Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
File: ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft (raw, json)
Hash identifier: S3FwyA8S7a7wuBZ0qa7EaA4LcPDn+gXJUClJ2CXX+v0=
Subject key identifier: 50:67:15:AA:AD:50:32:73:E5:55:DB:E9:57:FE:67:84:F5:48:E8:37
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial: 019D273B1248553F4AE0C6FB76964AE8543C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:15 +0000
Manifest this update: Wed 25 Mar 2026 23:01:15 +0000
Manifest next update: Thu 26 Mar 2026 23:01:15 +0000
Files and hashes: 1: ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl (hash: oyXDQdo0QmrMw/iWDZaihRDodEzv7k24/DX4vX/Fr/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:12:48:55:3f:4a:e0:c6:fb:76:96:4a:e8:54:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
Validity
Not Before: Mar 25 23:01:15 2026 GMT
Not After : Mar 26 23:01:15 2026 GMT
Subject: CN=506715aaad503273e555dbe957fe6784f548e837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:3d:d3:92:0b:78:47:aa:19:80:39:f1:41:
c3:81:86:3a:ca:31:9e:f1:b1:dc:dc:02:1b:4c:00:
ff:b4:0d:d9:c7:62:07:34:c3:d4:0e:57:45:83:84:
df:e8:10:af:2e:cc:df:4a:0e:ca:d6:d1:23:0f:6d:
97:8d:8f:8f:81:70:60:f1:e3:72:2f:85:6e:3e:d2:
fa:4b:ab:7c:90:3d:c0:29:e9:ce:c1:34:de:11:46:
82:c0:57:fd:65:77:18:89:10:08:38:7b:ae:3a:a5:
a8:6c:e4:03:09:14:06:d8:fa:28:3b:b4:38:70:3d:
5c:6a:3d:ce:46:cc:27:b4:12:2b:63:4a:82:82:21:
6a:71:6b:ee:f6:d8:9e:ae:19:58:e5:6d:a4:ad:58:
e2:3b:48:e7:72:db:27:57:79:5d:da:3e:58:54:8e:
8c:9a:18:5d:0b:46:3f:94:ab:d1:d9:50:41:e6:37:
cc:6c:0c:34:d5:c1:28:df:5e:1e:8d:09:31:55:6e:
d0:3e:24:61:60:99:b2:58:7d:2a:69:55:5e:d9:ef:
5a:50:0f:7a:f7:e7:b6:90:40:cf:d5:4b:d4:71:cc:
06:e4:92:6c:78:05:9d:dc:fe:d7:8c:bb:b7:42:e6:
77:1d:76:c1:d5:c7:36:44:a7:28:ad:95:84:9f:19:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:67:15:AA:AD:50:32:73:E5:55:DB:E9:57:FE:67:84:F5:48:E8:37
X509v3 Authority Key Identifier:
keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ae:9b:52:7a:32:bf:95:32:e1:21:ec:f8:3a:f2:6f:65:58:
f2:5e:90:da:48:82:6f:f1:9d:39:8e:9b:6d:d0:13:8d:d4:4d:
31:3d:65:93:4e:b3:42:73:e7:46:5b:c3:55:c8:30:f0:bb:d8:
bc:4c:b5:6d:17:e2:f0:57:b8:f8:33:cd:5a:e0:a7:85:cf:c7:
ed:e5:61:a3:19:74:d2:0f:9d:06:f9:b2:6d:45:c3:e7:1e:a2:
b0:9d:9b:09:03:b1:1e:3c:23:11:8b:e1:61:fe:4b:4f:64:3c:
eb:21:c1:eb:61:2b:dc:c5:8a:b3:28:0c:15:59:46:51:a4:8c:
e3:8d:57:97:1e:79:81:7d:65:02:bb:9d:07:e5:eb:c4:8f:a6:
af:62:23:b1:0f:eb:6e:96:41:04:47:95:46:77:d1:85:6a:ce:
fb:7d:84:a2:99:85:33:be:ba:d5:fe:6b:2a:29:4b:4d:28:72:
9e:f2:dd:bf:ae:a0:90:67:6f:a7:46:56:c6:8f:d2:9e:11:91:
56:c6:9f:ec:2b:b3:ab:72:3f:4e:1b:64:fe:20:ed:5b:7d:9c:
93:ba:10:b5:02:a9:5c:58:fe:90:99:9b:6c:9a:8f:9a:04:66:
a7:72:fd:9f:5b:13:68:24:57:de:d0:ab:40:51:69:35:43:44:
f0:cb:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:07 2026 by rpki-client