Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json)
Hash identifier: wxibGSzVB/dN0NTOeNcBCcEZhZ619VHse1sDn9SeXq4=
Subject key identifier: 03:EA:D3:E4:DA:30:6B:EA:46:89:81:1F:8C:6B:C7:81:47:E9:40:A6
Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
Certificate issuer: /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Certificate serial: 019D27046122BF896F28BB5E6A2934F679E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
Manifest number: 0227
Signing time: Wed 25 Mar 2026 22:01:31 +0000
Manifest this update: Wed 25 Mar 2026 22:01:31 +0000
Manifest next update: Thu 26 Mar 2026 22:01:31 +0000
Files and hashes: 1: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: cP5nVFBBPgJVSqxOWPqoiOYUWclaYrKPFG2gZBIwFBc=)
2: zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa (hash: /Tmx9Ly9zFoq7yV+T0VGCTT8klLFQNZ6UtKDdkPo4ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:61:22:bf:89:6f:28:bb:5e:6a:29:34:f6:79:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Validity
Not Before: Mar 25 22:01:31 2026 GMT
Not After : Mar 26 22:01:31 2026 GMT
Subject: CN=03ead3e4da306bea4689811f8c6bc78147e940a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:40:06:b7:55:11:ce:5b:77:8b:42:96:43:
82:47:5e:dd:32:95:db:fe:d0:da:dc:54:90:b4:c3:
b1:91:50:98:3f:b9:67:af:f4:2c:f1:e9:c6:a5:f1:
29:42:a5:a2:a9:72:ac:ea:de:9c:b6:01:d4:b6:0e:
d9:95:37:b7:d8:33:39:47:8d:77:7c:5f:dd:5c:f2:
0a:ca:9c:72:fc:8b:5d:b5:e2:8c:ae:02:a3:5b:c8:
c6:24:65:ce:5d:1a:04:68:ec:67:f2:31:66:03:45:
5d:da:8f:e8:69:c0:af:cf:63:ba:3e:50:d6:91:35:
aa:73:b4:13:13:1c:a6:19:6a:62:08:7b:cb:85:8e:
13:bf:ec:21:62:61:89:4b:f3:74:8b:bf:cf:fd:b1:
5e:a8:13:ff:44:cb:b0:8f:1d:99:f7:96:d9:a3:7f:
ce:fd:b9:5a:0a:86:6e:1b:67:00:85:e8:bd:74:b4:
2d:2c:1e:87:a2:c1:1c:49:15:a2:78:86:dd:2d:b3:
0d:c6:f7:40:52:d3:16:c1:37:6c:8f:f0:53:94:e8:
42:3b:cf:d4:28:83:85:9c:4e:ef:a2:3e:b6:a1:c9:
79:ad:9c:1b:61:1c:86:95:a4:2d:5d:61:22:4f:1a:
0a:1a:9d:ff:cc:33:81:bb:91:be:c1:25:f7:11:bd:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EA:D3:E4:DA:30:6B:EA:46:89:81:1F:8C:6B:C7:81:47:E9:40:A6
X509v3 Authority Key Identifier:
keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f1:13:78:23:fb:58:b2:76:38:d0:00:22:54:96:db:6d:84:
3a:be:85:c0:c2:20:b3:2c:84:15:da:f0:b8:62:0c:28:1f:19:
37:fd:99:6b:f2:98:21:7a:83:27:f0:df:3a:a6:48:ed:3e:90:
dc:fa:f0:2b:82:3b:88:21:c2:8a:84:0c:ee:0f:e7:64:e7:75:
6f:fa:72:97:84:98:fc:f6:57:95:a6:f6:6a:39:15:61:d4:05:
1e:11:69:a1:9f:da:38:b0:33:bc:1b:da:c7:9c:9a:a1:a3:50:
8a:14:18:6b:ec:62:58:af:6e:75:0a:a6:da:96:a6:bc:cf:a6:
62:b7:92:fc:63:eb:78:17:47:23:5b:e6:4a:cf:3f:33:3c:70:
d2:68:10:71:f7:cc:60:a1:ce:d9:da:5c:71:45:41:66:03:c7:
74:92:fe:d3:54:da:89:61:5c:2e:2d:c2:4e:ad:37:01:e2:80:
15:b2:a2:56:9a:96:cc:15:68:49:73:17:5c:d9:03:0a:2a:48:
9d:85:30:86:70:c1:15:9b:98:60:2b:d2:89:a7:2c:95:3f:06:
4b:0e:f9:b3:ae:f0:0f:e0:f7:05:f7:72:4a:a0:71:a8:24:39:
d9:f2:59:20:4b:bb:7c:7c:77:b6:d2:c2:23:47:0b:c0:96:b0:
6c:aa:60:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:10 2026 by rpki-client