Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
File: ZpDQciFADjewHnSnEvrnxtcDFZU.mft (raw, json)
Hash identifier: YlMXp+tK7hKuYSIgv/us7VWqVeY9/GwZHVDG7KcobME=
Subject key identifier: 1E:C3:17:A1:D6:11:AB:69:22:07:E1:CE:F9:E3:57:07:1E:B9:23:F5
Authority key identifier: 66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
Certificate issuer: /CN=6690d07221400e37b01e74a712fae7c6d7031595
Certificate serial: 019D265FEAD2A7DE172F1723D1B78FE8A28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
Manifest number: 1333
Signing time: Wed 25 Mar 2026 19:01:53 +0000
Manifest this update: Wed 25 Mar 2026 19:01:53 +0000
Manifest next update: Thu 26 Mar 2026 19:01:53 +0000
Files and hashes: 1: ZpDQciFADjewHnSnEvrnxtcDFZU.crl (hash: r3CY1er/0ELyDhlDO7nI+e/mO0aczPgk4Yxcckrf8T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ea:d2:a7:de:17:2f:17:23:d1:b7:8f:e8:a2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6690d07221400e37b01e74a712fae7c6d7031595
Validity
Not Before: Mar 25 19:01:53 2026 GMT
Not After : Mar 26 19:01:53 2026 GMT
Subject: CN=1ec317a1d611ab692207e1cef9e357071eb923f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:ae:f3:fe:35:b8:34:7f:26:ea:36:81:ea:
46:07:49:d3:bc:0f:3a:bf:a9:f8:63:72:c4:3e:35:
da:a5:0a:5a:29:cc:24:e7:32:20:b9:55:32:79:16:
db:2b:65:07:c1:8d:68:0e:b1:45:8e:9b:69:b7:5e:
04:4b:eb:85:34:ba:76:aa:08:d8:07:a2:01:5e:ec:
0b:1f:ca:39:87:e6:72:45:2c:dc:a9:c8:c7:b8:0e:
76:a7:ae:18:1c:47:8c:30:6e:9e:b1:ab:4a:ff:ca:
e6:bf:5a:55:2b:41:89:bc:d8:cd:01:00:70:0e:e5:
15:af:6c:de:28:b6:dd:f7:b4:ef:cc:5b:9a:09:76:
2f:42:f9:46:64:0f:1d:58:04:51:ea:97:23:c6:d9:
d2:a9:64:e3:36:39:0e:c5:aa:3a:64:9c:39:05:7d:
14:5b:52:ec:ce:6b:a6:1f:8c:15:2f:59:bc:54:70:
1e:1e:81:ce:19:41:40:af:3b:94:85:26:9a:f6:bd:
97:f3:5c:64:06:7f:15:ca:c4:55:c0:b5:4f:c4:bd:
4c:db:31:73:25:42:18:45:45:8d:2e:ef:2c:4c:8c:
ea:7d:d1:ee:63:cf:69:7e:82:90:a1:85:a7:8b:ed:
21:cb:a6:9e:e7:73:eb:21:cc:2f:6a:35:fb:0b:f2:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:17:A1:D6:11:AB:69:22:07:E1:CE:F9:E3:57:07:1E:B9:23:F5
X509v3 Authority Key Identifier:
keyid:66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4c:28:89:90:f9:32:db:bd:53:cb:72:ed:23:45:a5:14:9d:
34:9f:91:5f:bb:39:f7:4a:d2:4b:c6:1a:5a:41:c1:43:f0:c3:
31:79:c1:55:b6:6d:c5:41:93:59:d6:fc:1b:81:50:7f:5c:ed:
0c:a9:c3:da:46:81:48:b5:58:f6:cc:8b:97:9b:aa:97:1e:48:
fd:0e:b4:4d:c1:c7:aa:ad:d8:7d:4e:df:18:9b:1f:f7:91:5a:
57:d5:49:af:fc:f2:a5:52:cb:52:db:7c:b2:29:d8:38:63:10:
a1:eb:c5:aa:fe:61:64:03:9e:0e:df:70:26:39:db:72:70:1a:
44:55:5a:08:49:a7:c6:28:be:83:88:d9:93:dc:3a:9a:c5:c0:
80:97:12:05:04:73:0b:49:97:39:78:94:9c:fb:bd:29:89:7e:
f0:da:7f:10:96:0b:e6:3e:d8:1c:55:20:ad:13:78:01:22:35:
98:2e:2a:f4:c1:f9:da:73:52:d9:00:d3:18:4a:c2:9c:d2:60:
9f:87:d6:a9:05:00:21:de:e4:f6:66:f0:5c:3d:2d:b4:da:85:
6b:2f:dc:7c:61:b6:00:ce:ba:41:b9:4f:ad:67:46:68:7e:14:
39:78:24:2a:8b:30:55:00:07:d7:18:04:5b:bf:d6:cc:74:80:
d6:dd:25:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:17 2026 by rpki-client