Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
File: zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft (raw, json)
Hash identifier: Wyhrfnwtn8X+R8QgINWnHvxbZOeRdwyKSBDF7YOEb6A=
Subject key identifier: C9:3C:16:E6:98:E7:7B:25:80:60:7F:17:2F:B8:CB:DA:ED:DA:18:01
Authority key identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
Certificate issuer: /CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Certificate serial: 019D2997440E7A93F902873F4D1EBFAF565A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
Manifest number: 041C
Signing time: Thu 26 Mar 2026 10:01:12 +0000
Manifest this update: Thu 26 Mar 2026 10:01:12 +0000
Manifest next update: Fri 27 Mar 2026 10:01:12 +0000
Files and hashes: 1: zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl (hash: H8Ud3wV0gS1YN93fOiGH6ls/lw5wqCbkC9y0wsRenTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:44:0e:7a:93:f9:02:87:3f:4d:1e:bf:af:56:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Validity
Not Before: Mar 26 10:01:12 2026 GMT
Not After : Mar 27 10:01:12 2026 GMT
Subject: CN=c93c16e698e77b2580607f172fb8cbdaedda1801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:c9:e1:d1:b9:b6:fc:a9:8c:07:b4:7c:c5:
c8:49:6d:db:97:eb:b4:96:50:3b:2c:91:cb:18:c8:
fc:d4:31:2d:c5:fb:62:3d:17:65:51:58:7f:b9:27:
bd:54:de:34:c8:48:2d:b1:2f:49:f9:9f:f3:ef:e3:
97:64:99:27:e5:a9:e9:e6:03:ad:b8:08:3a:a5:87:
e2:f4:03:e7:b7:2a:bb:48:3c:3d:c2:51:f2:d7:c1:
d7:22:54:e7:a5:cb:cc:a7:b7:1b:0d:e8:b4:32:bf:
b1:4e:21:51:92:16:30:b9:2b:26:4a:1f:55:78:b6:
aa:88:9e:dd:8a:51:7c:16:40:5b:85:90:15:bd:ac:
db:a3:92:4a:97:d7:9a:ee:f0:f4:cb:f9:d8:ec:49:
b8:0f:4e:a3:9a:42:d2:ce:9d:43:07:31:2e:7e:72:
14:eb:5a:23:5d:ca:5c:3a:15:ac:8c:4a:44:3d:ac:
a7:17:94:ee:6e:81:80:a1:49:56:bb:41:c3:2a:84:
3b:ea:2e:6b:67:36:39:90:90:b3:a6:cb:c5:a2:fb:
a1:fa:c7:2b:a2:e5:fa:44:21:e6:71:ec:79:6c:1d:
f3:b9:8f:e7:71:53:13:cd:72:e8:3e:50:9e:04:2b:
d9:40:16:87:ed:58:ec:58:89:c5:e8:11:85:05:dc:
2b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3C:16:E6:98:E7:7B:25:80:60:7F:17:2F:B8:CB:DA:ED:DA:18:01
X509v3 Authority Key Identifier:
keyid:CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:36:30:bb:23:ff:87:72:41:39:de:a6:89:99:5d:d9:58:21:
ef:97:db:f0:f9:5a:2c:80:dc:95:e0:0a:88:3c:44:0a:b2:a6:
20:c2:23:21:e9:1d:63:53:dc:3e:1e:c7:88:96:c5:a2:a7:a1:
9f:61:75:ef:06:18:7d:dc:39:0e:c2:04:91:3f:77:f2:fa:64:
ee:2f:ef:a4:fb:48:8c:51:c6:a9:0c:25:28:06:cb:06:13:30:
95:7f:74:04:4d:d9:21:ed:4a:79:b1:a7:55:eb:11:5d:b0:ad:
af:3e:f9:50:50:ca:99:41:b3:5f:50:c6:e6:ed:2d:e8:48:51:
0a:72:1a:94:c1:dc:36:95:28:82:04:f6:b8:30:6a:70:48:e1:
5c:3a:c7:9a:e3:18:f4:87:50:cf:e9:c9:a8:50:50:36:9b:6d:
7f:fc:29:64:25:4e:d2:a9:d0:8c:7e:5d:54:53:6b:90:06:29:
a1:b6:81:db:0a:e8:d7:a5:23:3a:22:94:c3:28:5c:23:23:c8:
be:b4:a6:25:26:84:a6:7c:2d:92:35:cf:fd:9e:00:1c:54:52:
06:33:35:85:0c:d2:64:11:af:24:01:88:53:09:ae:f7:6e:17:
5e:e6:d8:c3:45:88:e7:79:cb:0a:75:5c:ba:85:4d:db:3b:4e:
15:4e:5d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:21 2026 by rpki-client