Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
File: ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json)
Hash identifier: I7+a3FK0QZna7sjA2H4z/wp/NKT1nFD/MQfSO26MVaM=
Subject key identifier: D2:A3:59:B7:69:02:6E:07:21:57:EF:2C:3B:2B:ED:62:49:8D:F2:CA
Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
Certificate issuer: /CN=ce22ec994542ca7acaadd58727e4606ab4490040
Certificate serial: 019D2A3B55A7A72B5F92D58495323022C9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
Manifest number: 116B
Signing time: Thu 26 Mar 2026 13:00:24 +0000
Manifest this update: Thu 26 Mar 2026 13:00:24 +0000
Manifest next update: Fri 27 Mar 2026 13:00:24 +0000
Files and hashes: 1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: meSgWUNQaMYNu3vGIlXYZTR6n3aeYbe1XJP2NHcMhHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:55:a7:a7:2b:5f:92:d5:84:95:32:30:22:c9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040
Validity
Not Before: Mar 26 13:00:24 2026 GMT
Not After : Mar 27 13:00:24 2026 GMT
Subject: CN=d2a359b769026e072157ef2c3b2bed62498df2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:33:6f:ff:5f:e6:1a:05:c7:9a:87:8c:21:79:
6b:95:4a:c1:26:3e:e5:37:4d:81:39:36:06:90:b9:
35:35:29:f8:7c:b5:6f:a4:fa:02:a7:05:5d:0c:eb:
ff:1c:46:36:11:2c:9f:0e:de:3a:e7:5b:c6:06:95:
1d:23:6d:38:3e:29:b8:2d:cc:af:71:39:99:60:58:
bf:55:af:1a:b0:48:f5:e1:34:76:f9:c6:7e:50:64:
e2:15:89:f3:16:c1:1b:6e:98:11:7f:2e:23:a1:9a:
6b:7e:ca:2c:f3:30:81:5f:5f:d9:f7:73:1f:f9:d9:
32:2b:53:97:ba:ed:62:47:4a:b9:5a:46:9a:f9:77:
09:18:69:35:9b:11:68:19:ae:c2:90:b6:03:00:76:
e6:a1:de:f2:ff:34:ac:55:3d:26:9d:e0:b2:74:a8:
6c:a6:a2:ff:75:2f:22:a0:2f:01:5e:c6:fb:be:a5:
74:0d:5c:ba:03:0f:44:ac:8d:8c:59:39:4e:34:55:
b6:3e:11:8a:65:6a:f2:ee:4e:56:4f:f6:bc:e0:42:
25:05:b8:be:07:b8:52:47:62:ef:ac:c2:bf:51:12:
94:5a:02:86:a1:fe:7a:e1:f5:4f:c1:bf:63:c3:ae:
4c:4d:80:1f:c5:b2:2d:de:8b:0f:6c:3a:65:aa:5b:
a9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A3:59:B7:69:02:6E:07:21:57:EF:2C:3B:2B:ED:62:49:8D:F2:CA
X509v3 Authority Key Identifier:
keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e7:25:14:c8:3d:e2:ba:65:7c:fa:89:bd:31:ea:33:09:b0:
23:73:43:ef:51:b8:1e:01:8a:8a:d9:b4:a5:83:89:0b:e0:28:
9e:cc:8b:74:9e:b5:a1:e3:59:d8:31:f5:a9:1a:38:5d:c6:a3:
c5:8e:b9:be:e1:6e:e6:2b:08:42:05:9d:98:dd:3d:72:eb:96:
1b:53:a4:59:37:a1:85:5e:d8:53:d0:97:7e:02:0e:43:d6:b1:
eb:f3:17:0b:7b:4b:81:28:1e:d8:7a:81:d5:f1:23:fa:9e:b1:
ac:06:96:de:01:18:e2:6e:e2:3d:38:e5:23:a7:35:20:95:e2:
55:22:df:9d:14:fa:9e:57:e6:39:23:50:11:48:a0:7d:05:79:
65:53:a7:d1:52:02:f8:6b:a2:b5:9b:1c:2e:eb:5b:d3:bc:86:
1a:d2:95:f6:08:bd:8e:ed:e6:2f:aa:7c:ee:a8:30:e2:5e:f6:
50:da:82:0f:5c:50:05:bf:dd:7a:44:12:5f:40:47:fd:63:16:
06:3e:6e:f6:ec:0a:00:58:6b:79:5b:ec:32:37:6a:ed:56:43:
bf:2c:15:b4:6f:d1:3b:13:8d:ef:44:bf:57:1e:e9:2d:b5:e6:
fb:2a:1b:8a:db:f0:6d:14:13:3a:94:75:07:df:a7:99:11:d6:
7d:38:37:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:01:07 2026 by rpki-client