Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
File: zkyVbVLdh2NjwhME-cAl8H1fJjE.mft (raw, json)
Hash identifier: 68wgnK0KSeJSuIoJm6701jfJSiokP5OGJysgS5DDboU=
Subject key identifier: FF:7F:06:8D:DC:5E:9D:16:7F:09:01:D2:56:69:06:4E:E4:B5:3F:38
Authority key identifier: CE:4C:95:6D:52:DD:87:63:63:C2:13:04:F9:C0:25:F0:7D:5F:26:31
Certificate issuer: /CN=ce4c956d52dd876363c21304f9c025f07d5f2631
Certificate serial: 019D2703AF9E29AA8B22FED2F6DF3CE47B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
Manifest number: 07FF
Signing time: Wed 25 Mar 2026 22:00:46 +0000
Manifest this update: Wed 25 Mar 2026 22:00:46 +0000
Manifest next update: Thu 26 Mar 2026 22:00:46 +0000
Files and hashes: 1: zkyVbVLdh2NjwhME-cAl8H1fJjE.crl (hash: uExsDwlI5SYPw+a7v2/roNNsq5A/CtrryRmaJ4KH6wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:af:9e:29:aa:8b:22:fe:d2:f6:df:3c:e4:7b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4c956d52dd876363c21304f9c025f07d5f2631
Validity
Not Before: Mar 25 22:00:46 2026 GMT
Not After : Mar 26 22:00:46 2026 GMT
Subject: CN=ff7f068ddc5e9d167f0901d25669064ee4b53f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:6d:8e:97:01:cc:42:7d:60:6b:6e:6e:f4:
ff:83:97:00:8b:9b:ad:9e:c0:9e:3f:11:80:16:5e:
26:34:85:ab:06:8a:79:12:4d:68:e2:5b:2b:39:7f:
8f:d6:96:54:2a:78:e7:54:9c:61:a4:b5:7b:be:8a:
17:51:41:98:b0:27:ae:09:89:4e:2d:5c:4c:fc:73:
01:55:8e:42:cc:7b:31:8f:5c:03:48:e6:6d:27:4c:
85:5e:58:6a:db:9a:01:70:9a:85:c5:85:4e:dc:95:
a3:c5:44:d2:38:05:cc:b6:ce:d8:45:a5:02:a1:45:
3c:2d:cf:32:2d:c4:1d:68:a5:07:f8:2d:16:8f:e9:
41:60:65:d6:49:3b:02:6d:ed:b9:bc:b5:ca:2d:a8:
45:db:71:fb:e5:ec:f8:79:e8:b8:d6:c5:30:9c:16:
d4:80:e3:2a:33:8c:ab:01:03:65:11:a5:c6:f4:96:
35:c9:69:c9:9f:fc:3b:cc:79:96:a8:26:1d:df:dc:
de:85:83:47:2a:dc:49:c2:55:c1:7e:39:db:1f:5d:
0f:4b:18:38:68:fe:24:3b:6c:e8:48:bb:c2:52:44:
b9:ef:11:5b:ba:fb:2c:71:4f:2c:5f:b2:28:3e:be:
38:58:34:3a:2d:c2:e7:19:85:b1:40:65:a7:fc:0f:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7F:06:8D:DC:5E:9D:16:7F:09:01:D2:56:69:06:4E:E4:B5:3F:38
X509v3 Authority Key Identifier:
keyid:CE:4C:95:6D:52:DD:87:63:63:C2:13:04:F9:C0:25:F0:7D:5F:26:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:35:fc:fa:c1:3b:83:89:3f:06:a3:1b:b0:77:1f:28:61:9c:
45:9a:e2:15:d4:ae:df:f2:0a:9c:8f:5e:a2:09:db:62:92:9c:
f1:35:6c:19:02:c5:d6:8e:2a:ff:c7:89:67:7e:0d:0f:fd:50:
41:38:da:2f:2c:83:12:b1:61:36:40:91:cc:6a:11:88:9f:6a:
b8:e5:bb:c7:5e:3b:1a:4f:c0:a3:3e:a6:c8:45:35:d7:fe:15:
c8:5e:d3:a9:3d:59:46:f1:90:d8:1c:66:51:91:c1:67:b9:82:
4e:50:59:7d:2d:55:e3:5a:ea:d8:ac:9a:80:2e:29:2b:ae:77:
4b:7f:84:f4:90:38:6b:5d:a4:59:ad:88:3e:c2:da:2c:84:39:
dd:5b:44:4e:82:45:b4:6e:98:de:5c:29:97:55:d2:28:79:d0:
87:fc:d4:ec:70:7b:7d:b9:60:49:3f:72:f7:03:6b:24:4d:c4:
43:35:f5:b3:19:51:22:1b:57:c2:18:72:9c:88:56:cc:55:86:
3f:97:f9:2a:48:fd:f5:83:d2:ee:2d:9c:fa:78:fb:d9:e3:b7:
4d:40:76:53:cd:3b:e3:6c:7c:3f:8a:01:06:7d:fb:31:12:3c:
73:63:27:b3:12:2c:bd:7b:20:65:8a:23:e6:70:85:96:ac:7a:
32:2d:a1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:34 2026 by rpki-client