Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier: LG2MHx02IK3vHcGhDJR9OpJSBiM2dFYClVEKFGMg/Zc=
Subject key identifier: AC:1F:9B:3B:2E:C7:79:87:72:FC:8A:3C:71:3A:4C:B4:A9:5C:F6:DF
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial: 019D2704C05C38F23CB47BC77F7770B78FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number: 14D5
Signing time: Wed 25 Mar 2026 22:01:55 +0000
Manifest this update: Wed 25 Mar 2026 22:01:55 +0000
Manifest next update: Thu 26 Mar 2026 22:01:55 +0000
Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: aMKZkKG49scUE9TrBqo9EVjMKs5enuauu53NG1MWzY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:c0:5c:38:f2:3c:b4:7b:c7:7f:77:70:b7:8f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Validity
Not Before: Mar 25 22:01:55 2026 GMT
Not After : Mar 26 22:01:55 2026 GMT
Subject: CN=ac1f9b3b2ec7798772fc8a3c713a4cb4a95cf6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:db:48:57:fe:95:87:15:72:de:b0:75:68:
d0:af:8b:95:79:f4:e5:31:07:4f:99:9d:b7:6c:4c:
48:da:66:15:90:57:cc:d4:96:60:21:22:18:14:32:
9a:6f:98:24:41:0b:d9:84:5b:0d:f3:27:48:a1:99:
98:82:cf:8e:56:0e:f1:c9:f4:b8:3e:df:11:43:4e:
ed:a6:b1:38:bc:48:a9:94:58:88:99:44:85:a1:79:
38:1d:1a:47:a0:0b:f6:7e:1e:27:77:70:62:1a:3e:
19:d1:a1:31:a9:01:50:f6:4e:82:54:0b:98:8b:8c:
36:e7:0f:4d:c5:fb:7d:f4:6c:62:36:05:b3:5a:c9:
da:06:65:7c:3f:16:c1:3c:45:fe:1d:97:9f:b1:cf:
65:c5:5f:d2:44:be:c9:14:db:19:5d:9c:4c:ef:93:
9e:ab:34:cc:61:07:21:89:38:4e:4c:91:d7:4a:61:
48:5e:75:cd:3a:62:d3:20:b5:dc:bb:b7:7f:4c:1e:
2d:f3:c8:12:40:fa:f6:6f:16:92:b6:08:73:e7:d9:
c2:7a:db:66:4d:2a:f4:76:03:64:a7:14:78:15:e6:
73:66:87:c5:a7:04:46:03:a2:44:48:a3:3d:ca:64:
53:4f:a2:a2:8a:d1:16:be:39:d2:29:7d:da:1e:8f:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:9B:3B:2E:C7:79:87:72:FC:8A:3C:71:3A:4C:B4:A9:5C:F6:DF
X509v3 Authority Key Identifier:
keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:18:9d:8b:0c:31:d8:50:c1:bd:8e:52:8d:e4:af:df:f0:b7:
0e:40:de:41:2b:84:37:09:6a:bc:a2:46:c7:75:be:af:24:3a:
53:76:21:3c:9c:15:b1:50:e5:b2:e8:63:3e:1d:54:06:b0:37:
17:59:cd:70:b2:f8:52:91:35:e7:3d:88:bd:88:68:aa:ad:2a:
c2:dd:9f:6f:55:d5:73:e5:e9:75:6c:51:3e:b7:d4:4d:c2:f4:
34:9b:3a:92:c6:6b:dc:9c:a1:ca:ef:2b:ad:d3:d9:35:25:78:
53:71:80:6e:7d:4d:1d:e2:5e:82:68:66:f7:2c:7b:21:f6:67:
88:31:ac:cb:63:b6:b1:4a:08:8c:d1:0a:80:6e:2f:06:3f:e0:
a6:b8:21:74:36:59:6c:20:55:93:1c:20:66:70:61:c6:30:15:
43:6e:57:06:a8:df:b9:bc:3f:81:0f:6d:ca:7c:cb:34:66:d3:
b7:08:60:b7:41:08:31:66:01:83:34:52:5d:f2:06:a9:5f:26:
27:b3:04:1d:87:e5:cf:60:c0:ca:8e:6f:c7:12:0e:c0:f6:a8:
d0:35:c1:5a:42:27:78:4c:6e:71:3b:fa:25:a7:84:eb:74:8e:
fe:a2:55:35:1e:25:90:a1:ea:81:70:47:9d:a7:44:92:3b:a0:
69:ef:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:40:00 2026 by rpki-client