Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
File: z379uI0GEsUL1dfhZa94NPDdPwQ.mft (raw, json)
Hash identifier: Key/tK5iGol6m0Zih0lZSMLvtBwi3Z54maAbwsD1TXs=
Subject key identifier: C1:C4:FD:F9:05:BF:05:B7:DA:55:02:A5:8F:EE:50:31:B2:11:62:B1
Authority key identifier: CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
Certificate issuer: /CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Certificate serial: 019D28F26AF426ACF8BEFA629528DC733761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
Manifest number: 033B
Signing time: Thu 26 Mar 2026 07:01:08 +0000
Manifest this update: Thu 26 Mar 2026 07:01:08 +0000
Manifest next update: Fri 27 Mar 2026 07:01:08 +0000
Files and hashes: 1: z379uI0GEsUL1dfhZa94NPDdPwQ.crl (hash: RbEValhOtdhHD2sR1girUxOUPO+F2M8ZfORp52frdt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:6a:f4:26:ac:f8:be:fa:62:95:28:dc:73:37:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Validity
Not Before: Mar 26 07:01:08 2026 GMT
Not After : Mar 27 07:01:08 2026 GMT
Subject: CN=c1c4fdf905bf05b7da5502a58fee5031b21162b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:7b:e4:ea:88:c9:81:5d:6c:42:c0:d6:fe:
9e:3e:19:19:6a:df:07:35:2c:e0:1f:fc:27:e6:dd:
86:bd:ac:de:fb:5e:8f:65:4c:97:a6:27:b9:73:03:
67:99:f7:8e:6b:73:29:e7:c9:e4:c9:61:f5:84:b5:
0a:c3:d8:8b:cc:ba:bd:fe:2a:db:ce:b4:ff:3a:91:
11:13:98:e2:39:b1:bf:39:b6:30:35:d7:85:1d:ec:
f8:0f:5c:e1:c1:fe:ff:eb:ad:5f:4e:f6:98:ff:98:
a3:f0:2a:10:cb:af:ab:d0:28:3c:c6:c1:bc:a5:f4:
12:fc:ca:cd:f2:bf:d4:4a:a4:5a:29:f7:9a:8f:31:
fd:69:02:e6:07:61:c5:0e:52:4d:c7:ac:68:89:e7:
16:23:6a:9c:8f:c4:d5:04:0f:92:3f:d0:fa:e1:09:
87:0c:67:38:d2:57:33:4a:36:a8:6d:5b:c3:26:8a:
2b:bb:ec:cb:b9:56:69:9e:18:9b:34:6c:a0:cc:69:
14:f0:83:04:38:49:39:83:f8:13:3d:75:21:42:96:
d4:91:ce:d7:8a:76:3e:54:0e:0f:02:46:1b:86:18:
f4:99:2a:0d:6f:6c:3a:29:1b:bf:46:5c:b9:ed:3e:
99:5b:e7:72:72:ec:d5:14:60:cf:e6:ed:79:61:82:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C4:FD:F9:05:BF:05:B7:DA:55:02:A5:8F:EE:50:31:B2:11:62:B1
X509v3 Authority Key Identifier:
keyid:CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a0:03:00:ab:c8:1c:e5:27:4f:86:e8:36:33:01:66:1c:b9:
41:4b:16:7a:59:90:af:d2:d4:a3:05:89:65:2f:36:f7:e7:fa:
e8:c7:a4:59:13:cb:02:fc:99:3f:c1:34:ae:9d:e9:70:e1:3a:
3f:20:40:8c:1e:e7:5f:bb:7b:95:5f:e7:02:49:ad:4e:ae:c9:
56:e6:94:0a:86:f2:33:83:e6:77:4e:01:dc:2e:6c:47:86:44:
50:50:5e:f1:6a:89:c5:6d:5e:97:35:11:d7:c7:37:7b:da:e8:
22:ff:dc:1b:dd:73:5e:3a:80:a5:02:36:c6:62:d6:4a:62:a5:
0d:64:f2:e0:d9:92:93:30:ba:ee:31:04:d7:a7:59:c0:14:7a:
e7:7e:99:ce:28:c1:7e:5c:7c:e1:9b:b0:2b:cb:ed:f8:01:90:
be:9c:f7:3e:2d:8e:1c:f7:93:bb:2d:cc:0e:e0:9d:22:ef:d4:
1c:fa:32:b4:94:39:94:67:ae:0a:8c:e6:cb:98:84:ca:59:19:
7d:45:e9:34:60:5f:b0:66:ae:31:48:86:af:20:90:4f:fb:c7:
17:68:32:ef:0d:55:ae:86:67:d8:53:dd:88:a2:21:d0:92:4b:
2e:03:16:4b:8d:57:ae:d0:82:08:ee:b3:d3:5c:e1:97:ef:f4:
aa:fb:b0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:54 2026 by rpki-client