Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
File: dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft (raw, json)
Hash identifier: UU22c8/+jxVTuqddPAcOrQHWBViOZdP3ezBXmA2xSnc=
Subject key identifier: 96:3D:D2:E3:35:73:FC:33:AD:09:8E:AC:70:97:33:E0:70:2A:A6:51
Authority key identifier: 75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
Certificate issuer: /CN=75923ec546df371d09e68c6b06025ea31261234a
Certificate serial: 019D27049A1902D08CE93861F8AC54248830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:46 +0000
Manifest this update: Wed 25 Mar 2026 22:01:46 +0000
Manifest next update: Thu 26 Mar 2026 22:01:46 +0000
Files and hashes: 1: dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl (hash: B+HEl0z7DjU5CtM7BJ8dHi/qRkeXB5OGT37zXERhtpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9a:19:02:d0:8c:e9:38:61:f8:ac:54:24:88:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75923ec546df371d09e68c6b06025ea31261234a
Validity
Not Before: Mar 25 22:01:46 2026 GMT
Not After : Mar 26 22:01:46 2026 GMT
Subject: CN=963dd2e33573fc33ad098eac709733e0702aa651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:7c:78:2f:2d:41:3a:7e:d1:0a:e7:b1:36:
75:09:d3:66:09:97:44:3e:f0:c8:75:e3:72:ee:ba:
9e:fb:cd:93:4d:bc:ff:85:73:5b:63:38:94:32:98:
01:cb:0b:bb:92:5d:f5:74:d7:f4:bb:47:c0:9c:f6:
1c:47:32:8e:47:57:1d:aa:f2:ff:8c:5e:7c:5d:83:
64:a1:f4:13:e9:4c:c9:5d:d5:ab:b7:77:e8:5e:0d:
f1:cb:86:b4:21:b2:ad:67:34:ca:4e:9e:05:fc:0a:
13:3e:90:82:c0:23:c6:15:74:e6:56:b4:94:c3:e6:
22:ef:f9:be:88:85:38:12:d1:d7:b1:c9:e8:ef:03:
b4:44:8f:bd:e6:b1:fd:cf:8b:d4:ba:ca:63:57:8c:
40:62:f7:7a:85:d5:c3:85:ce:92:4e:c5:0e:fc:8c:
e6:b6:b6:3d:10:2e:7b:3b:99:40:70:6e:1d:7b:69:
9a:00:0c:96:c4:23:79:85:aa:86:d7:d7:9d:c7:1a:
a8:72:28:9a:57:44:7c:b3:60:c5:4e:81:83:de:6c:
5a:ae:79:4b:1d:6f:78:67:46:2f:35:e6:8a:17:8a:
4b:1f:31:fc:df:95:80:16:13:37:8a:d4:9f:0e:70:
61:cc:f4:a4:51:bd:6f:83:71:44:94:ff:b5:3d:e8:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3D:D2:E3:35:73:FC:33:AD:09:8E:AC:70:97:33:E0:70:2A:A6:51
X509v3 Authority Key Identifier:
keyid:75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:aa:3f:a0:80:8b:2b:40:a6:09:52:04:fb:04:9a:6f:82:7d:
f3:1a:fc:fc:32:05:57:16:78:d8:64:85:bf:64:82:ef:20:84:
9a:90:6f:dc:03:e2:77:2e:ae:c2:46:6a:9b:d6:a5:21:fb:f6:
1a:c0:0a:df:9f:e2:da:57:6b:3b:58:b2:cd:a4:ad:11:ae:e1:
3c:eb:26:e8:53:f6:27:9e:95:ed:64:b3:41:cf:34:02:1b:3f:
f4:a0:43:4b:4f:20:50:22:c9:61:03:1d:01:a0:74:6c:67:e5:
05:37:ae:4b:23:64:c9:39:98:4b:09:8e:01:2a:90:71:c8:5f:
f7:0d:27:ea:4a:0b:c1:48:df:95:8e:07:fa:7d:96:2a:43:5a:
c7:b1:71:bd:db:31:04:31:a9:f6:fa:11:f5:d4:0c:1f:7f:84:
84:a4:6b:12:dd:a0:9d:bf:65:40:af:83:cb:30:6a:41:12:b1:
7a:a8:24:f9:41:d0:bb:08:80:a2:44:41:97:b3:bd:c0:87:4e:
87:49:e4:71:ec:99:74:64:35:d0:52:4b:b0:1e:32:8b:6f:84:
a1:b6:d0:76:5d:02:36:d0:f2:92:38:28:86:f2:b7:6e:35:36:
78:91:20:bb:73:7c:9c:11:20:a2:11:66:91:e7:8c:d6:79:77:
f7:4f:99:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:34 2026 by rpki-client