Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json)
Hash identifier: ZPVQAXvkgU98QCYkMOeAHvDiZX51ioGyIJAv1DEHIKQ=
Subject key identifier: 49:81:34:E9:C0:1A:59:C1:89:15:30:35:B7:F9:5A:72:89:6C:25:A4
Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851
Certificate serial: 019D28BBC5E97E9B1F18F46B4D54EA5CBB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 06:01:27 +0000
Manifest this update: Thu 26 Mar 2026 06:01:27 +0000
Manifest next update: Fri 27 Mar 2026 06:01:27 +0000
Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: F57ynN6JEMKjj+NDuBFWlmLYNa/u5qDJF7D4IEzda9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:c5:e9:7e:9b:1f:18:f4:6b:4d:54:ea:5c:bb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851
Validity
Not Before: Mar 26 06:01:27 2026 GMT
Not After : Mar 27 06:01:27 2026 GMT
Subject: CN=498134e9c01a59c189153035b7f95a72896c25a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:e7:f3:06:a4:7b:df:89:44:b5:5f:ec:9b:
cb:3f:13:95:f9:6a:1c:c8:ae:8d:ad:15:8f:59:09:
08:48:46:42:2f:ab:7a:b6:e5:51:b2:54:23:b1:aa:
a9:58:3a:11:a2:a3:3e:06:e8:a3:38:c5:df:a8:e3:
1c:12:23:b6:00:77:22:c4:a6:22:7c:da:fd:96:93:
ff:f4:ef:12:2f:0c:6a:d6:48:2c:48:94:56:b6:3a:
dd:e1:1d:64:52:72:ac:a7:be:d6:5b:5f:32:52:34:
08:92:e3:9e:76:bb:d5:68:d1:ab:d0:d1:5a:1c:96:
86:79:3c:05:62:82:f6:e3:10:5c:66:c5:2d:13:bc:
69:82:9f:fa:eb:ce:90:e4:c1:8b:53:92:d7:3d:8b:
a7:bc:89:15:d7:09:09:2e:5d:7c:b7:60:7e:10:e5:
1b:d5:be:ea:7c:0e:e1:8f:3a:8d:93:4a:8e:a5:f0:
61:62:56:12:87:3e:4e:40:c5:71:f2:1a:33:01:38:
c8:69:2d:80:d9:0b:e6:a1:8a:4b:18:81:5d:cf:ad:
2d:6a:95:13:c3:82:b5:9d:4c:0a:37:98:e0:f8:4f:
ba:19:13:d4:e2:28:b8:95:5f:c7:8f:f9:1e:0a:e2:
5f:7e:0d:38:51:54:09:21:65:23:25:e9:f0:cf:2e:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:81:34:E9:C0:1A:59:C1:89:15:30:35:B7:F9:5A:72:89:6C:25:A4
X509v3 Authority Key Identifier:
keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3b:f6:1b:d5:ff:f5:78:bd:39:e8:bd:7f:3a:b8:eb:19:bf:
75:6c:2c:97:98:8c:7f:db:ce:9e:4b:30:a1:cd:ce:d2:a9:2a:
e8:ad:dd:43:2b:38:76:c2:8a:cc:b7:38:88:c9:79:fd:c9:42:
21:86:df:ab:bd:85:35:71:01:b3:fc:80:f1:8a:4f:30:0c:3e:
4b:49:8b:df:67:71:f4:ce:5d:fc:2d:82:66:b7:84:34:94:6d:
cf:f8:c6:9d:7f:10:5c:f9:50:ca:ce:8d:2f:62:10:1e:bc:4b:
3e:21:70:4a:7c:8c:db:bb:43:44:3c:3c:a6:84:cb:e9:27:0b:
d9:dd:ec:9b:88:65:96:f8:a6:8c:23:c6:10:cb:b1:00:2a:d7:
61:fe:db:28:14:83:05:e4:b6:1c:1d:c0:7a:2d:05:d0:38:1e:
1e:56:50:0f:56:f2:dc:4a:44:e5:3d:da:19:9a:78:c5:61:54:
75:00:da:cc:5d:cb:ca:24:7d:75:c0:d3:22:5a:ef:71:bc:a2:
7a:48:11:d2:13:8d:31:b5:47:65:08:d4:a1:9e:09:b9:62:83:
94:73:b9:35:f9:51:0c:78:f5:ea:ce:40:91:98:38:d1:9c:45:
d6:66:74:9d:b7:b4:6f:ad:43:f8:6a:67:2f:3c:39:25:6c:d6:
1e:d5:f7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:14 2026 by rpki-client