Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
File: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json)
Hash identifier: pN4XmKu9kcVxHXsmfCmyq/f2/xuZMoVqyhHY1Zhp2JI=
Subject key identifier: 31:E7:04:F8:4C:8A:1B:87:E9:30:40:F0:05:E1:F6:3A:13:CC:B6:9F
Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
Certificate issuer: /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Certificate serial: 019D27DF78ACA19E721733B4D1229A87DFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
Manifest number: 1050
Signing time: Thu 26 Mar 2026 02:00:49 +0000
Manifest this update: Thu 26 Mar 2026 02:00:49 +0000
Manifest next update: Fri 27 Mar 2026 02:00:49 +0000
Files and hashes: 1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: CD2+rfWzVaUlFxSoo9tnIFOk7haYfE3r0vHuZ5dOT9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:78:ac:a1:9e:72:17:33:b4:d1:22:9a:87:df:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Validity
Not Before: Mar 26 02:00:49 2026 GMT
Not After : Mar 27 02:00:49 2026 GMT
Subject: CN=31e704f84c8a1b87e93040f005e1f63a13ccb69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:43:1c:92:0f:32:b5:5f:ea:fc:48:1b:5a:
91:e1:15:d3:9d:11:f8:8a:84:3d:23:01:68:d8:cc:
6a:25:40:8a:94:da:37:38:36:f4:f4:5d:93:c1:b8:
72:72:ed:1a:26:4a:97:af:c1:72:22:3c:cd:18:3b:
51:f4:3e:2b:38:e4:10:aa:0c:df:5f:a9:05:52:1c:
18:05:71:00:5c:e2:2d:e3:58:aa:89:56:d9:73:40:
39:de:b6:77:c4:13:9c:ef:fa:7b:3d:f0:4f:6b:dd:
70:e9:25:3e:0b:d7:ac:e0:ed:52:7b:dc:a7:7e:0d:
0a:c0:f4:43:ac:64:97:0a:b1:f3:b3:2b:52:c0:22:
82:7c:d9:02:0e:0d:4b:4b:f7:87:e9:c7:9a:0d:16:
f2:cc:87:80:74:b2:04:d9:db:17:b1:15:cb:da:33:
97:e2:be:32:42:f3:7c:96:0b:1f:9e:79:9f:a3:02:
de:71:ca:61:44:43:aa:76:14:45:22:e3:90:a8:8d:
da:c9:ba:f6:f9:10:54:42:95:7b:61:52:43:e4:3c:
0e:8e:a8:9a:4d:69:c4:38:d0:86:e9:e6:f1:e2:d5:
45:39:9e:12:32:af:60:82:9a:db:64:e9:15:75:1c:
2e:75:42:2f:d9:37:3a:be:ee:ad:b4:dc:ba:e6:e5:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E7:04:F8:4C:8A:1B:87:E9:30:40:F0:05:E1:F6:3A:13:CC:B6:9F
X509v3 Authority Key Identifier:
keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c8:c7:95:18:8a:6c:be:23:29:3b:17:d2:86:9a:9f:b0:da:
66:42:4e:36:f9:80:ff:74:13:10:57:e7:79:e9:3f:8d:ea:e2:
61:1b:45:84:91:b0:22:47:ce:55:ed:3d:5f:97:b5:4d:41:9d:
4b:de:10:4b:96:b4:8a:a1:0c:97:68:7f:6d:28:c3:7b:c8:81:
c5:3c:95:7e:35:b7:24:2f:30:d0:7c:74:af:42:bb:c3:fb:5e:
00:29:fe:cd:d5:a0:1a:70:53:98:f1:63:8b:5f:88:e0:70:e8:
88:ac:91:b7:72:e9:f6:98:36:87:db:ef:29:a9:4b:03:38:7d:
06:85:a5:4a:57:3d:ac:15:9f:63:20:ad:26:45:0b:2c:c7:f4:
ef:2b:2c:84:da:f1:72:ec:85:46:be:30:d2:fd:28:79:fd:a7:
83:23:32:6a:98:dd:fc:f8:5f:dd:71:53:e0:6c:35:30:fc:b8:
d9:cb:fa:b6:05:3b:ae:dd:f4:5b:11:58:f1:06:82:e6:a8:3b:
25:d0:50:e0:bf:7c:d1:71:49:b8:c6:5b:08:ac:12:29:5d:bd:
d0:27:ff:31:00:2c:c3:4f:d5:4b:40:be:66:6b:f1:a9:6f:dd:
cf:75:80:23:99:fa:ec:1c:de:07:81:78:d6:8a:a8:a4:00:66:
3a:e5:cd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:41 2026 by rpki-client