Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
File: ZHU9ILmKDudww7UWaj9KB_BRW90.mft (raw, json)
Hash identifier: o3jIUX1jtG/aCmbHi1kNRWwjDp6gmLglzyd4dLdnBdI=
Subject key identifier: A4:F5:20:14:D9:EB:44:65:1E:C7:5F:83:40:20:0C:C8:FB:26:90:38
Authority key identifier: 64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
Certificate issuer: /CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Certificate serial: 019D273AF679217343539563B0B5D818FAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:08 +0000
Manifest this update: Wed 25 Mar 2026 23:01:08 +0000
Manifest next update: Thu 26 Mar 2026 23:01:08 +0000
Files and hashes: 1: ZHU9ILmKDudww7UWaj9KB_BRW90.crl (hash: v+5z7VUnSR93ChmqRDVE6vveyHMXuX5GvjXb6lIJLZA=)
2: uDd7qf0zqTIG_un_H67lDJDvk3s.roa (hash: l340O99LFVdvjl2XUUdkm7/CjXO188wPPi/icNbdVIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f6:79:21:73:43:53:95:63:b0:b5:d8:18:fa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Validity
Not Before: Mar 25 23:01:08 2026 GMT
Not After : Mar 26 23:01:08 2026 GMT
Subject: CN=a4f52014d9eb44651ec75f8340200cc8fb269038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:44:69:bd:2e:78:24:a7:15:83:11:13:6d:
f0:9c:b5:d3:3a:ba:2c:51:76:86:40:f8:2e:aa:f1:
56:ea:b9:0d:6f:be:41:71:f1:46:cb:65:6b:24:95:
52:de:b5:72:ff:6e:3e:87:90:1a:0b:b0:30:ed:9c:
3e:fb:61:47:7a:de:15:57:2f:dd:ba:d1:83:cb:6f:
a4:9c:47:4d:cb:9e:58:6c:8b:dd:94:00:19:5b:b5:
70:48:5e:d6:55:eb:32:8b:1a:31:c1:15:d3:90:7e:
42:1d:78:d8:09:02:80:60:61:3b:81:70:cc:ba:9e:
30:10:a2:3b:74:33:f6:51:3e:05:06:c6:d7:53:80:
65:13:0d:cb:5b:f2:cf:22:9a:b3:8d:29:ce:8f:7a:
61:68:43:2e:be:18:70:c5:7a:9d:d9:7b:9c:20:5c:
88:73:4b:6f:6c:53:29:e0:c0:64:62:27:b4:78:36:
bc:93:05:fd:81:ff:7d:f9:08:20:a8:9e:89:7b:ca:
c3:43:2f:e4:95:5f:60:52:e9:3d:cf:f5:8e:c0:e4:
c4:49:f6:3b:02:e2:bb:7c:a1:8c:70:87:ef:72:c0:
80:71:d5:a4:5d:27:62:6b:67:34:92:1d:28:32:45:
c9:04:85:a3:ca:ff:d3:76:63:c5:6d:50:f3:f8:cd:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F5:20:14:D9:EB:44:65:1E:C7:5F:83:40:20:0C:C8:FB:26:90:38
X509v3 Authority Key Identifier:
keyid:64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2b:f2:68:a9:78:d0:10:12:77:fa:47:5e:21:c0:25:85:b4:
bb:1c:ce:83:dd:1b:c0:2c:a7:a8:d0:f2:4f:16:42:15:e4:30:
22:6e:80:cb:22:be:b0:93:b2:d6:10:78:a4:85:5f:1a:b0:96:
20:2e:e7:1f:ae:ec:6b:69:79:42:e7:30:12:6e:4a:ac:a2:96:
b7:f3:0a:28:67:ea:90:2d:58:49:6f:7e:e8:c2:ad:14:4c:fa:
53:26:f9:d5:b3:38:82:0b:54:5a:f0:ef:90:3e:92:0e:64:06:
31:fd:69:f8:ab:39:33:da:01:6e:58:51:63:f8:3d:2e:95:fb:
e5:57:e0:d5:bf:55:6f:bf:f5:d8:fd:da:d8:f1:bc:f3:22:21:
21:cd:2f:cf:fc:95:fd:f0:a3:5e:fc:a2:7d:ff:b0:a6:fd:44:
7b:ca:fb:17:fb:2e:56:39:8b:90:07:75:df:fe:aa:42:6e:c9:
56:68:fe:3b:6f:cb:f4:2b:8e:6b:72:eb:8c:e7:88:d1:cd:7b:
f0:9a:7c:9b:67:b0:80:3a:cf:37:4a:e4:16:4a:7a:fc:7c:60:
f0:77:4c:74:03:4a:17:ff:db:c1:f8:70:b5:19:ab:46:b8:08:
b4:d9:68:f1:29:82:54:17:a0:4e:c7:ae:bd:45:42:41:c0:a9:
00:a0:47:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:59 2026 by rpki-client