Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
File: zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft (raw, json)
Hash identifier: 9quDm+zlVP7sBn1N4pryENTgfPt96HR3mbzJi9e3KLY=
Subject key identifier: 24:27:F5:B3:F2:FC:74:C4:44:6C:11:66:3D:CA:72:2D:63:8A:C5:E8
Authority key identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
Certificate issuer: /CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Certificate serial: 019D2A0455054575DB9D6E52BA21ADA03A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
Manifest number: 07E9
Signing time: Thu 26 Mar 2026 12:00:20 +0000
Manifest this update: Thu 26 Mar 2026 12:00:20 +0000
Manifest next update: Fri 27 Mar 2026 12:00:20 +0000
Files and hashes: 1: zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl (hash: CUWzBXMFKyTeGVkrNQuGQGkrsPccDe3dwZjRX1syTF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:55:05:45:75:db:9d:6e:52:ba:21:ad:a0:3a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Validity
Not Before: Mar 26 12:00:20 2026 GMT
Not After : Mar 27 12:00:20 2026 GMT
Subject: CN=2427f5b3f2fc74c4446c11663dca722d638ac5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:ba:8c:7d:16:54:68:46:3a:90:ee:89:59:
06:c0:df:63:05:b7:fd:a0:30:d3:04:96:bb:20:dd:
51:f3:bc:d8:ce:85:fa:78:9b:06:ef:4e:8e:c3:82:
37:f9:cd:c9:d9:02:5b:05:30:da:38:67:34:f1:dc:
83:9c:75:6f:8b:8e:50:88:d1:8b:45:3e:ee:1b:28:
52:d0:78:83:a9:a2:02:04:0b:48:44:87:4b:9a:01:
db:93:95:c5:67:a9:9b:b3:10:a5:42:18:e6:54:b0:
71:38:52:a6:50:91:3d:e2:c0:e6:b9:36:03:a9:e9:
f9:5c:14:c3:12:a5:02:b2:52:30:60:a9:22:0f:e7:
94:8e:a7:fb:a8:74:71:81:c5:28:db:96:76:0b:8a:
34:e5:ac:4c:c9:4f:a6:2b:9c:7f:a6:8a:81:d9:14:
30:e6:35:cd:42:6c:db:05:ab:03:02:a9:df:6c:e5:
1a:e5:56:93:03:2d:7c:12:b4:53:ca:80:36:0b:a8:
b3:31:da:53:b3:87:94:18:9f:59:33:f6:25:22:ff:
93:77:21:a4:8f:c3:fc:4b:4f:93:0d:5c:26:71:53:
eb:ab:d8:f0:20:a5:54:8d:b2:58:a3:6a:d7:74:ad:
cb:a7:ae:72:ea:3f:44:9b:9b:02:da:66:ac:c2:00:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:27:F5:B3:F2:FC:74:C4:44:6C:11:66:3D:CA:72:2D:63:8A:C5:E8
X509v3 Authority Key Identifier:
keyid:CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b1:4a:9e:25:55:bc:f9:7e:88:ee:3b:f5:65:e1:73:7d:a9:
cf:48:db:bd:2b:3e:cb:9b:12:55:24:f2:80:ef:52:2e:bc:95:
15:dd:dd:5f:28:a9:39:eb:6d:20:69:92:1d:ca:9c:4e:d3:a4:
89:84:97:c3:8b:d7:a8:44:79:6c:68:c9:77:a8:1e:73:d2:90:
fe:96:04:bd:00:37:14:dd:18:c4:a6:b2:09:1e:3e:bc:4d:b5:
4e:66:53:a9:b0:d4:93:60:0c:13:d0:5d:e4:58:3a:28:38:6d:
0a:01:84:62:53:e0:d2:b4:2e:8a:cb:ff:5e:d3:3d:ad:00:09:
91:0d:20:73:86:af:60:34:99:bb:9e:30:71:47:23:68:d8:0a:
28:b6:a9:eb:5b:31:ec:89:28:03:0b:ee:5f:72:17:7e:b2:da:
d0:20:7b:46:a3:a5:5c:dd:6b:44:4c:3f:cb:e9:49:55:9c:73:
42:be:20:09:bc:7a:16:5f:95:90:fe:90:0d:8f:0c:27:a4:9b:
e6:eb:6f:03:d0:d4:bb:ff:ee:23:0c:f0:53:fb:dd:aa:c0:82:
79:95:fe:1a:ea:17:a4:31:f3:55:8f:79:9d:73:98:e7:c9:4c:
55:9b:a5:20:16:6b:ff:34:ae:68:75:15:ed:52:5b:55:c8:38:
32:4e:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:01 2026 by rpki-client