Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: aUpNbD8RmOO/vrUmzgIoYNUXhP7CNxM4ZuVdokdjUJQ=
Subject key identifier: 6D:D3:8D:63:9C:BC:03:6B:04:B1:F1:66:3D:4C:D3:71:EE:C8:AF:DD
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 019D2884BD0CE2264CB2ACFA40660BF8A664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: 07E8
Signing time: Thu 26 Mar 2026 05:01:20 +0000
Manifest this update: Thu 26 Mar 2026 05:01:20 +0000
Manifest next update: Fri 27 Mar 2026 05:01:20 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: 7Y60ZOr/j9otGhBBdol3SjBBBvwGZLe7CkZx4yhCYM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:bd:0c:e2:26:4c:b2:ac:fa:40:66:0b:f8:a6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: Mar 26 05:01:20 2026 GMT
Not After : Mar 27 05:01:20 2026 GMT
Subject: CN=6dd38d639cbc036b04b1f1663d4cd371eec8afdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f9:9e:42:51:ba:04:58:e5:84:b3:8e:7e:72:
93:b0:11:5d:c2:85:39:77:c5:5f:1a:78:ac:ab:4b:
9b:98:4a:de:ac:6f:1c:07:4b:e8:18:59:36:b1:a3:
1f:79:38:b2:93:b6:c3:38:d1:7b:0c:bb:bc:77:67:
4d:07:a5:8e:df:d1:f2:02:6e:e1:b2:4b:ba:e8:5f:
d5:f1:9a:2d:48:04:88:73:7a:07:c0:43:88:31:c0:
25:07:43:bb:88:00:c5:85:59:78:d5:03:da:7c:45:
de:9c:41:b7:7f:f4:b9:f9:07:8b:6c:92:7b:0a:5a:
1d:8a:68:9c:9a:0c:36:22:61:a9:c5:c2:02:2d:c9:
c8:48:7f:1f:f5:d5:0c:3d:c0:81:6b:67:09:c6:00:
ea:a8:fa:24:95:fb:9c:fc:41:0e:63:b8:3b:4a:a2:
fc:fe:b8:29:e3:ff:be:42:18:5a:9d:77:d3:87:d8:
22:10:46:97:d5:e1:30:97:0a:f6:e8:fd:4f:d8:b1:
6c:bb:32:ef:61:29:68:1a:88:6a:bc:b4:e4:0f:56:
6d:42:32:49:ed:9c:05:32:02:45:71:21:65:7c:69:
d2:29:3d:06:75:02:7d:3c:47:5f:22:d3:00:5f:98:
f7:a5:ab:e6:68:b2:eb:34:64:f4:30:53:89:93:98:
e8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D3:8D:63:9C:BC:03:6B:04:B1:F1:66:3D:4C:D3:71:EE:C8:AF:DD
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8d:89:c2:1f:cc:89:d5:5f:9f:c3:fe:f9:c3:b8:57:ad:4a:
9a:ff:1d:13:8e:d5:4b:0b:13:68:24:a7:1f:bc:cd:5b:52:8a:
3b:b7:c8:bd:36:da:14:21:a4:18:a7:ff:39:67:2b:4f:25:c1:
03:af:34:78:32:87:83:62:18:ad:2f:07:be:a6:21:94:cf:6c:
de:18:c7:a3:e6:df:b2:55:c3:fe:c1:a0:b1:20:77:47:8e:d4:
a0:ad:92:2e:3b:28:df:3d:da:67:0d:47:aa:f3:4e:8d:31:26:
b6:94:54:56:c4:34:bc:87:40:fb:47:bc:f6:4e:0a:51:59:21:
64:76:0c:80:23:3b:44:bc:1a:87:8b:aa:73:cf:44:82:53:ed:
de:59:b4:70:02:46:39:70:1c:bb:dc:df:d2:fc:50:9a:22:cc:
88:27:68:27:76:b3:ab:f0:a5:cb:77:9d:4a:7e:63:93:2d:3a:
11:1b:6a:e0:f8:7e:af:dd:0b:f9:92:4e:ff:4c:ee:de:6a:75:
2e:c9:3f:d4:4f:13:90:ee:ad:66:49:9f:16:45:63:16:13:7e:
b6:85:f5:24:e5:bf:79:d2:67:b9:ab:8b:6e:e9:bb:92:d8:49:
e5:5c:6b:aa:cc:59:b3:f2:e5:b1:ed:a8:b2:82:bc:e1:e5:0d:
bf:05:7e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:05:30 2026 by rpki-client