Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json)
Hash identifier: 8KMH36Hgtgwt71U1wo4bbublEkyxkc1j+KkC3zxOSBM=
Subject key identifier: 33:27:A1:3C:79:95:6B:C8:81:FE:C0:B1:B8:12:D1:9A:D3:8D:B3:82
Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Certificate serial: 019D284D5CC9A92DD9DECAFCB25E0E6A75A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
Manifest number: 0CD4
Signing time: Thu 26 Mar 2026 04:00:51 +0000
Manifest this update: Thu 26 Mar 2026 04:00:51 +0000
Manifest next update: Fri 27 Mar 2026 04:00:51 +0000
Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: EEDOjiEh6rBnyv32qC0rFazfhW1SuMAkMrF55X7N5EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:5c:c9:a9:2d:d9:de:ca:fc:b2:5e:0e:6a:75:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Validity
Not Before: Mar 26 04:00:51 2026 GMT
Not After : Mar 27 04:00:51 2026 GMT
Subject: CN=3327a13c79956bc881fec0b1b812d19ad38db382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:f8:86:c9:c1:bc:30:4f:6e:46:9f:50:f6:
a8:ff:db:22:1b:77:ac:32:f3:8e:26:da:ab:98:70:
84:da:3e:02:f3:c5:b6:a2:99:8c:de:68:e6:3b:d3:
78:e5:16:b5:75:98:bc:e8:45:26:4e:2e:8d:d2:36:
0d:ae:36:d3:18:5f:d7:cf:9d:1f:1f:83:de:ae:6f:
34:c6:01:21:13:66:f3:7d:5b:ee:84:d0:c8:c6:46:
51:b5:a1:d2:cd:93:94:1f:f6:40:c3:59:c6:4f:a7:
1c:15:d3:d6:de:af:fc:11:23:d2:ab:76:6d:48:c5:
d7:c6:78:31:cb:70:24:4a:90:b8:dd:b7:34:c8:dd:
fe:f6:27:b9:c8:a8:1e:f1:82:2a:dc:d8:47:41:e9:
3c:f0:5f:d8:e2:31:32:30:b0:48:4c:fd:4d:6e:f3:
b5:dd:de:e2:7a:75:e2:b5:02:bd:4c:6c:19:af:0f:
09:09:e5:7a:60:cc:e6:c1:68:28:56:52:47:b8:cf:
81:a7:35:78:d3:44:41:7e:04:d2:e3:7e:34:29:de:
34:75:42:05:10:1d:5a:d5:ee:36:3a:e6:d0:b7:ec:
a2:bc:aa:6c:dc:9a:9f:c3:7f:56:5a:ee:f9:19:c4:
fd:25:bf:18:33:0d:94:30:04:eb:b5:be:49:2f:47:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:27:A1:3C:79:95:6B:C8:81:FE:C0:B1:B8:12:D1:9A:D3:8D:B3:82
X509v3 Authority Key Identifier:
keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:28:a7:bf:0a:79:51:ed:ba:16:3f:04:90:43:b8:d0:e9:06:
de:7a:9a:d5:65:76:c3:1d:6e:9a:67:7a:e9:7e:d9:d9:f3:9c:
69:94:7e:13:3c:15:db:26:ff:a5:60:48:ff:f9:15:33:8a:4b:
d2:47:27:ea:d7:2d:78:84:71:3e:03:fd:65:18:ed:df:88:3d:
48:28:bf:e0:de:07:77:0f:69:a3:03:91:67:c1:4f:34:66:60:
66:8b:62:70:8d:0f:f2:7b:f2:18:22:2d:a1:15:c7:00:7a:4d:
e3:ee:bd:cc:4a:f1:57:90:ee:d9:3b:b1:12:df:45:4f:6f:82:
eb:31:cc:59:a3:73:fd:75:67:ce:ad:fb:e6:3b:e3:c5:9b:00:
f1:6e:36:3f:f2:9a:8a:03:17:d6:eb:c7:ec:33:d8:21:ac:e5:
14:a1:f2:5d:b6:d8:6f:29:21:c7:8c:7c:8e:39:d6:0b:d1:f5:
54:c4:0e:04:03:6b:52:fd:27:98:19:f2:e0:77:9f:77:de:74:
f9:c5:b5:a5:05:8a:51:2f:da:a0:79:eb:82:40:1c:9c:e2:29:
b1:5f:bb:d0:f9:f5:b2:19:fa:fa:d9:4b:78:6d:95:cc:34:40:
93:7a:31:12:76:e5:1a:ca:a6:b2:92:ca:15:0a:3b:bc:fc:1f:
a5:7a:d4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:36 2026 by rpki-client