Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
File: zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json)
Hash identifier: Lvt5X+IpjEvBaaSUOxmX0yxocDEe8vhuvwYjpVyBoPQ=
Subject key identifier: FB:00:FE:FA:72:C0:23:18:F8:C5:FF:A7:BD:A1:0E:A8:3A:1B:B2:5E
Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Certificate issuer: /CN=cefe18ac971c82a777f7db19ffab334a32537703
Certificate serial: 019D265ED9169F81249207AF098B1621D448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
Manifest number: 1338
Signing time: Wed 25 Mar 2026 19:00:43 +0000
Manifest this update: Wed 25 Mar 2026 19:00:43 +0000
Manifest next update: Thu 26 Mar 2026 19:00:43 +0000
Files and hashes: 1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: CoV603B0eiXeUlKmCxeDZjO5h8cnZH+TmF2+ZLIpxv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:d9:16:9f:81:24:92:07:af:09:8b:16:21:d4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703
Validity
Not Before: Mar 25 19:00:43 2026 GMT
Not After : Mar 26 19:00:43 2026 GMT
Subject: CN=fb00fefa72c02318f8c5ffa7bda10ea83a1bb25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:33:1a:85:b6:fe:21:26:9b:95:02:69:83:
53:b3:6e:32:4a:e6:5f:e2:a2:aa:1a:15:53:12:84:
03:de:c8:a7:69:2a:fe:89:dd:0d:5f:9f:d0:e0:f3:
df:d6:8a:25:75:67:8d:a7:d3:b0:10:55:6e:0c:1a:
d4:7b:7a:22:84:28:51:cd:2b:85:48:a6:a2:be:ee:
de:92:e0:9c:c5:d6:2c:2e:26:55:d1:1b:d9:e0:9e:
e2:7a:93:0f:7e:74:f0:47:f8:76:d3:df:3f:59:3c:
12:32:00:d4:1c:9d:2a:64:21:65:13:bc:c2:1f:b5:
04:5d:63:2c:89:eb:f5:b9:66:6d:35:92:b9:0c:5a:
2b:f4:15:72:eb:91:86:8c:f6:a0:48:5b:8e:04:08:
b7:e7:c0:43:e1:3e:69:91:20:2b:1d:99:1b:07:24:
b4:9d:dd:9c:08:50:86:6b:58:ff:7b:24:07:7b:c5:
1d:03:42:87:f5:13:97:09:3f:5a:c1:a7:90:97:73:
ae:7a:3f:b6:bd:13:e6:91:ef:9d:55:7b:20:2c:07:
5b:16:66:cf:62:94:86:3a:6d:04:f1:ce:33:d8:97:
d6:fb:0d:f3:cb:4a:e9:b8:b6:b2:63:db:f8:94:2d:
06:5d:4f:9f:5b:7a:cd:86:d8:cd:30:30:72:93:84:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:00:FE:FA:72:C0:23:18:F8:C5:FF:A7:BD:A1:0E:A8:3A:1B:B2:5E
X509v3 Authority Key Identifier:
keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9c:e5:29:83:3b:c2:04:a8:b7:60:13:db:18:ec:26:6d:2e:
b5:01:40:29:d5:23:f4:ce:e0:46:67:d1:2c:97:7b:2d:a4:8f:
6f:58:b0:2f:ba:17:c7:49:a5:80:59:a8:83:f3:74:f7:8d:69:
bc:dd:3d:38:00:b8:07:68:7a:38:03:50:b5:dd:97:dc:ec:ef:
9e:19:76:93:2e:15:42:af:2e:3a:c3:27:8c:63:86:a7:9e:11:
35:d6:9f:f5:79:57:64:eb:f2:da:ec:00:18:93:11:80:6b:44:
53:68:b8:ae:9e:17:c5:64:d1:81:57:39:5c:3c:b3:c7:06:92:
fd:e8:4a:66:a5:d3:ef:fb:c1:64:b3:6e:e9:44:92:9d:94:11:
fa:6e:f0:12:d3:73:f9:fd:63:9e:3e:e4:90:63:37:b3:d7:b8:
93:0c:26:9d:29:2c:17:da:4d:49:9c:74:5a:d7:fc:35:34:67:
26:f7:83:e6:23:cf:85:96:2a:fb:a2:42:ad:76:42:5b:83:04:
a6:29:59:23:ca:75:b9:f8:4b:80:d9:a5:4b:63:a1:f1:c1:b4:
7e:e2:6c:e3:10:c1:98:99:09:34:f4:10:95:a5:15:eb:76:00:
8b:68:ac:06:26:d8:30:7e:3f:7c:31:ab:2f:c5:60:59:38:1b:
be:6a:75:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:29 2026 by rpki-client