Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
File: Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json)
Hash identifier: WIoCRi6NEel7pRH4ZHFVxEMDaczY2fCY/z7Y9P5brAM=
Subject key identifier: 2E:06:00:E5:D1:33:85:34:93:C6:AE:68:26:D0:27:A3:A3:BE:C9:F2
Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
Certificate issuer: /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Certificate serial: 019D27043DDE92F85CB097ED4255223C6505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
Manifest number: 0C92
Signing time: Wed 25 Mar 2026 22:01:22 +0000
Manifest this update: Wed 25 Mar 2026 22:01:22 +0000
Manifest next update: Thu 26 Mar 2026 22:01:22 +0000
Files and hashes: 1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: dqVaGypojlHaWPSy9h11EazE3ISoo7m+vPSUut0JTvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3d:de:92:f8:5c:b0:97:ed:42:55:22:3c:65:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Validity
Not Before: Mar 25 22:01:22 2026 GMT
Not After : Mar 26 22:01:22 2026 GMT
Subject: CN=2e0600e5d133853493c6ae6826d027a3a3bec9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:30:8f:de:42:ab:04:71:78:eb:01:37:91:e0:
be:59:af:e6:5a:44:45:53:d3:13:48:04:91:0a:df:
19:ec:a5:50:4b:45:b9:eb:15:a1:1d:49:17:d3:ac:
69:cd:96:8f:c6:7b:f8:02:31:96:75:58:8e:fc:21:
55:04:dc:3d:f8:b1:6d:d2:ca:20:9b:54:eb:50:a6:
03:b1:08:83:3c:40:53:d8:8f:d7:26:f4:5a:d8:8c:
16:ba:1c:23:2b:30:3b:67:b7:26:b8:54:50:2e:91:
e2:76:c9:04:c2:42:ae:be:bb:47:17:c0:be:1c:e9:
34:20:6b:07:75:75:ad:e0:46:4a:d0:9b:95:ee:22:
e6:3c:a6:35:8e:e5:3e:31:76:78:1f:96:4a:9d:09:
46:f1:e7:52:9a:30:6d:76:59:4a:d9:ab:d2:6c:d0:
dd:7b:32:56:48:ba:7f:06:8a:29:2a:10:30:ba:a3:
2d:7f:8b:c7:e8:34:57:81:59:10:86:f8:5a:8b:a5:
d7:1a:fa:ad:bf:47:5e:f1:7f:bf:9f:22:3a:e7:ca:
73:cc:21:89:7a:1b:44:a7:3e:84:e3:a3:a3:89:f6:
e8:f5:58:ef:59:7a:31:c9:ef:a9:9a:5f:93:74:37:
48:7a:66:ab:2a:cc:39:1a:bb:91:a8:b6:29:88:62:
f8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:06:00:E5:D1:33:85:34:93:C6:AE:68:26:D0:27:A3:A3:BE:C9:F2
X509v3 Authority Key Identifier:
keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:69:d5:da:14:96:a0:3e:22:45:df:35:1f:23:ed:3b:a1:9f:
9b:3d:ed:02:97:71:a5:11:01:b6:cb:95:cc:b5:1d:77:29:d4:
bb:bc:7c:f2:38:d4:eb:78:ab:7a:e7:fa:d0:90:0f:0e:7e:50:
18:ea:d3:40:b5:6c:20:92:48:9d:0d:d5:21:d7:5a:5f:bc:c5:
e2:f5:c8:53:37:39:6f:b9:60:53:25:a5:64:38:8f:5d:52:18:
ed:c9:30:d7:b4:cd:8f:2b:59:86:e7:bd:32:05:ef:09:76:99:
8f:65:8c:73:b4:b1:c9:78:37:85:58:0e:a5:88:7c:47:7a:e5:
e9:b2:74:a4:fc:f7:8f:fa:e4:f1:13:b9:ff:8e:74:84:da:af:
53:93:24:05:5c:96:5a:52:0a:a6:94:82:b4:a8:01:f3:5a:21:
12:31:6b:1f:2c:47:4a:98:6a:89:41:f4:f5:92:d1:31:b4:f6:
b1:dd:54:19:f3:05:fc:ed:bb:0e:08:30:2e:38:e8:92:77:7b:
a4:f7:9e:e4:49:af:54:1c:be:5e:b4:bb:36:0c:7d:08:68:af:
d6:06:ad:46:cc:b7:e5:d2:02:00:83:fb:bf:ac:af:9e:d9:39:
15:d3:49:ad:8a:4f:26:f6:59:a3:75:2d:4e:58:c9:1c:6e:f4:
ec:d2:75:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:03 2026 by rpki-client