Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
File: ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft (raw, json)
Hash identifier: qBuE3sArenQPTzxgcO0L5PrtQCu/+H9VEhZg0Fz+vFg=
Subject key identifier: 2C:EB:5C:11:D4:0D:0B:A5:58:4E:C1:FB:C5:C5:A8:91:B9:BA:1B:C4
Authority key identifier: 66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
Certificate issuer: /CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Certificate serial: 019D270461E40FA3A6743BEFDF35CB1662A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
Manifest number: 1563
Signing time: Wed 25 Mar 2026 22:01:31 +0000
Manifest this update: Wed 25 Mar 2026 22:01:31 +0000
Manifest next update: Thu 26 Mar 2026 22:01:31 +0000
Files and hashes: 1: ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl (hash: tJag/1fLo4QSJ+y3wnm8+pLqM8vi23qEFIs3uBYHl+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:61:e4:0f:a3:a6:74:3b:ef:df:35:cb:16:62:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Validity
Not Before: Mar 25 22:01:31 2026 GMT
Not After : Mar 26 22:01:31 2026 GMT
Subject: CN=2ceb5c11d40d0ba5584ec1fbc5c5a891b9ba1bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:74:46:12:e2:7d:bc:58:d0:21:9e:20:5e:58:
3b:4b:cb:48:d4:ae:be:6f:36:3e:64:6c:c5:0c:83:
60:02:30:11:62:44:8a:7b:99:3d:15:25:63:22:7f:
db:ac:33:54:fd:fd:bb:e1:26:48:01:56:94:ec:0f:
59:8e:8f:7a:75:18:bb:fc:18:92:1e:6d:ad:a8:9f:
ac:f8:4d:59:f1:5b:52:64:e9:04:63:ef:a5:85:e8:
47:22:03:ad:2f:b3:42:7a:87:31:9c:4b:20:28:6d:
eb:2d:13:f8:97:cb:fa:fd:22:a0:bc:d1:0f:25:fd:
fb:70:7f:34:ce:35:af:32:28:75:29:39:ca:c8:e4:
3f:8e:7d:28:98:49:69:4d:e4:d3:4f:2c:73:c4:ee:
ce:5c:b0:7e:e8:20:f4:3c:05:52:f0:58:70:47:ad:
ca:60:9b:e2:52:bd:f8:5b:47:d7:b1:62:01:07:4f:
ec:4e:f6:3b:51:82:8b:7d:cd:5c:23:4d:2d:39:fa:
5a:12:81:b0:4d:33:fc:ba:12:0b:3d:53:26:2a:ef:
a9:d7:37:1b:20:52:93:20:c4:5f:f1:ec:23:c8:d9:
3d:6b:c1:01:d2:5c:80:02:1f:9d:f7:b9:5b:18:23:
26:44:f6:ba:47:37:65:f2:5f:d6:68:e9:6e:ae:e0:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EB:5C:11:D4:0D:0B:A5:58:4E:C1:FB:C5:C5:A8:91:B9:BA:1B:C4
X509v3 Authority Key Identifier:
keyid:66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8f:e7:14:89:45:a0:8c:18:ea:3d:da:7d:5a:6e:c6:c2:99:
5a:dd:d4:79:3a:78:7f:cb:c2:c6:ae:4e:36:8b:55:9a:96:a6:
53:7e:13:d2:b3:cb:85:10:05:4d:4c:99:99:7c:d5:7c:70:1a:
32:09:4d:fb:0b:e5:d3:41:14:88:14:21:40:e1:bb:05:5e:5f:
67:1c:a0:78:e0:13:31:57:c5:71:c8:9e:a4:91:67:89:20:0b:
58:5f:37:d6:bf:19:7d:03:3c:dd:a6:69:b2:ae:12:4d:9c:a9:
3f:34:9c:e5:5f:2a:5c:59:7f:0a:98:59:17:1e:7b:dd:6b:d0:
45:14:2a:87:89:d0:04:7b:53:1c:93:29:15:a5:58:92:b7:b5:
a6:f0:40:c4:50:de:40:92:d9:14:3b:f3:0c:7f:45:80:8a:54:
d2:fb:77:be:fa:d2:33:bf:2e:9d:35:d1:3d:4b:13:f0:d8:d6:
88:84:c3:d5:4f:14:7b:b6:fb:2e:54:05:0a:b8:8a:5e:6e:57:
a9:06:d1:3a:21:a0:b1:c1:f5:18:39:5f:a8:22:c5:ff:cc:49:
06:e1:b1:a8:d3:16:f2:a0:72:3d:30:25:68:96:80:99:2c:6d:
f6:bd:ff:d1:f7:dc:b6:4e:65:76:48:c8:f4:2b:1e:ef:e9:89:
6f:32:53:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:50 2026 by rpki-client