Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier: MsAWnHCLD5gOiGc6weFqTmr/hwawYRYH1wQU9ftBCow=
Subject key identifier: 38:97:AE:B0:B3:4B:CB:8A:B9:59:89:EB:97:CE:5E:F9:7A:5D:85:D8
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial: 019D296185E4AB2E2B11BB4A0F299D90AB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number: 1547
Signing time: Thu 26 Mar 2026 09:02:30 +0000
Manifest this update: Thu 26 Mar 2026 09:02:30 +0000
Manifest next update: Fri 27 Mar 2026 09:02:30 +0000
Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: VpJ2+AW2yicd2GcFv4ZQTu/ZAw8PpK7GQpS1SRaT5lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:85:e4:ab:2e:2b:11:bb:4a:0f:29:9d:90:ab:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Validity
Not Before: Mar 26 09:02:30 2026 GMT
Not After : Mar 27 09:02:30 2026 GMT
Subject: CN=3897aeb0b34bcb8ab95989eb97ce5ef97a5d85d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:89:c8:9f:e4:de:54:95:4c:99:53:68:ec:ed:
59:06:f1:ad:58:a7:b2:a4:8a:b9:ff:c8:ca:f1:e4:
b1:f7:a0:b3:60:04:aa:78:11:79:39:5a:65:02:32:
5a:f6:03:f0:f1:c7:1d:00:f6:9e:32:0d:9e:69:12:
47:2b:7b:fa:f8:71:71:d9:ff:9d:3b:c5:c8:55:47:
d5:19:8a:22:7e:92:d7:db:80:39:4d:0e:84:a3:e0:
ae:1a:7a:74:67:73:15:fe:70:70:1d:57:a8:7a:4e:
44:8d:a7:d1:d1:84:79:11:32:7e:c2:5d:28:39:6e:
39:b9:7e:b6:43:cc:65:f0:09:c6:c9:27:c9:6a:c3:
ea:c5:26:17:5e:dd:dd:8b:a4:4e:d6:d3:b8:45:37:
40:c8:46:ec:32:0e:d0:46:6d:53:1c:9d:03:a2:d3:
64:eb:74:56:38:d3:fd:42:63:96:5b:70:b8:63:a0:
e3:29:57:da:a1:cc:1a:87:7f:36:28:d9:27:4c:68:
87:bd:9b:17:3c:2e:ab:b7:9f:3c:ec:f8:40:b3:09:
dc:6d:6f:4f:0f:fb:6e:ae:2e:c5:01:79:07:cd:9b:
20:1d:28:87:09:5a:ca:55:05:83:8e:b1:a4:3e:b7:
ac:8e:2c:63:74:df:31:a0:6d:82:9d:42:30:1f:e2:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:97:AE:B0:B3:4B:CB:8A:B9:59:89:EB:97:CE:5E:F9:7A:5D:85:D8
X509v3 Authority Key Identifier:
keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:7e:db:f0:11:6c:ec:f3:00:79:1f:61:d6:90:96:00:ae:3c:
57:f1:7d:fc:fb:d6:76:a0:cc:fa:bd:d0:29:db:da:df:aa:2b:
87:42:6a:19:8a:4d:fa:0f:d2:cc:7e:be:e5:db:dd:1b:6f:f1:
ce:cd:1f:e8:fe:92:12:d3:da:91:37:68:01:f2:50:c7:45:e1:
b1:62:5c:ce:08:d6:91:9f:e3:2e:7a:bd:37:9d:df:93:98:80:
da:fe:1e:23:9d:4d:36:ac:81:68:43:85:9d:15:bb:f7:d2:bb:
71:56:d1:a3:11:ae:00:91:29:6d:4d:f4:a2:5b:77:b9:61:44:
24:6e:bb:8f:01:15:41:ec:ce:71:db:cc:94:0f:ff:d0:db:1e:
7f:69:02:8e:03:d2:42:ea:1d:4b:e3:3f:07:fa:02:93:26:97:
ba:ff:43:d7:fb:33:4a:6a:2c:6d:99:86:c2:b7:44:da:3d:7d:
ef:9a:4e:68:3f:19:b4:eb:4f:03:b3:a2:69:ca:df:67:42:bc:
23:97:51:e9:47:87:b5:5f:6f:b7:df:0e:30:5f:84:68:1f:58:
fb:54:38:95:2e:34:b6:7f:8b:3b:4a:23:cd:4f:04:90:5c:a4:
98:0e:e5:61:8e:22:c9:3a:b0:78:68:80:ab:41:16:20:95:db:
a8:58:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:27:05 2026 by rpki-client