Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
File: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft (raw, json)
Hash identifier: i4AfS9cJc5eNkBkq+cO2rQLayWWxrNY2flzsEEcG5js=
Subject key identifier: AF:D9:8E:6E:86:86:19:9E:E3:C0:63:3A:DF:17:5D:E9:66:29:82:4D
Authority key identifier: 65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
Certificate issuer: /CN=654364d0c6c93df28027488afcbfcf329726392b
Certificate serial: 019D270422561ACEEC71CF499B0206066DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
Manifest number: 0C19
Signing time: Wed 25 Mar 2026 22:01:15 +0000
Manifest this update: Wed 25 Mar 2026 22:01:15 +0000
Manifest next update: Thu 26 Mar 2026 22:01:15 +0000
Files and hashes: 1: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl (hash: CZqq1tvm2gvwBbWB0n2NsF93WtsOGsb4jXdo0tlhQlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:22:56:1a:ce:ec:71:cf:49:9b:02:06:06:6d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654364d0c6c93df28027488afcbfcf329726392b
Validity
Not Before: Mar 25 22:01:15 2026 GMT
Not After : Mar 26 22:01:15 2026 GMT
Subject: CN=afd98e6e8686199ee3c0633adf175de96629824d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:d1:89:77:ed:52:93:0a:b3:56:f5:50:9f:
bc:83:70:f7:d4:16:74:5e:86:b9:3d:d7:6d:b1:9a:
79:c5:49:8f:e1:20:d7:58:39:e0:b2:ff:81:f9:4a:
4d:ad:03:4f:76:d5:c3:ab:1e:d2:be:dc:c6:8f:23:
55:39:8a:b3:23:a8:45:5f:1a:6a:77:75:3d:33:67:
17:c0:53:78:91:9f:c1:0d:32:b9:00:74:1e:4e:9b:
3b:f7:44:50:ce:03:a8:ae:df:2d:69:b5:db:aa:6a:
dd:5b:a0:b9:2b:64:48:52:9b:d5:bd:11:07:b7:91:
0e:0c:de:02:ba:79:3b:bc:1b:db:aa:63:70:5d:32:
37:56:db:47:13:7d:4e:db:25:02:18:b5:7b:77:34:
3a:a0:8c:27:28:8f:6b:9b:a5:f2:31:c8:81:43:23:
ea:96:17:3b:75:0d:9d:47:3d:92:e3:e6:5b:8e:ed:
de:0e:f0:fe:af:9d:36:76:6e:9a:f1:da:3d:8b:7a:
17:67:ad:c9:af:ed:bc:fa:73:05:97:99:1d:84:03:
d8:8b:6c:76:ed:8f:09:2b:41:2d:f3:33:83:6d:5b:
b0:b8:8e:4f:a9:e5:af:60:ee:ff:d1:f6:92:98:90:
5c:f7:d1:ed:19:93:0a:e6:06:3a:54:8e:5d:90:e0:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D9:8E:6E:86:86:19:9E:E3:C0:63:3A:DF:17:5D:E9:66:29:82:4D
X509v3 Authority Key Identifier:
keyid:65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b1:9d:87:e2:53:1e:04:be:21:d4:1e:2c:5b:73:46:06:7b:
72:33:61:ef:b8:ec:ad:02:8c:f1:a0:a7:ad:33:9a:e2:6c:c7:
37:05:6e:ba:3d:d5:9e:9a:1d:98:5f:6e:83:b5:2e:c2:d0:59:
e5:4f:5b:a1:f0:b5:45:55:5d:d2:d6:e4:69:a5:62:b6:d4:30:
76:4f:b1:24:23:34:06:dc:7f:49:51:68:b6:58:b7:cc:50:c1:
2f:c5:21:28:7e:d4:31:a9:c9:b1:0a:e7:25:7e:55:5c:09:9d:
db:0d:bc:51:71:6a:52:58:fc:27:c9:59:78:52:87:11:1e:8f:
04:82:71:7c:28:ad:2b:06:b2:84:24:3b:94:58:f4:97:a2:8f:
1c:28:4a:fa:e8:72:37:d3:71:92:14:fe:c4:a4:ea:39:9c:51:
76:3d:eb:3b:6c:79:49:67:9d:6e:d3:db:fa:2c:97:c3:4e:ac:
2b:db:40:2a:b3:f0:c4:43:c7:17:1a:73:be:97:70:e5:91:c2:
f7:5a:a4:ae:01:c4:a2:c6:ea:da:5c:e9:f9:2a:90:ed:6a:1b:
c1:ac:c3:b7:c3:4f:34:25:dd:64:d1:41:50:36:45:a0:b6:25:
d7:ce:65:4d:80:7f:a9:0c:82:de:e1:84:97:c1:aa:a6:4a:db:
30:88:28:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:11 2026 by rpki-client