fa:63:ae:16:4e:ed:
e3:d6:88:50:c7:0d:01:e6:49:3a:8e:c5:90:28:55:
73:f4:d1:16:12:a8:1b:c8:dd:dd:22:46:d0:76:f6:
aa:51:8b:34:91:c5:ab:2a:34:7b:a0:aa:3b:04:eb:
98:a5:7d:b3:88:79:ce:71:99:9d:49:46:fd:0b:6e:
d3:5d:be:45:89:cb:91:7a:0a:1f:49:52:9d:8c:13:
6b:39:6d:32:b5:7c:69:ab:f1:28:d6:89:ea:fe:c1:
50:92:0d:45:22:7a:a8:05:73:26:a3:3d:c3:a1:74:
cf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6D:65:17:6F:DB:9D:1B:77:A9:1C:A8:1E:16:8F:E1:79:66:95:1C
X509v3 Authority Key Identifier:
keyid:CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2f:59:aa:4f:bb:37:cf:87:17:c6:b6:0e:a4:52:e4:bc:75:
95:8d:83:dd:bf:1d:b9:fe:bd:c2:ea:16:01:98:c6:f9:9a:e6:
13:38:92:4e:d3:9d:f9:a9:46:fa:8b:66:b5:ee:0e:2b:68:77:
ae:9d:b2:c5:89:70:21:e9:f1:1f:a2:62:6e:1f:48:7d:e7:36:
7d:87:df:c3:fd:d7:3d:68:8c:18:93:5c:45:55:1a:00:ab:c5:
94:73:f2:d8:a1:55:06:0a:8c:1e:c4:04:c2:de:52:d2:03:29:
ac:00:f5:32:68:ee:81:be:52:e7:0c:30:11:57:ef:e2:8e:18:
95:43:7a:50:80:76:4c:c7:23:a5:ae:7d:9d:4e:dc:60:71:8b:
d9:63:ad:74:33:f0:c4:51:5d:6f:6e:c5:ee:93:da:dc:26:10:
2a:2f:32:f5:8c:49:c6:27:71:af:0c:48:69:a0:b5:05:e6:87:
33:3f:5d:ce:a1:01:f4:55:ac:a7:79:2d:27:84:6f:74:4c:73:
7a:c7:f7:cd:6e:b6:7a:79:73:db:b0:11:26:da:81:67:90:43:
96:8f:5f:c7:50:7b:ee:5b:7f:7f:fa:ce:6e:8e:42:c4:aa:4d:
70:20:ce:87:7e:33:44:4a:bc:d8:5b:6a:f8:67:fe:c0:47:74:
ba:e7:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:01 2026 by rpki-client