Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
File: ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft (raw, json)
Hash identifier: wAlafQmNYIJ/tB2YJZgmTslVHnv/lGdP8fC58OBEZRM=
Subject key identifier: A9:3D:B7:08:67:3D:45:08:5C:3B:20:C9:55:A4:65:F5:64:36:B1:5F
Authority key identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
Certificate issuer: /CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Certificate serial: 019D2771F845E3E673F4B01C50D18F641B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
Manifest number: 11FB
Signing time: Thu 26 Mar 2026 00:01:13 +0000
Manifest this update: Thu 26 Mar 2026 00:01:13 +0000
Manifest next update: Fri 27 Mar 2026 00:01:13 +0000
Files and hashes: 1: ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl (hash: mtOH6ZDEiy5FmVzjZd/w4Ta+Vw3x4X+r4OJYHepHqDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f8:45:e3:e6:73:f4:b0:1c:50:d1:8f:64:1b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Validity
Not Before: Mar 26 00:01:13 2026 GMT
Not After : Mar 27 00:01:13 2026 GMT
Subject: CN=a93db708673d45085c3b20c955a465f56436b15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:04:7b:11:72:ba:b9:43:ff:79:3c:0d:fc:
ab:27:2a:4d:8a:63:a3:c4:0f:d4:98:5e:10:51:52:
e9:40:20:32:80:79:62:6a:a4:5e:e4:b7:98:88:21:
17:ad:20:57:ee:12:ff:55:f7:12:ce:06:42:1c:0f:
1c:f0:e9:64:a5:ee:a1:11:5a:06:c5:5a:1e:26:e7:
2a:db:d2:8e:a9:38:e8:22:0a:6e:59:0f:cd:ce:b4:
9c:be:e5:dc:ed:4a:93:35:70:8f:25:33:d8:27:62:
19:44:c6:b1:22:77:79:23:d2:8d:1a:a5:ec:39:47:
89:7e:be:d0:46:d5:fb:ba:f2:1c:13:5a:53:40:48:
20:10:f1:98:78:24:14:b9:3c:5b:34:b2:81:a3:72:
ec:fa:41:ee:ae:fd:f8:1f:0a:f9:f4:3f:44:ee:d2:
20:ec:80:e9:4a:1b:26:eb:27:b7:0c:c6:ee:df:d5:
1f:5e:02:15:ad:d0:23:22:a0:40:2f:1e:f0:46:3e:
1f:53:ea:d8:71:a5:b8:27:30:48:0b:01:60:a7:c5:
07:69:46:37:ce:75:98:c9:81:fd:db:f8:17:2f:6e:
40:3b:43:b9:33:0a:d8:2f:19:30:19:9a:a6:fe:f2:
a0:c1:1b:9b:2a:28:51:1c:75:5f:dd:e1:e9:62:3b:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3D:B7:08:67:3D:45:08:5C:3B:20:C9:55:A4:65:F5:64:36:B1:5F
X509v3 Authority Key Identifier:
keyid:65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:6d:47:e4:5c:ca:b1:db:da:60:19:f1:07:12:43:52:58:33:
73:64:b4:8f:3d:d6:d1:67:aa:a4:0f:6e:9b:ce:e3:01:3f:83:
f9:53:28:07:ac:d0:f0:8d:c2:e6:af:60:d8:bd:38:fd:84:87:
63:56:96:aa:3e:cc:1e:ba:af:b4:ec:b1:6e:45:20:90:97:7a:
af:e8:ea:9b:c7:fb:e2:5b:dd:0d:96:14:0f:40:08:92:8f:aa:
61:db:50:ae:e8:d8:d4:1b:be:ba:72:e7:cf:40:8c:ec:4e:fe:
d8:30:14:68:c8:c1:db:8b:70:a9:c7:c7:2a:e9:66:fe:8b:4c:
11:ba:85:99:f3:07:9a:61:af:6b:00:5e:df:db:42:5d:a0:84:
5d:d7:df:6c:dd:0f:fc:d4:1a:d9:39:49:a6:37:e6:ad:15:9a:
1a:71:e1:e1:15:f5:60:4e:48:f9:0b:0b:00:c4:75:9f:cb:47:
72:66:65:41:2e:d9:b5:14:fc:35:47:a7:be:8e:22:6a:68:8b:
0c:47:f4:96:59:35:21:6c:2f:a4:50:31:c9:65:56:1c:ef:fd:
6f:7d:58:8d:06:29:dd:5a:61:81:ad:23:ea:4b:96:b7:82:b0:
1f:d9:61:a9:b8:30:d5:d5:bc:95:25:5d:e8:1d:3d:09:75:88:
73:21:20:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:46 2026 by rpki-client