Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/98bdc4-e7ed-43fd-a246-9fb8cb4ef050/1/zGkWT1yFMjMb7y1CVFy3Jln7eg0.mft
File: zGkWT1yFMjMb7y1CVFy3Jln7eg0.mft (raw, json)
Hash identifier: emtPGd1EtMymiEGrlFnaypty8mDWTI+6PlZwnqCn+j4=
Subject key identifier: 77:89:E0:1B:61:79:AA:EC:7D:17:F1:72:A5:64:3F:B7:A2:D6:40:A9
Authority key identifier: CC:69:16:4F:5C:85:32:33:1B:EF:2D:42:54:5C:B7:26:59:FB:7A:0D
Certificate issuer: /CN=cc69164f5c8532331bef2d42545cb72659fb7a0d
Certificate serial: 019D329A615DB3DDAABA9A7B6A2118D2A41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGkWT1yFMjMb7y1CVFy3Jln7eg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/98bdc4-e7ed-43fd-a246-9fb8cb4ef050/1/zGkWT1yFMjMb7y1CVFy3Jln7eg0.mft
Manifest number: 63
Signing time: Sat 28 Mar 2026 04:01:11 +0000
Manifest this update: Sat 28 Mar 2026 04:01:11 +0000
Manifest next update: Sun 29 Mar 2026 04:01:11 +0000
Files and hashes: 1: zGkWT1yFMjMb7y1CVFy3Jln7eg0.crl (hash: rLiNEJc5Y+lAV5gU1Jvl1MECfkvXZigk0O7R0dD4kZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/98bdc4-e7ed-43fd-a246-9fb8cb4ef050/1/zGkWT1yFMjMb7y1CVFy3Jln7eg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/98bdc4-e7ed-43fd-a246-9fb8cb4ef050/1/zGkWT1yFMjMb7y1CVFy3Jln7eg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGkWT1yFMjMb7y1CVFy3Jln7eg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:61:5d:b3:dd:aa:ba:9a:7b:6a:21:18:d2:a4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc69164f5c8532331bef2d42545cb72659fb7a0d
Validity
Not Before: Mar 28 04:01:11 2026 GMT
Not After : Mar 29 04:01:11 2026 GMT
Subject: CN=7789e01b6179aaec7d17f172a5643fb7a2d640a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c4:34:8a:fb:d2:6b:21:0f:3b:c9:60:98:58:
e3:94:e1:3d:be:df:1b:c7:35:3a:ae:6d:ab:68:a6:
5c:92:2b:91:79:18:ba:8e:bf:dd:e9:ac:16:9d:81:
b9:09:0f:ab:68:d3:76:d1:27:8b:0d:4f:34:4d:e4:
6b:d3:e8:65:8e:96:98:02:64:db:c2:e7:9b:d4:83:
2b:f8:3f:c7:52:24:3e:23:97:e2:00:8e:23:5a:77:
e5:07:fb:47:6e:02:10:95:e8:94:e9:6f:55:b8:3d:
ad:a5:88:60:5b:7c:e0:41:f7:d8:fd:f0:51:ce:b7:
99:78:f7:9f:58:4e:ec:a6:5d:92:0c:14:06:5d:5b:
01:2f:7f:5e:59:f1:e4:7f:a4:7c:77:f5:1c:98:82:
e1:69:61:83:c4:5d:83:37:cf:9d:4a:f3:e5:2e:d6:
d8:a6:07:b2:1f:71:ea:81:89:86:d0:06:11:c7:34:
87:51:b5:42:b8:16:04:e6:90:df:4d:0b:db:71:f1:
4f:f0:f8:fe:fe:0c:27:86:cb:c1:e6:31:88:17:9c:
f2:d1:1e:d6:45:06:d9:0c:75:2e:86:10:3e:92:34:
5e:c0:5c:cd:ca:1b:b5:2b:e5:d9:41:a4:b1:85:e6:
c5:42:bc:6e:7c:fd:2c:01:be:34:9a:c9:43:cc:bc:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:89:E0:1B:61:79:AA:EC:7D:17:F1:72:A5:64:3F:B7:A2:D6:40:A9
X509v3 Authority Key Identifier:
keyid:CC:69:16:4F:5C:85:32:33:1B:EF:2D:42:54:5C:B7:26:59:FB:7A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGkWT1yFMjMb7y1CVFy3Jln7eg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/98bdc4-e7ed-43fd-a246-9fb8cb4ef050/1/zGkWT1yFMjMb7y1CVFy3Jln7eg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/98bdc4-e7ed-43fd-a246-9fb8cb4ef050/1/zGkWT1yFMjMb7y1CVFy3Jln7eg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:59:b9:3d:b6:ee:7c:10:6d:1f:d5:e4:bc:96:f7:c2:28:bb:
46:62:e3:f7:73:e9:46:c2:38:2b:b9:35:a3:d6:16:f0:a3:ff:
58:28:42:f8:f6:b3:3c:bb:03:1a:cf:ef:ea:66:b0:ec:bc:b5:
07:75:8e:f7:8d:ad:bc:1e:14:f8:df:34:5b:7c:00:bf:d8:2d:
c7:3d:9d:5a:88:6b:6a:e0:73:49:aa:8c:4c:8e:da:d7:99:bb:
e6:3a:04:f3:87:0d:a5:4b:8d:f2:8b:c6:40:0e:71:28:e6:0b:
8d:52:dd:61:22:97:de:c8:8c:a5:be:ca:45:d7:37:25:ba:ae:
5c:ba:1b:cf:da:c9:f4:90:ba:01:d1:0c:a6:00:fc:2f:82:53:
e3:e2:c1:43:4b:38:f4:0e:77:34:b2:7d:af:35:24:99:ed:6b:
08:55:e9:5e:2e:4d:5f:d2:f9:62:9e:09:0c:b3:e1:16:fa:06:
86:38:81:9d:8b:29:41:33:51:b7:6e:68:f3:d9:bc:2f:67:b2:
75:18:5d:d5:f1:17:f4:b9:c7:63:d8:9c:50:0d:9a:8f:38:69:
85:89:40:66:4e:b2:bb:bc:bb:a2:9e:35:dd:fd:98:58:5d:e0:
04:dd:b8:d0:de:f3:f1:0d:28:94:ea:6f:b3:49:0a:5a:5d:64:
85:e3:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:58 2026 by rpki-client