Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
File: zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json)
Hash identifier: Gr92lySvuP4mO7NA6GCfaXqwM1dMbOFIN1EzwvkExAo=
Subject key identifier: 63:BB:85:59:88:9E:04:AB:65:AB:50:4D:EA:B6:92:96:50:41:40:B7
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial: 01A11636B51B9D0528CA5A2ACDBC12B04748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
Manifest number: 1225
Signing time: Wed 07 Oct 2026 11:54:06 +0000
Manifest this update: Wed 07 Oct 2026 11:54:06 +0000
Manifest next update: Thu 08 Oct 2026 11:54:06 +0000
Files and hashes: 1: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: u9wuCM914me+WQWJSK/X5Y5u6uOgdThtSt/Ypvhpy3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 11:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:36:b5:1b:9d:05:28:ca:5a:2a:cd:bc:12:b0:47:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Validity
Not Before: Oct 7 11:54:06 2026 GMT
Not After : Oct 8 11:54:06 2026 GMT
Subject: CN=63bb8559889e04ab65ab504deab69296504140b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6c:9c:74:82:14:20:41:ca:91:44:ea:65:e1:
2a:f1:c2:bf:e1:96:97:fd:8f:9e:fd:5e:6d:4d:0a:
10:1a:a3:2f:ab:bb:7b:2e:fc:1b:f3:aa:50:bf:2a:
2b:a5:69:cc:a7:4c:24:16:3f:40:3c:b1:16:a6:9d:
d5:1c:f7:b4:d0:2c:e2:f6:b1:56:91:4d:ed:5b:35:
0f:59:83:88:ff:a6:b6:4b:4f:44:40:47:77:00:fe:
9a:c6:66:8a:45:ad:d0:9f:5a:6a:c3:57:f0:fc:6e:
08:f3:6a:f1:93:04:21:80:8f:40:a8:38:9b:a0:13:
e9:1c:2f:cc:43:f7:10:ff:e2:a5:a7:2c:fc:dc:6e:
80:ec:85:0b:24:22:68:fb:3c:b1:98:89:84:92:2a:
7b:a7:af:46:68:02:c0:52:78:06:59:cf:10:44:7c:
b0:00:72:93:74:d0:db:3c:09:54:4e:dc:65:67:2b:
5f:63:9b:5a:04:bc:9b:e3:4e:2c:8f:29:ec:25:83:
18:ec:68:d1:5e:77:d0:1f:a7:99:38:9a:5e:12:74:
89:16:66:31:a7:f7:f5:c9:95:ab:03:7a:3a:94:7a:
08:90:81:d8:3b:b1:fc:f0:b9:48:38:dc:6f:de:94:
a9:d5:93:e0:df:23:d4:a8:57:65:58:14:34:79:ed:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BB:85:59:88:9E:04:AB:65:AB:50:4D:EA:B6:92:96:50:41:40:B7
X509v3 Authority Key Identifier:
keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:68:44:6b:79:46:9e:70:60:df:08:a6:45:66:5f:34:5d:92:
1f:7d:0d:75:58:0d:81:0d:81:8c:06:38:24:23:9a:ad:73:84:
d5:ba:9b:48:e1:d1:1a:e1:2a:b2:d4:13:fc:2c:03:90:a7:95:
6e:8f:b3:93:75:1f:4e:05:03:73:de:68:fd:5a:24:24:65:50:
21:ae:af:2b:c0:d2:06:f8:d8:d7:3d:f8:84:77:c0:27:5d:a0:
fc:b1:ec:0a:a1:8d:5d:13:2d:bf:2d:95:78:be:7f:fe:59:e1:
e8:4d:a9:1f:3b:7b:8d:75:d6:de:43:9a:af:b0:94:e6:ed:2c:
0c:7c:ce:f5:f7:cb:71:10:56:67:15:b3:c6:a3:ac:83:9c:6a:
f2:3a:97:29:c3:49:65:ea:c7:d0:6d:f3:c7:d9:95:43:d3:9a:
0a:b1:7e:6a:bd:05:f8:de:37:81:da:92:40:a9:65:14:82:49:
03:05:82:ce:9f:77:5f:c1:f4:21:f6:a9:b4:c3:87:f2:9e:2c:
1e:f9:ed:b5:eb:fe:44:55:80:60:66:8a:01:2c:2b:3e:e1:51:
a8:a4:db:5d:c9:9c:ba:5e:f2:02:14:a5:75:12:ff:3a:4f:c6:
c5:ed:bc:91:7d:93:ee:02:83:49:e1:b9:85:3f:96:a0:05:0f:
01:e5:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:15:16 2026 by rpki-client