Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
File: zHjaWyZetWpkanhB0edipoGdGY4.mft (raw, json)
Hash identifier: hKS/rEofMJ+IfCQZ7uLwr3wEoit2YcqdQDM0JXepdFU=
Subject key identifier: 8B:F7:F6:88:B2:6C:73:57:5D:F7:59:4F:56:DC:8C:B6:17:7F:2A:BE
Authority key identifier: CC:78:DA:5B:26:5E:B5:6A:64:6A:78:41:D1:E7:62:A6:81:9D:19:8E
Certificate issuer: /CN=cc78da5b265eb56a646a7841d1e762a6819d198e
Certificate serial: 019D26CDB3514C12D2D0DF065963CFA26DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
Manifest number: 2C
Signing time: Wed 25 Mar 2026 21:01:48 +0000
Manifest this update: Wed 25 Mar 2026 21:01:48 +0000
Manifest next update: Thu 26 Mar 2026 21:01:48 +0000
Files and hashes: 1: zHjaWyZetWpkanhB0edipoGdGY4.crl (hash: lizXXYjMSCbj527+CnsWuAdaOEpmSAk+FTTcp+OatKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:b3:51:4c:12:d2:d0:df:06:59:63:cf:a2:6d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78da5b265eb56a646a7841d1e762a6819d198e
Validity
Not Before: Mar 25 21:01:48 2026 GMT
Not After : Mar 26 21:01:48 2026 GMT
Subject: CN=8bf7f688b26c73575df7594f56dc8cb6177f2abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:41:b5:a2:5c:bb:02:ac:e1:18:34:9b:9e:
a0:19:87:6f:43:91:65:6b:c9:e1:94:25:c9:64:6d:
0f:30:a3:63:d5:f9:85:4f:6f:4f:2b:8d:9d:88:f5:
8d:f5:36:10:c5:0f:58:15:1a:84:52:aa:97:4e:0a:
6e:77:90:98:db:a2:4d:db:50:84:ae:fb:f2:89:f4:
d6:2e:88:a6:61:53:55:da:5b:15:68:6e:28:df:e7:
fe:64:74:e3:be:aa:d5:3d:75:27:5b:7e:3a:d8:12:
3b:ad:9b:bb:5b:a9:12:42:05:94:ab:66:c0:39:1c:
78:6a:3a:93:5d:3c:c2:7f:2d:92:49:a2:7e:31:c9:
12:ef:0d:50:82:94:d4:c6:6d:6a:44:4f:2e:75:ce:
b8:fc:c6:29:4c:d1:cf:18:c0:33:28:1b:10:9b:81:
87:6d:ac:9e:ca:9b:3a:ba:44:23:b7:e7:62:9d:96:
68:ea:d5:4c:a4:64:6e:56:95:72:4b:a6:9b:e5:6c:
5f:a0:5a:a2:b7:9f:24:f2:d1:8c:35:de:c0:07:30:
0e:54:ec:af:8e:18:1a:b7:5e:43:50:63:5e:4c:da:
36:05:b8:c7:28:40:4c:1d:f4:13:30:dd:15:d0:33:
ee:6c:92:2b:47:46:0c:92:ee:01:e1:17:0a:7c:e9:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F7:F6:88:B2:6C:73:57:5D:F7:59:4F:56:DC:8C:B6:17:7F:2A:BE
X509v3 Authority Key Identifier:
keyid:CC:78:DA:5B:26:5E:B5:6A:64:6A:78:41:D1:E7:62:A6:81:9D:19:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHjaWyZetWpkanhB0edipoGdGY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b6f99-fd64-409e-8d98-f210e39f7328/1/zHjaWyZetWpkanhB0edipoGdGY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7b:4e:7b:a1:05:02:bc:f0:7c:ab:4b:08:68:d1:5a:af:34:
51:57:1f:8a:6b:7b:dc:9e:a7:22:72:4d:67:f8:98:7b:d9:d4:
05:fa:1e:dd:a6:b1:d2:d5:1a:c9:48:51:66:ea:2b:89:07:5a:
e7:fa:a0:11:00:3f:07:cf:93:6a:91:60:dc:02:7f:23:59:7c:
98:23:7f:6c:d7:05:a2:4b:7a:d7:e6:a0:69:ae:a1:3a:63:65:
c6:3b:24:16:40:ec:a5:ee:43:7d:2e:db:68:c8:ef:5d:59:2a:
3a:20:fa:d7:05:a2:7a:04:24:11:fe:5b:aa:3d:77:49:8b:f9:
d4:9c:8a:af:c9:32:42:3d:f1:c0:e4:9e:94:31:5f:7b:76:fb:
9f:40:98:cf:db:e3:6a:bf:9d:bb:da:2b:a4:4d:14:2b:7b:0d:
23:23:d8:78:62:bd:cb:7c:f9:d8:52:d8:f2:37:52:17:93:71:
7c:59:66:2c:e5:19:d0:2d:1b:aa:05:62:98:66:f4:da:59:18:
2b:81:bd:5a:4e:8c:d6:de:fb:67:5f:9a:af:cb:f6:e1:ba:66:
c1:5b:92:bd:f8:d1:fb:82:48:62:84:bd:90:d4:14:4f:4b:d0:
a1:43:b9:ec:4d:b6:ac:1d:be:79:b2:ad:d6:22:40:f3:97:9e:
0f:90:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:03:20 2026 by rpki-client