Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
File: zTf5VqTOlOsexk52R7Q828uPxEk.mft (raw, json)
Hash identifier: WvACciCE6dZmMqwyGQVjVw5kiAv/iBKNyXgp7MAOZ4c=
Subject key identifier: FA:5F:93:74:BB:E8:C4:98:4E:A8:73:7D:BC:54:1F:79:9C:C3:07:F8
Authority key identifier: CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
Certificate issuer: /CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Certificate serial: 019D330895DB2AE5A64C17776876A023EDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
Manifest number: 1845
Signing time: Sat 28 Mar 2026 06:01:33 +0000
Manifest this update: Sat 28 Mar 2026 06:01:33 +0000
Manifest next update: Sun 29 Mar 2026 06:01:33 +0000
Files and hashes: 1: zTf5VqTOlOsexk52R7Q828uPxEk.crl (hash: l6LbnlCAByDAts/veOsz7uehpmQIst5rvjaxNiEF0dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:95:db:2a:e5:a6:4c:17:77:68:76:a0:23:ed:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd37f956a4ce94eb1ec64e7647b43cdbcb8fc449
Validity
Not Before: Mar 28 06:01:33 2026 GMT
Not After : Mar 29 06:01:33 2026 GMT
Subject: CN=fa5f9374bbe8c4984ea8737dbc541f799cc307f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:64:00:4a:5b:3e:a4:ee:cb:f7:8b:85:d4:
e4:0a:30:cf:41:dd:50:e7:1f:33:c4:01:c2:b2:6f:
fc:51:c3:b9:20:4f:00:3b:ae:04:6a:d2:07:97:44:
6b:b4:98:4a:57:52:07:f1:11:40:04:25:91:b1:0a:
37:96:af:98:91:f2:a7:2e:7d:0e:28:c3:0a:28:86:
26:ef:35:c7:64:99:f9:24:aa:45:44:6c:00:7d:4c:
24:13:43:60:ed:3d:54:02:0f:9a:74:34:52:4d:19:
3b:b1:db:c2:4a:d6:28:9a:e1:86:79:7b:d0:35:d7:
09:36:91:ec:7c:86:12:90:f5:7b:dc:8a:48:58:9e:
e6:b8:45:1b:26:44:41:13:c0:63:ad:8d:c2:ed:d0:
9f:2e:d2:9a:26:82:60:10:ad:10:b4:7e:cc:d4:78:
c8:69:c4:2c:74:8a:ce:a8:de:e0:fb:15:42:45:c5:
71:40:3b:74:ba:0a:2a:34:d0:07:e7:04:dc:87:f7:
9a:5e:50:9d:6e:f3:de:43:d2:5e:32:15:fd:f5:5b:
71:79:af:99:36:ad:33:1f:7e:a0:c6:b5:cd:aa:45:
e0:18:5b:bb:48:51:af:90:53:ba:3d:e7:ab:2b:b8:
6d:5a:20:e1:e9:ff:07:9d:f5:45:b7:db:62:5e:4b:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5F:93:74:BB:E8:C4:98:4E:A8:73:7D:BC:54:1F:79:9C:C3:07:F8
X509v3 Authority Key Identifier:
keyid:CD:37:F9:56:A4:CE:94:EB:1E:C6:4E:76:47:B4:3C:DB:CB:8F:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTf5VqTOlOsexk52R7Q828uPxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2943c1-36b6-4303-bc27-bbe12bd38e04/1/zTf5VqTOlOsexk52R7Q828uPxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bb:12:49:02:f6:93:90:0f:d0:d9:ab:4b:45:1a:e3:18:da:
09:8a:22:88:16:f9:13:e7:de:22:cd:9e:45:a4:a9:7c:21:60:
d4:90:bb:62:e7:3e:48:b1:7a:ff:be:f6:04:61:04:97:81:9d:
67:48:d3:40:b1:42:0e:46:bb:f9:0c:45:0e:56:cc:5b:be:f7:
19:64:aa:a0:dd:57:cf:c9:5c:56:8b:79:44:1c:cb:3a:8e:7e:
0e:7f:f1:0b:b1:a1:36:b1:1e:58:e1:59:d2:f3:41:f3:4c:60:
59:ed:8f:2c:c3:ac:12:7a:f5:3d:e2:7f:ba:db:03:55:77:41:
0d:86:7a:4c:c6:91:0c:10:30:0e:39:09:90:e0:d1:c7:39:83:
18:99:17:9f:5f:63:80:6e:ca:84:68:26:d0:2c:b2:f8:af:c3:
8e:a5:ba:c4:37:a3:bd:2c:79:19:28:c5:28:9e:26:fb:70:23:
b5:69:b8:18:0c:58:2f:44:d3:67:03:1e:e6:eb:22:59:93:c9:
73:f3:01:ce:8e:ed:9e:ec:4d:a1:15:11:00:72:8b:c7:00:f6:
4a:14:c4:19:61:2e:ec:be:78:18:3f:87:de:5b:93:64:4e:b0:
bc:9d:ff:0a:b3:11:ae:15:bd:45:19:b0:69:61:0a:37:0d:9b:
0e:5e:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:06 2026 by rpki-client