Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.mft
File: zdzNhA0BvLL8qSppg49M2mxqdKg.mft (raw, json)
Hash identifier: Ick/1Zdhf/f5xSqgsXPt6Za4xDJN3454r75Jy77e5cE=
Subject key identifier: F3:76:FB:F8:46:17:C4:BE:6B:D9:02:72:71:38:99:78:DB:3E:7D:B8
Authority key identifier: CD:DC:CD:84:0D:01:BC:B2:FC:A9:2A:69:83:8F:4C:DA:6C:6A:74:A8
Certificate issuer: /CN=cddccd840d01bcb2fca92a69838f4cda6c6a74a8
Certificate serial: 019D27A894F4567A5AE7962450EEB8D97FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdzNhA0BvLL8qSppg49M2mxqdKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.mft
Manifest number: F3
Signing time: Thu 26 Mar 2026 01:00:52 +0000
Manifest this update: Thu 26 Mar 2026 01:00:52 +0000
Manifest next update: Fri 27 Mar 2026 01:00:52 +0000
Files and hashes: 1: zdzNhA0BvLL8qSppg49M2mxqdKg.crl (hash: zFQFdqtp2aYsOHqe9kSwiwMyOLHGde68KI+s3Dnt01U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdzNhA0BvLL8qSppg49M2mxqdKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:94:f4:56:7a:5a:e7:96:24:50:ee:b8:d9:7f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddccd840d01bcb2fca92a69838f4cda6c6a74a8
Validity
Not Before: Mar 26 01:00:52 2026 GMT
Not After : Mar 27 01:00:52 2026 GMT
Subject: CN=f376fbf84617c4be6bd9027271389978db3e7db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:da:66:b4:59:eb:15:6f:58:b0:85:f8:09:
b1:0d:88:12:e5:e4:cf:8a:45:4d:0b:70:de:dd:0c:
6b:1f:6e:37:20:ec:76:41:23:15:b4:d0:b4:25:1d:
31:7a:9a:b6:30:7d:c3:39:9d:ae:99:2e:28:45:9c:
eb:ad:40:5a:4a:7e:2b:e6:20:11:0c:e4:81:cd:df:
1f:81:63:ce:3a:5b:a9:25:ed:0a:b1:0c:3a:08:1f:
85:c4:cb:30:70:aa:2a:ea:50:5c:0c:ee:14:fd:79:
fd:41:89:0c:b1:3b:40:ff:bc:0e:b6:0e:39:87:e5:
9a:3c:d6:d9:d2:da:df:fe:a3:33:71:68:b3:dd:d1:
2a:f6:24:06:49:53:66:8a:bf:69:b5:6b:f4:7a:3d:
91:90:72:d0:c4:48:0e:fc:df:19:84:76:dd:ae:6b:
ec:66:44:16:f6:eb:e8:ca:e5:9f:7d:19:e6:f2:96:
38:05:c9:34:e4:65:31:f1:a4:0d:a3:f2:5a:d8:95:
48:30:dd:39:91:f8:8d:04:e7:6d:5b:22:ea:0d:94:
cf:ae:6c:32:15:f1:94:03:30:cf:b4:90:a4:e3:e0:
da:ff:6c:bc:51:1a:19:d1:a2:5a:75:4a:2c:62:f3:
0b:b2:75:6d:9d:25:ed:05:72:43:f6:93:dc:4a:c1:
2a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:76:FB:F8:46:17:C4:BE:6B:D9:02:72:71:38:99:78:DB:3E:7D:B8
X509v3 Authority Key Identifier:
keyid:CD:DC:CD:84:0D:01:BC:B2:FC:A9:2A:69:83:8F:4C:DA:6C:6A:74:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdzNhA0BvLL8qSppg49M2mxqdKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/073e4e-2a4a-4ebd-92fb-683e2b995616/1/zdzNhA0BvLL8qSppg49M2mxqdKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:17:bb:0f:da:2c:35:01:5e:52:30:d8:37:b0:e1:81:f5:22:
03:20:44:86:60:f1:59:31:a0:2a:f6:84:3a:3b:ae:ae:be:73:
fd:af:5b:67:ec:68:91:79:4d:1e:76:79:22:08:69:84:bd:bd:
f9:93:00:4a:c3:8e:10:14:b4:99:bd:7a:a3:8c:03:60:01:cd:
01:2e:ed:05:ef:e9:2d:3b:84:5b:a6:87:33:b1:b1:a4:c8:31:
1e:57:61:8f:de:8e:96:b9:3c:94:41:d9:ea:e6:e6:b3:80:b0:
0e:24:a3:fd:82:8f:26:74:c9:d5:f2:0d:e6:34:7b:cb:e4:32:
82:82:3e:4a:b5:43:f1:12:29:03:48:1a:90:ce:09:6f:36:0a:
18:79:54:ff:2b:7d:e2:19:22:56:3f:07:e3:ce:d3:23:76:ab:
f0:e0:e4:7e:59:72:32:b0:d0:18:78:06:05:ce:4f:a6:1f:60:
fc:e5:1f:dc:7c:0c:99:ac:07:ae:f3:ca:ea:14:28:30:ff:e5:
ef:ef:a3:ae:c0:db:84:47:e5:6f:27:7d:0e:69:a6:8a:da:b4:
aa:d2:44:2d:9c:54:55:84:5b:e5:34:8c:96:71:48:19:f7:62:
8c:5c:0d:f1:89:28:83:fa:8d:f9:ac:0a:56:0b:4a:79:68:72:
5a:d8:f1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:30:33 2026 by rpki-client