Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
File: zfyNbNSfmv4mTVQumpYU89SsHJ0.mft (raw, json)
Hash identifier: 4idbE19dQcBOXTl0jOBvYBvHFUSr12f59zeNPWudAHE=
Subject key identifier: 7D:9D:0D:BD:8C:26:C4:B8:15:A0:6F:04:7D:EC:75:0E:73:F3:95:BF
Authority key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
Certificate issuer: /CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Certificate serial: 019D2AA9B042F0E96F4FA0028DD01361FC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 15:00:56 +0000
Manifest this update: Thu 26 Mar 2026 15:00:56 +0000
Manifest next update: Fri 27 Mar 2026 15:00:56 +0000
Files and hashes: 1: zfyNbNSfmv4mTVQumpYU89SsHJ0.crl (hash: 9ks3VcmUJ67cCU8bE+4Ya8DDcPEnM7IAYWwJRCuRaH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:b0:42:f0:e9:6f:4f:a0:02:8d:d0:13:61:fc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Validity
Not Before: Mar 26 15:00:56 2026 GMT
Not After : Mar 27 15:00:56 2026 GMT
Subject: CN=7d9d0dbd8c26c4b815a06f047dec750e73f395bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a7:1a:c6:0f:07:82:05:7b:6d:9a:19:72:95:
51:d2:49:d1:02:bb:5e:6b:bf:89:74:14:3c:59:cf:
9d:12:a5:0a:e1:f1:29:68:5d:f3:b8:60:44:14:e4:
ea:a5:dc:03:53:87:c5:fe:76:7e:d9:da:e5:92:c1:
63:b7:fb:0b:c0:5b:f7:01:b4:6b:3d:6f:f1:69:03:
a5:d9:95:5a:f6:1d:d9:e4:31:86:82:41:ac:d6:d4:
55:2e:d6:ae:2e:6b:dc:ca:65:41:ae:75:01:e0:07:
66:36:9b:2e:6c:49:ad:ac:a6:f7:4a:7d:bf:d3:3a:
2c:dc:3b:fb:1f:62:db:4f:01:04:16:42:6a:d5:f4:
d5:f1:c5:07:c3:58:56:87:63:49:46:7c:00:80:7c:
c8:af:0f:e6:a6:21:d7:34:ac:3e:e2:48:aa:03:79:
bb:32:db:88:05:24:d2:3b:56:5b:8c:f9:bb:d8:df:
14:d7:06:08:4b:b6:04:43:33:8b:80:e5:96:79:10:
70:90:a0:2a:03:d3:b4:23:b4:ba:45:bb:5f:e6:4d:
ed:c5:49:49:cd:20:45:b6:33:a1:3b:19:a5:a3:c2:
9c:e5:63:c4:48:f8:b5:75:b3:01:01:5a:38:84:8c:
56:1e:94:dc:22:c9:d8:30:83:1f:bc:cb:4c:8f:fd:
4c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9D:0D:BD:8C:26:C4:B8:15:A0:6F:04:7D:EC:75:0E:73:F3:95:BF
X509v3 Authority Key Identifier:
keyid:CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ef:10:90:d6:cd:20:65:01:43:84:93:d3:20:3b:73:c4:0c:
77:3e:cc:99:2c:30:7b:e5:6a:3e:61:67:d7:e5:3e:04:c2:42:
a4:68:f7:f5:94:65:6e:17:8e:d1:b1:74:03:b8:b6:05:be:e2:
49:11:12:6f:3d:1e:1d:73:02:cf:d2:97:49:dd:88:e6:bf:36:
1e:d5:44:7e:de:ef:8a:3b:38:6c:b0:0f:dd:5c:f0:46:56:6a:
d4:20:21:77:e9:c8:5a:ae:a4:48:c4:3f:1a:75:30:73:a5:c5:
75:6b:2c:03:52:b6:28:2e:ad:58:47:a1:22:46:04:40:cc:02:
fc:38:62:3f:fd:14:3b:39:e4:43:09:0e:04:f5:f6:6b:f6:4d:
90:29:b0:10:e9:a8:fc:8d:c2:7d:0e:2a:87:f6:86:31:cd:12:
49:a4:3a:16:7b:ad:55:1f:93:d4:1f:f1:de:a3:f7:f9:43:6d:
cc:89:4f:d4:f0:64:b2:db:67:de:03:ec:e3:e4:57:e9:7e:f2:
c9:c3:c5:f0:9a:13:84:c9:cb:ce:f6:6d:fc:f1:1f:64:1c:45:
0a:4c:8f:a4:1d:92:ed:44:0b:68:f6:ed:28:74:56:bd:49:a4:
b8:2c:7f:90:e6:0b:d6:50:81:d7:7e:c6:de:27:70:c0:96:97:
dc:0b:4f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:41:15 2026 by rpki-client