Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json)
Hash identifier: BCH5JQvQ9d6/5EJMrbPS25M0qzgQ6ZcVMKDmVKtCbhE=
Subject key identifier: 4A:B2:87:5E:59:64:13:5C:FD:A6:B8:F0:3E:B2:AC:19:B5:3F:E8:62
Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Certificate serial: 019D2704DB10CBFD23F06EC9B19B2617EF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
Manifest number: 1213
Signing time: Wed 25 Mar 2026 22:02:02 +0000
Manifest this update: Wed 25 Mar 2026 22:02:02 +0000
Manifest next update: Thu 26 Mar 2026 22:02:02 +0000
Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: 5/nR1Yxs0tQHJE0mK0OhUJvV07stch8S23uL+OKG6YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:db:10:cb:fd:23:f0:6e:c9:b1:9b:26:17:ef:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c
Validity
Not Before: Mar 25 22:02:02 2026 GMT
Not After : Mar 26 22:02:02 2026 GMT
Subject: CN=4ab2875e5964135cfda6b8f03eb2ac19b53fe862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a2:11:eb:b4:5a:a6:f8:f4:e3:ea:db:ad:c8:
42:f6:f0:b6:a0:38:6a:cd:c4:24:03:9a:da:24:5f:
10:b4:fd:8c:39:47:b5:67:55:ed:98:da:31:09:7f:
02:80:be:4a:9c:68:04:c8:19:03:63:74:dd:db:f5:
9a:c0:6f:70:c0:16:95:40:ad:1f:ef:e7:5e:de:33:
75:61:4d:df:41:9a:c4:91:f4:f4:31:3b:0f:60:2a:
34:79:48:75:78:bb:e3:79:ec:8f:90:98:31:35:8e:
63:4c:9e:b8:94:7c:b9:22:14:d0:b9:aa:6b:e8:7c:
d9:ec:aa:37:f6:20:a0:7d:1c:ea:8b:87:6d:64:c2:
6f:70:68:21:80:90:a7:2f:99:26:da:d9:30:63:a0:
cf:13:2b:22:0a:60:52:1e:3c:81:68:33:30:42:f1:
21:ed:d3:26:29:59:e3:8f:03:9b:b9:7a:f2:a8:cb:
ba:69:1d:c1:6e:8d:76:47:07:5b:9e:bd:21:96:a2:
47:69:20:c4:fc:c5:f8:9c:99:f4:b8:43:3f:85:d0:
a7:77:b8:cd:42:a8:4f:8c:90:52:7e:4b:c4:3e:20:
3f:93:08:d3:c7:99:f4:42:01:0d:4a:8b:3d:86:ca:
1d:27:42:3f:75:41:e4:f0:58:56:97:bb:c8:70:f5:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B2:87:5E:59:64:13:5C:FD:A6:B8:F0:3E:B2:AC:19:B5:3F:E8:62
X509v3 Authority Key Identifier:
keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9d:e5:cc:d5:bf:3a:95:14:2e:ed:3c:bd:a1:b3:05:9c:1d:
aa:d3:07:c2:be:6f:15:d2:68:91:12:aa:03:6e:c1:a1:ad:e5:
32:27:d5:57:26:b2:8d:2a:8a:bb:df:70:ec:18:81:fe:d5:14:
e7:62:c8:39:72:d0:9f:30:f4:6f:be:ba:43:47:e0:63:78:07:
5c:36:67:70:13:ad:bc:0e:fd:a8:a2:a7:2a:2a:0c:54:bf:85:
1b:6c:70:22:51:4e:9e:4b:65:ff:99:6e:97:18:7a:79:a7:b1:
27:9f:0c:35:fb:f1:ca:0c:8b:9c:2b:b1:06:5e:94:73:68:e1:
bd:9f:e8:ac:f0:f4:72:7f:f6:fa:ab:5e:cc:d2:48:ee:97:40:
97:44:96:a6:41:0c:1c:83:83:28:8b:b0:dc:45:05:47:3f:b8:
7a:4f:c6:4f:74:ea:db:c4:c3:c6:79:60:b5:f7:9e:5a:cd:d1:
08:eb:49:c6:67:2f:78:ce:21:2e:f3:35:17:d3:25:e1:98:b8:
4d:d7:8c:80:01:2b:a5:f5:79:10:37:3b:a2:ef:a4:d3:92:71:
96:dc:06:ce:c6:3c:15:a6:c3:2b:9c:d5:f4:8f:55:f6:8c:ad:
a7:09:86:50:c8:95:35:82:30:a3:2a:f5:7b:21:96:91:f2:cc:
ad:1f:23:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:16 2026 by rpki-client