Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json)
Hash identifier: YYChq2r1016raapeY88md8H7aLyQMDnEgfTz6O+IQbk=
Subject key identifier: 73:51:F1:33:46:DA:A7:40:12:9B:99:98:95:6E:66:8D:8D:6D:1D:F1
Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b
Certificate serial: 019D2703EE53A391F5FB6C1F81EE6E50BCCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
Manifest number: 0EDB
Signing time: Wed 25 Mar 2026 22:01:02 +0000
Manifest this update: Wed 25 Mar 2026 22:01:02 +0000
Manifest next update: Thu 26 Mar 2026 22:01:02 +0000
Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: R8n0v73ojg03ARsMPcumriAI065RQwzdY7gZDvwxqGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ee:53:a3:91:f5:fb:6c:1f:81:ee:6e:50:bc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b
Validity
Not Before: Mar 25 22:01:02 2026 GMT
Not After : Mar 26 22:01:02 2026 GMT
Subject: CN=7351f13346daa740129b9998956e668d8d6d1df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:93:dc:c0:d6:87:7f:1f:f2:bb:e3:46:aa:
c7:ad:a6:ea:c6:61:d5:ea:77:b6:53:6e:40:38:e9:
ca:18:ce:70:0b:d1:20:7e:d9:65:29:eb:ff:fb:41:
62:c4:5e:1e:29:a2:b5:11:b2:5a:19:22:03:ba:d9:
74:c7:ac:e6:d9:63:c8:4b:74:a2:ee:48:0e:cc:b5:
eb:3e:d1:92:bb:a4:fc:27:62:49:cd:c6:bb:72:f8:
e4:03:3f:0f:9d:87:9e:78:64:73:dc:b8:8d:86:8c:
dc:11:ac:e4:2e:c4:04:ba:a5:06:59:ff:6c:2f:b7:
d8:f5:1c:50:61:08:f6:d5:2a:50:19:50:2b:68:f5:
0b:40:93:38:46:ce:c2:f7:bc:45:98:c7:93:3a:ad:
15:fa:dc:aa:7b:2c:77:4a:09:43:89:e5:57:3c:ee:
ae:49:9b:b0:ee:bc:85:3c:c4:38:93:f2:e6:3b:7b:
14:d1:9e:c9:f9:a5:5e:ce:f4:51:2c:3e:c7:eb:19:
a1:66:e7:cc:35:ff:f8:04:45:0f:c1:dc:6f:28:13:
bf:2e:e6:f5:c7:83:a4:54:4c:43:7c:9d:e2:04:c8:
e0:3f:2b:ee:4c:bd:09:e2:b5:f3:40:32:5f:98:ef:
93:0d:70:7a:69:dc:15:fc:59:fc:60:f6:ce:3d:13:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:51:F1:33:46:DA:A7:40:12:9B:99:98:95:6E:66:8D:8D:6D:1D:F1
X509v3 Authority Key Identifier:
keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d2:61:aa:19:c6:a1:62:1d:f6:98:dc:3b:fe:b3:8d:70:f3:
ee:59:bc:88:cc:2d:2c:4a:5e:83:d6:8c:7c:6d:43:94:f5:55:
33:1c:af:a5:7b:b7:02:96:2e:07:d1:e2:3f:7e:b5:0e:ba:a3:
34:61:2e:9d:cd:2e:05:35:88:5f:32:66:82:e1:ed:68:b6:9b:
79:03:da:e4:25:39:b4:f6:98:4f:93:b3:3b:31:00:30:3d:f5:
2a:6b:4a:0c:a5:fb:8d:70:fa:be:82:74:bd:0a:64:fb:16:75:
db:17:f1:86:d2:32:82:9f:e1:2e:33:16:40:04:3e:0d:da:55:
2f:05:55:66:07:04:a4:15:a6:53:a1:7b:af:e8:fb:af:3c:83:
c9:91:1e:a3:be:41:d0:bb:0a:f0:6b:db:7f:cc:77:98:a0:ad:
41:bc:35:fd:9f:a0:4c:d2:67:06:df:46:63:93:3c:ad:5a:1b:
5f:f4:7f:d4:c2:24:c0:35:29:5a:14:2e:6a:fe:30:0f:1d:06:
f0:b7:e2:86:94:9b:f3:eb:f4:06:3c:5b:ea:08:17:32:7d:3d:
2d:46:1b:5d:e5:b6:ce:0d:64:79:1b:64:1b:5a:ec:fc:f1:8c:
a8:c8:d3:e9:ea:13:10:0a:9e:19:a7:87:a5:96:15:6c:39:d0:
fe:3d:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:33 2026 by rpki-client