Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: wLi2lEPcs0M6iA73j7/EYuJtQie5sq0aGLD/W/J2Q74=
Subject key identifier: 84:93:AF:5E:57:A5:A1:3D:18:CC:DB:5D:0B:2A:88:68:2D:6C:0A:80
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 019D28F293D406FC3F0DF403FCCA834E5831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 07:01:19 +0000
Manifest this update: Thu 26 Mar 2026 07:01:19 +0000
Manifest next update: Fri 27 Mar 2026 07:01:19 +0000
Files and hashes: 1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: qSD5udR7N6SHdi3lQiUDC4+upzIgBeH2A6U7T0U4bg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:93:d4:06:fc:3f:0d:f4:03:fc:ca:83:4e:58:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Mar 26 07:01:19 2026 GMT
Not After : Mar 27 07:01:19 2026 GMT
Subject: CN=8493af5e57a5a13d18ccdb5d0b2a88682d6c0a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:1a:74:58:d6:36:17:72:15:1d:aa:b8:3a:
cf:67:03:21:ee:fc:54:ab:0d:e0:31:48:9a:b5:3f:
24:d5:91:6a:0b:19:65:2a:9c:17:c5:ae:8b:3c:e7:
db:11:80:14:c8:f5:ae:bb:1c:fd:44:1d:45:5d:d0:
3b:8a:1d:d2:e9:c6:79:52:43:78:4c:e3:97:a0:c7:
95:46:54:82:64:c0:45:f5:b7:86:cb:dd:80:f2:e5:
c7:ec:ac:2c:9e:50:0c:69:52:dd:49:47:ff:f2:33:
e9:02:5d:70:92:7a:fc:f9:56:8a:92:ec:31:c1:35:
ae:e2:96:d1:b7:dd:4b:43:df:b4:95:8e:cb:91:06:
8e:a6:f8:2e:1c:bb:e1:25:03:1d:fd:c9:25:3e:9a:
07:93:6f:11:06:71:5b:93:95:29:c0:a5:b2:77:d6:
01:02:b6:7b:35:de:27:5c:0a:94:f5:05:d9:b1:c6:
df:51:94:5f:97:4a:9e:b7:de:27:ba:49:5e:99:3e:
19:e5:44:00:8e:d5:e8:d8:cb:32:bc:34:70:29:41:
47:8e:84:c4:c5:f4:f2:ee:04:6b:88:f7:98:cd:4d:
af:de:7d:93:a1:e1:f3:ea:7f:e7:0f:d6:f9:62:68:
ef:36:b8:3c:78:89:ee:6d:fb:04:61:77:cf:cf:7c:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:93:AF:5E:57:A5:A1:3D:18:CC:DB:5D:0B:2A:88:68:2D:6C:0A:80
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9a:ca:13:02:5d:4e:ec:a5:2b:57:90:e6:57:72:bf:0d:d6:
66:e5:90:00:25:ae:c1:ba:f0:0a:16:f8:ef:74:62:d5:9f:02:
8a:d2:7b:76:4c:a6:91:49:48:84:f0:da:fc:93:cb:2c:35:c6:
51:ea:0e:c0:da:c0:30:f8:84:72:cc:13:2b:d6:41:d4:9e:54:
e4:a5:41:25:1d:63:36:95:39:b7:be:76:d8:e7:a0:e2:ce:9d:
8f:bd:e9:ac:d0:d3:25:69:8c:17:57:76:12:19:5f:90:01:60:
24:87:5c:e4:79:73:f4:4e:36:a6:ca:76:e2:2a:a3:fb:7d:47:
8f:98:25:15:24:91:c3:91:72:1e:fb:d4:e5:d1:7b:c3:07:a0:
6e:b0:f9:73:1a:11:b1:bc:a4:58:e9:27:0e:b1:55:04:3e:a6:
43:48:73:e6:d9:08:c4:93:63:f8:14:6a:75:82:b9:d7:92:11:
16:51:94:7f:fc:bf:29:86:01:e9:dc:16:c4:2e:76:b1:65:3a:
71:62:73:4f:a5:d6:25:05:01:df:5b:4e:85:17:1f:51:af:9d:
47:a5:db:55:32:57:c9:59:82:d5:d2:e4:d2:2e:9a:9a:ed:07:
6e:92:ba:f1:ce:40:0b:5a:78:a5:44:23:0b:b0:96:4a:83:d9:
9a:f8:8e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:36 2026 by rpki-client