Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
File: ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft (raw, json)
Hash identifier: Oyh1o21DESPhdG0neUowldXLlYj62KTjaI/EcE7tEr0=
Subject key identifier: 40:AD:DF:8B:93:C4:DF:75:80:D5:99:78:BF:CB:A2:D6:4C:42:07:41
Authority key identifier: 65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
Certificate issuer: /CN=657484cc96e04503457945691d6814ecd66096e3
Certificate serial: 019D29619DB55FE637D8FC06F0E8339D5F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
Manifest number: 0A90
Signing time: Thu 26 Mar 2026 09:02:36 +0000
Manifest this update: Thu 26 Mar 2026 09:02:36 +0000
Manifest next update: Fri 27 Mar 2026 09:02:36 +0000
Files and hashes: 1: ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl (hash: fdxmmlSIyVC6chgwPIBfnmIYKWaK3hcVaVeJJc2TBPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:9d:b5:5f:e6:37:d8:fc:06:f0:e8:33:9d:5f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657484cc96e04503457945691d6814ecd66096e3
Validity
Not Before: Mar 26 09:02:36 2026 GMT
Not After : Mar 27 09:02:36 2026 GMT
Subject: CN=40addf8b93c4df7580d59978bfcba2d64c420741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:17:0d:91:71:66:ff:f9:d1:17:cb:b6:70:
44:ce:13:2d:46:b6:72:fd:47:ff:c5:b4:2b:3d:4d:
f3:b3:2c:78:4f:cf:e5:87:fb:2e:e6:c1:3c:57:c5:
6a:6f:a1:6b:2e:99:78:17:64:71:2b:ef:31:51:e6:
ab:6c:95:53:19:09:0a:70:d9:a5:ad:e7:c0:aa:40:
33:50:ca:8f:43:5c:7f:df:ba:96:63:ea:73:30:71:
b4:a9:5b:05:64:2a:dd:a3:13:99:4c:2c:b0:82:7c:
12:92:fb:fd:21:1f:ef:0a:fa:7b:a9:c0:ac:9d:d6:
18:a1:e3:1f:8d:1b:72:c5:d5:d0:f0:d9:45:56:48:
83:48:b1:09:c2:9d:01:0a:e5:28:f9:0c:64:8f:87:
5a:d8:a6:49:0b:99:b6:cd:5e:9a:eb:88:03:38:72:
d5:23:08:74:fe:e6:da:d5:01:89:72:15:81:29:d0:
a0:eb:e9:05:e4:16:3b:1f:5f:8c:5b:32:48:94:22:
9f:f3:24:ae:5a:b7:f6:ba:f3:52:cc:d5:8e:53:a9:
63:c6:44:26:94:b9:89:1a:3f:86:55:22:c1:cc:e6:
4d:96:4c:2d:ec:b7:40:3d:fc:c0:0b:c5:3c:82:9c:
7d:23:fb:52:e5:d2:cd:43:29:b9:db:54:87:9b:03:
09:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AD:DF:8B:93:C4:DF:75:80:D5:99:78:BF:CB:A2:D6:4C:42:07:41
X509v3 Authority Key Identifier:
keyid:65:74:84:CC:96:E0:45:03:45:79:45:69:1D:68:14:EC:D6:60:96:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZXSEzJbgRQNFeUVpHWgU7NZgluM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6871f6-59c6-4729-b5b8-8185286b3599/1/ZXSEzJbgRQNFeUVpHWgU7NZgluM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:15:00:f5:48:80:f7:73:dc:5d:1b:3e:0c:4f:f5:13:8f:f2:
5f:17:10:7a:a8:78:3b:a5:34:17:22:84:77:95:91:89:7d:f3:
f6:ba:78:f3:66:11:81:0c:1f:04:f6:85:7e:fb:3f:d3:4a:cd:
9b:fd:31:53:d1:fa:3e:f1:f6:47:c1:29:15:06:15:06:26:0a:
23:1d:51:7f:10:e6:3c:f1:2f:e2:06:12:21:fd:f3:6d:b4:91:
d4:0a:bb:e8:aa:54:63:88:44:ce:31:d8:aa:be:fc:d8:6a:54:
a9:aa:50:e1:4b:79:85:c1:be:69:bb:9e:58:d5:aa:0f:6f:2f:
b5:df:48:80:43:82:97:96:aa:d7:1d:cd:e5:cf:b2:45:0f:7b:
65:e2:7f:4f:f9:b3:0f:9f:04:90:b8:82:0f:b0:5b:68:c2:5f:
87:f4:44:56:6b:3a:0b:d8:c6:d6:99:f1:4e:fb:7d:e1:47:d7:
2b:a7:a5:e3:c3:03:c6:4c:92:ea:91:2c:7b:b9:5f:d5:f0:ec:
e3:fd:3d:f2:4f:62:1d:9c:3c:aa:d2:bb:f5:d7:b2:4e:fd:41:
65:54:67:ee:d9:2d:66:06:a2:5f:ee:24:4a:ca:f9:50:1f:b5:
b5:ba:49:97:ea:31:36:00:32:06:02:cc:d0:97:df:c4:79:5e:
54:b0:d7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:52 2026 by rpki-client