Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
File: z2wawDKfN1f-h9q2IGq8FXHES7A.mft (raw, json)
Hash identifier: ZsNGAX9Zxs/dlDCbbFQPe1fVQX+1Qofsj5ADIYBRwOI=
Subject key identifier: 11:E8:A0:3E:76:B6:1A:6B:A2:C7:CD:BC:2C:82:BC:83:CC:39:19:09
Authority key identifier: CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
Certificate issuer: /CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Certificate serial: 019D284D5B8C7DEC4BE15039DD272AB7C9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 04:00:51 +0000
Manifest this update: Thu 26 Mar 2026 04:00:51 +0000
Manifest next update: Fri 27 Mar 2026 04:00:51 +0000
Files and hashes: 1: z2wawDKfN1f-h9q2IGq8FXHES7A.crl (hash: /kM3aoWkjfPt/PobO05LQCIwaZw7xGjI7m7zFw+eo1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:5b:8c:7d:ec:4b:e1:50:39:dd:27:2a:b7:c9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Validity
Not Before: Mar 26 04:00:51 2026 GMT
Not After : Mar 27 04:00:51 2026 GMT
Subject: CN=11e8a03e76b61a6ba2c7cdbc2c82bc83cc391909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:71:89:14:61:ff:6d:7e:71:85:ef:cd:5a:
36:b7:9c:21:7e:c0:91:65:43:e4:ce:49:c2:20:3a:
14:5a:84:63:58:40:4f:e9:fc:58:f1:d1:ad:a5:39:
2c:cf:4f:9b:16:19:22:9c:dd:5d:eb:5f:1f:12:50:
17:8f:6e:71:b4:8d:8d:56:e0:84:9f:40:1c:6f:34:
97:bb:f3:8b:97:9d:dd:bc:e7:de:7b:a5:02:d4:e1:
64:13:d3:56:27:9a:e6:41:16:94:dd:82:f7:97:3c:
c5:c5:98:34:0b:80:93:d4:2d:3f:1e:dd:96:51:a2:
d5:cd:f6:07:41:5f:19:21:18:da:40:70:b7:f3:da:
74:08:38:65:07:0b:8b:06:69:f0:d2:a4:42:6a:a3:
ba:4c:71:eb:00:4d:ac:21:b8:eb:70:a7:49:d5:01:
c9:2b:44:18:89:a5:f1:e3:21:fd:95:13:ca:17:c5:
97:c9:48:91:26:ec:46:59:80:79:65:ba:84:dd:b0:
a7:fa:cb:d8:4f:1d:8f:d2:52:95:32:a2:21:87:1e:
d7:72:b3:c1:9f:be:a6:de:dd:ba:7b:e8:29:70:bf:
43:93:89:e3:88:2d:6d:b0:3f:17:4a:be:91:c2:00:
e6:ac:8a:18:95:91:f7:34:5f:ff:3d:64:37:93:a9:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E8:A0:3E:76:B6:1A:6B:A2:C7:CD:BC:2C:82:BC:83:CC:39:19:09
X509v3 Authority Key Identifier:
keyid:CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:da:72:72:17:61:92:2a:8d:ed:29:bf:42:57:9b:55:3e:2b:
08:32:4d:2e:5f:01:2c:c6:f7:eb:bb:4a:3f:51:d4:0c:b5:51:
bb:32:30:a4:8a:d9:bb:d6:8c:86:04:6b:fe:52:d9:bd:0d:42:
9e:39:c6:a7:6c:53:f8:78:27:36:f7:b5:ec:b1:4b:c9:c5:7b:
4d:65:33:11:63:fb:20:80:10:cc:a4:a8:be:b0:6f:dc:df:04:
bc:65:c0:d0:55:1e:13:67:5d:f4:5d:80:75:be:4c:b3:6d:b1:
71:49:76:94:1a:90:0b:d5:9d:63:ad:08:6d:70:5b:f3:94:90:
0e:2a:8e:eb:41:9e:e5:ec:d9:46:23:07:40:2a:17:9c:c5:5c:
1e:ed:22:1b:91:d7:0b:22:bf:ab:73:45:df:b2:19:97:5c:0b:
4c:74:84:55:fb:47:cb:96:9d:73:56:70:a0:cf:d2:e1:09:e1:
b1:b8:0f:d7:f7:59:fb:30:6f:5b:9c:e1:13:53:6f:66:8e:ed:
28:0f:cb:5a:fa:18:21:8a:18:ac:38:2b:68:92:33:17:33:3e:
55:2c:5e:c8:51:f8:d3:14:c7:e9:8b:e6:45:9e:43:66:8a:ce:
93:bf:09:a4:63:8b:36:fa:34:b5:8e:f1:99:10:f0:11:08:97:
0c:82:49:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:51 2026 by rpki-client