Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
File: _zEXrp1q4OHko4t0mrv52eSSwoU.mft (raw, json)
Hash identifier: eT1Xj4tzMyX5z07BIZ8WbcdNJwLoXCaTo/g8fORrrbo=
Subject key identifier: F1:BA:30:4B:39:A0:AB:23:42:1E:8C:26:4F:B5:3F:EB:2B:2E:13:73
Authority key identifier: FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85
Certificate issuer: /CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285
Certificate serial: 019D28F28BB4A4C84341642222EADAF7303E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
Manifest number: 0431
Signing time: Thu 26 Mar 2026 07:01:17 +0000
Manifest this update: Thu 26 Mar 2026 07:01:17 +0000
Manifest next update: Fri 27 Mar 2026 07:01:17 +0000
Files and hashes: 1: _zEXrp1q4OHko4t0mrv52eSSwoU.crl (hash: /G0GggZev6jSM3tOlG+ftVadNo4PDB2Np6bDRZYaNyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:8b:b4:a4:c8:43:41:64:22:22:ea:da:f7:30:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285
Validity
Not Before: Mar 26 07:01:17 2026 GMT
Not After : Mar 27 07:01:17 2026 GMT
Subject: CN=f1ba304b39a0ab23421e8c264fb53feb2b2e1373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:b6:42:da:df:1c:59:b3:8c:08:8d:d2:d2:
13:c5:f2:18:86:0a:f5:d9:d4:6a:af:93:17:09:05:
5a:bd:ce:ff:c0:16:be:c0:e5:aa:03:9f:01:e6:59:
0f:2b:a5:32:f9:30:3e:53:07:c5:7f:e5:bd:1a:b7:
38:11:1e:0b:33:ca:0e:de:10:4a:b5:d5:fb:67:35:
18:40:28:c7:f8:5c:b3:ae:d4:85:5a:26:ea:33:b9:
e7:51:8e:a8:4d:51:d3:8f:1a:ec:0b:b1:54:ac:c3:
fb:cd:03:79:81:c0:29:f7:f2:c6:db:68:b9:03:20:
b6:7c:b2:61:47:6d:c4:93:0b:8d:5d:0c:99:78:22:
93:b9:2d:d3:9f:cf:a6:ae:40:2b:49:99:47:c3:8e:
60:77:ea:7b:57:5a:9e:e3:8b:95:23:d4:f8:85:c3:
88:35:0d:7d:b0:81:22:23:64:5c:ff:5b:93:95:5e:
d6:f0:76:7f:26:fc:6f:fd:03:01:11:ef:bb:bc:fa:
c1:f4:6a:45:f1:a8:90:61:2b:f3:5b:70:2b:97:b4:
d8:a6:ac:d0:9b:90:2e:1e:06:1e:64:fa:04:96:13:
68:43:6a:4a:e2:66:19:91:85:cb:23:bb:a7:55:5f:
c1:eb:46:9a:c4:18:d6:68:b1:26:a4:b5:6c:db:f1:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BA:30:4B:39:A0:AB:23:42:1E:8C:26:4F:B5:3F:EB:2B:2E:13:73
X509v3 Authority Key Identifier:
keyid:FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:af:c9:e7:45:54:44:98:c5:66:3e:59:12:88:41:5f:e8:39:
4e:dd:47:d3:57:1f:c3:5e:dd:30:42:bf:12:5f:25:a2:6a:6f:
5c:df:d5:f8:36:1d:b9:03:ec:34:a1:18:63:9a:70:04:c3:5b:
fa:77:52:6b:2d:81:3d:3d:00:91:28:cf:a1:69:13:77:6a:85:
d4:d2:ba:96:3d:b4:f2:dc:de:55:76:79:19:ad:cd:f4:45:45:
60:22:f7:c0:19:99:b2:24:cb:5d:29:61:af:ed:45:46:0d:c4:
7d:8b:52:d5:a7:b5:cc:cb:8d:ee:b7:69:5e:95:fd:ae:0f:33:
85:c0:e2:43:27:4c:b0:91:bb:aa:55:e9:c1:95:2b:69:7d:2d:
6f:27:4b:e8:6e:33:54:8d:9c:8d:2e:d8:90:fb:ef:24:a8:1b:
8a:b1:96:7f:0a:81:c8:ca:a0:52:69:bc:aa:a7:d1:03:da:7d:
7d:fd:c4:2f:18:c9:87:f8:a3:4c:bd:79:57:1e:45:90:eb:d6:
5b:44:b8:b0:2b:90:98:43:5e:af:f1:8f:08:75:e2:5d:00:83:
ed:e1:8b:67:02:34:4c:25:c1:47:c3:8a:ff:d2:86:ca:af:f9:
a7:46:e0:d5:6a:03:43:15:8b:00:13:0e:c3:ff:4c:4e:63:29:
8c:0c:27:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:01 2026 by rpki-client