Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
File: _rzZRV4eVaXh1gG9SoV0ta_VQHU.mft (raw, json)
Hash identifier: pUk/2mKM3fF00L3fGoz1Mky/YRPcV9yc7tlUjzGhKz8=
Subject key identifier: 2C:BE:67:BA:15:70:E7:47:92:CE:46:1B:F6:E3:DD:1A:D6:71:2B:89
Authority key identifier: FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
Certificate issuer: /CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Certificate serial: 019D284DCBA13CA102713B41AC38D9F6DF4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
Manifest number: 07A3
Signing time: Thu 26 Mar 2026 04:01:20 +0000
Manifest this update: Thu 26 Mar 2026 04:01:20 +0000
Manifest next update: Fri 27 Mar 2026 04:01:20 +0000
Files and hashes: 1: _rzZRV4eVaXh1gG9SoV0ta_VQHU.crl (hash: sPHjOrFi8NT1Z29lypTTmW5LB74n9mgWXSs/N7KjJMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:cb:a1:3c:a1:02:71:3b:41:ac:38:d9:f6:df:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Validity
Not Before: Mar 26 04:01:20 2026 GMT
Not After : Mar 27 04:01:20 2026 GMT
Subject: CN=2cbe67ba1570e74792ce461bf6e3dd1ad6712b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:80:39:9e:5e:af:3d:7f:c6:e0:bf:dd:46:c3:
ee:7d:a2:76:25:95:5a:37:b2:62:3a:2d:43:01:7e:
ed:1d:35:d5:f6:a8:0d:ca:54:79:35:84:a0:b1:4b:
ad:76:e1:bf:66:3e:3b:39:20:18:b5:b0:79:65:11:
7c:65:27:e9:7e:e3:bd:b0:45:d1:51:bc:d9:17:50:
6d:3a:8d:77:e7:fe:a1:55:64:92:81:12:b1:63:de:
41:0a:02:57:89:f0:a7:ff:e1:02:c7:46:c4:b4:b1:
f0:bb:96:dd:ba:8a:ed:18:fe:59:e0:dc:82:48:18:
7c:2b:3e:eb:72:6e:c9:d6:c0:fa:9c:f3:d9:fe:01:
95:15:99:d8:66:0f:bf:eb:9e:bc:f8:52:44:c8:51:
4d:c4:68:13:b2:73:c7:35:78:58:d0:43:19:52:4d:
af:21:e4:30:97:56:23:94:9c:12:21:e1:91:42:77:
de:6b:2f:33:bc:44:16:f7:18:9a:a8:17:b5:1e:c3:
2b:07:9e:07:59:ba:41:27:38:c6:c0:63:2c:10:f1:
9f:22:9e:45:79:4e:90:17:df:2f:85:8d:56:06:9b:
fc:0e:99:74:f7:53:03:99:ef:b9:ce:d9:84:74:6a:
35:e5:7f:2d:1f:8b:69:ba:81:b7:89:b5:7c:f1:a9:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BE:67:BA:15:70:E7:47:92:CE:46:1B:F6:E3:DD:1A:D6:71:2B:89
X509v3 Authority Key Identifier:
keyid:FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:06:93:71:39:ab:8f:7c:86:d1:41:58:11:71:28:d9:ef:b8:
bb:13:9d:71:ae:97:90:bf:51:68:fd:b3:fd:71:f0:d6:a5:dc:
95:d7:95:49:da:d2:f3:07:bf:d8:b9:57:40:ab:ac:e5:90:0e:
55:0f:e1:d5:04:ee:d9:b0:82:ef:df:e4:c7:fb:95:c2:e7:41:
b3:16:bc:50:a2:7d:1d:e8:46:77:38:de:76:64:0f:56:95:4c:
49:30:fb:b0:31:92:5e:4a:32:1d:17:65:a8:9e:f2:39:e8:18:
cf:3b:e4:f6:d0:90:2c:e7:70:66:c6:fb:7e:3b:37:66:c1:a6:
ea:3c:51:95:1c:c0:2e:6e:c4:3c:14:95:4b:0f:42:2d:b1:90:
43:0c:fe:35:6f:08:55:09:cf:72:61:77:3a:e6:6f:29:30:f6:
88:8f:00:0b:11:aa:71:54:da:69:c8:db:4e:e1:00:2f:48:79:
5b:d3:95:24:fd:4d:d5:6c:31:76:ea:2a:05:c5:d3:82:6a:fa:
c2:1c:80:9f:2f:9a:e9:2e:d1:64:0a:d3:ce:64:bf:85:5b:49:
21:f9:c6:91:73:d2:43:9f:0f:41:f3:99:b0:94:13:52:21:f9:
5a:73:1e:4d:09:64:32:e8:33:94:1a:c2:9e:78:a0:50:14:e9:
07:9d:64:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:28 2026 by rpki-client