Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.mft
File: zo9K2SdnRIAuajoGJWzUdQwadVo.mft (raw, json)
Hash identifier: q8EFa4nyfSnMrBDs2/P3eP/FFxdkI9bqaDZL3PEbufs=
Subject key identifier: 70:64:8A:68:DA:32:D9:B5:90:A5:DF:07:71:B6:8E:CA:0D:00:D7:7E
Authority key identifier: CE:8F:4A:D9:27:67:44:80:2E:6A:3A:06:25:6C:D4:75:0C:1A:75:5A
Certificate issuer: /CN=ce8f4ad9276744802e6a3a06256cd4750c1a755a
Certificate serial: 019D27DFC6235714B53A27679D405A2B40F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo9K2SdnRIAuajoGJWzUdQwadVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.mft
Manifest number: 3D
Signing time: Thu 26 Mar 2026 02:01:09 +0000
Manifest this update: Thu 26 Mar 2026 02:01:09 +0000
Manifest next update: Fri 27 Mar 2026 02:01:09 +0000
Files and hashes: 1: zo9K2SdnRIAuajoGJWzUdQwadVo.crl (hash: xCGgSVV0+7S4C8f0I9zXNuYH5icuxdRZr+ED5/9jNXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo9K2SdnRIAuajoGJWzUdQwadVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c6:23:57:14:b5:3a:27:67:9d:40:5a:2b:40:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8f4ad9276744802e6a3a06256cd4750c1a755a
Validity
Not Before: Mar 26 02:01:09 2026 GMT
Not After : Mar 27 02:01:09 2026 GMT
Subject: CN=70648a68da32d9b590a5df0771b68eca0d00d77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:0d:53:94:a5:1c:d8:03:3c:5b:be:e6:d8:
37:76:50:e1:9b:ce:7a:8d:79:e9:53:16:56:00:67:
b6:04:9c:a4:c7:cc:5f:04:5c:71:75:5a:70:c3:88:
2c:8b:b4:75:55:a7:ef:f6:74:79:bb:ab:a7:09:f3:
c9:98:2a:2b:a1:0e:63:80:1d:cd:d6:c6:9b:ec:a9:
f6:c2:0b:01:fb:20:a8:3b:bc:b4:88:42:3b:19:4c:
01:4f:f3:a8:ad:92:ce:ff:2a:83:da:00:6d:37:a9:
d4:b9:f8:c7:8a:33:ff:0c:97:be:7a:0e:14:74:7e:
90:67:a3:d7:df:20:58:f3:b3:4e:3a:72:3d:09:8e:
7e:c8:8a:4b:24:4b:37:02:56:de:d0:8f:d2:52:9b:
7e:96:f8:26:20:ce:5c:b0:2f:9b:bd:5e:4c:10:c3:
37:fc:35:27:14:c4:37:72:59:4d:a5:08:aa:93:64:
7d:ad:ca:3f:87:15:a6:b4:b2:0b:6c:1a:91:73:61:
4e:ec:05:9b:01:ca:42:5d:fe:53:52:ab:5d:76:a4:
84:89:a0:79:9f:ae:40:be:e8:1d:f7:d5:c2:6a:a8:
92:41:6f:e3:67:f1:1b:90:d6:82:a6:3b:7c:c2:97:
58:34:c1:4c:a3:55:1c:c9:6d:35:85:c3:6f:fc:53:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:64:8A:68:DA:32:D9:B5:90:A5:DF:07:71:B6:8E:CA:0D:00:D7:7E
X509v3 Authority Key Identifier:
keyid:CE:8F:4A:D9:27:67:44:80:2E:6A:3A:06:25:6C:D4:75:0C:1A:75:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo9K2SdnRIAuajoGJWzUdQwadVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2023ea-6e7a-439e-ab6d-a3fa172a02ac/1/zo9K2SdnRIAuajoGJWzUdQwadVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:25:80:37:6d:28:14:cd:67:b3:5c:2e:d9:87:bd:67:0f:d4:
44:86:a9:90:31:06:8e:46:bc:7e:47:87:56:c1:48:7f:13:88:
3f:a9:22:ca:8b:d3:1f:58:4f:1c:f2:b0:05:9e:fd:9e:96:ac:
0d:51:50:01:f0:16:41:b3:99:0d:45:13:3c:fd:da:ee:7d:d8:
13:3f:ab:03:48:2a:08:79:4a:cc:95:cc:b8:4d:67:7d:c9:e2:
80:7d:74:6d:c7:6e:1a:50:58:4f:2d:75:31:9f:95:4e:cc:a9:
32:42:94:26:85:5c:3c:2a:24:df:54:fa:97:fc:e8:db:6e:e1:
fc:ed:bf:03:c3:c9:3e:54:b2:4c:c2:8f:2c:2a:9d:46:82:8a:
0c:99:3a:5f:64:7a:76:df:8c:16:d2:d0:17:4f:3e:0f:b3:c7:
41:2e:7e:37:2f:1f:97:4b:06:2e:33:11:6a:6f:ee:35:a6:97:
71:d7:41:e0:e8:9f:3d:fd:1e:cb:79:38:af:cb:22:12:e0:9e:
11:d0:76:90:2e:e2:56:0c:3e:4f:bc:e9:07:f5:b8:0c:f6:9b:
60:06:fa:40:c0:96:de:79:c5:bc:78:f2:f3:3c:9b:8c:d7:63:
07:a9:2b:50:07:a8:f6:d7:5b:50:1e:5e:6f:25:2e:5d:e5:4c:
23:14:2c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:00 2026 by rpki-client