Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json)
Hash identifier: It9bqYCGhg4mu7pz1HiMfrldqJ44Ts/slI+AZDbU8QU=
Subject key identifier: 60:9E:30:F0:03:7F:18:60:88:95:D3:2B:40:91:F1:14:15:1B:E6:2A
Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Certificate serial: 019D25BA8F50E3C86AD7477514A1E0FEB257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
Manifest number: 135A
Signing time: Wed 25 Mar 2026 16:01:16 +0000
Manifest this update: Wed 25 Mar 2026 16:01:16 +0000
Manifest next update: Thu 26 Mar 2026 16:01:16 +0000
Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: CBAk/8LBKfPOsXPLxCGByIwt4WNGSANV3S77VtgSTvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:8f:50:e3:c8:6a:d7:47:75:14:a1:e0:fe:b2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Validity
Not Before: Mar 25 16:01:16 2026 GMT
Not After : Mar 26 16:01:16 2026 GMT
Subject: CN=609e30f0037f18608895d32b4091f114151be62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:a7:df:57:2a:61:be:b0:a9:dd:22:57:37:
e9:d9:ad:4d:bf:99:06:a0:c0:fe:fd:f5:7c:69:04:
1f:e7:b1:06:0d:09:d1:82:36:65:ea:cd:01:74:5f:
b6:68:ee:4e:f3:8e:ef:e2:78:c2:e1:b2:98:e8:27:
44:54:b2:09:11:cb:15:84:cc:f9:65:3e:2f:86:6c:
90:84:78:95:85:6e:5c:f0:2d:cd:fd:9a:99:13:b8:
04:0d:30:ac:c8:65:11:c0:65:0e:32:b6:bc:df:56:
9f:8a:de:a0:e7:72:a5:81:c3:42:8f:6e:61:52:ef:
e6:ea:bc:1b:27:78:83:69:14:2d:bc:df:3f:a0:5a:
8c:88:89:7e:2e:d4:d4:0d:92:75:f3:11:fa:c1:82:
ec:46:8c:8a:37:22:5a:5d:20:34:41:77:9b:2c:73:
35:95:39:b8:cb:bb:6b:11:85:a3:c2:d1:89:61:23:
66:92:ed:42:7c:17:bb:c5:62:2a:bd:d6:b4:c6:db:
5d:8f:bd:d4:a4:90:34:3c:89:1c:5c:f6:6e:cb:89:
fc:07:ca:c8:25:10:5f:00:91:05:a8:be:d8:f6:2c:
f6:8d:58:ce:f0:93:f1:a0:c7:2d:2f:87:95:8f:c9:
87:d5:a9:6a:e5:ff:37:ae:50:f7:91:15:30:d0:65:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9E:30:F0:03:7F:18:60:88:95:D3:2B:40:91:F1:14:15:1B:E6:2A
X509v3 Authority Key Identifier:
keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:33:54:bc:86:f0:b5:9b:87:aa:84:75:14:15:95:e2:15:f3:
1c:b9:b0:a0:05:f0:d4:42:54:a9:2b:48:55:41:78:d3:3b:9f:
fb:00:b1:05:17:92:7a:36:c8:cc:8e:17:0c:8b:f0:93:d8:31:
b4:3d:bc:01:01:07:96:0c:80:e7:66:75:25:1e:ba:c9:8d:ed:
28:dd:8c:e2:f8:b1:d9:fe:21:0a:ee:e4:59:cf:a2:1b:ad:4c:
9c:90:1e:82:00:00:88:a2:b1:ce:08:a2:9c:d3:fb:72:3d:63:
6a:06:24:2a:b3:cd:b0:a8:b2:7f:89:27:cf:4c:05:e6:06:04:
b5:7a:37:02:80:73:80:3d:11:e4:29:64:9a:06:96:99:eb:59:
0d:0a:95:e9:ac:74:c1:1b:2f:92:db:dd:29:82:39:e3:31:27:
0d:45:0a:76:39:5e:92:14:2e:d9:df:39:ff:80:61:5d:b8:78:
dd:b1:38:4d:99:a7:f7:9b:26:2e:4d:65:f4:6d:67:2f:fa:81:
1b:9f:6a:84:ac:87:54:f4:f8:eb:cc:d1:03:be:b0:e2:cf:a5:
a3:3a:9d:27:1d:00:1b:a2:4d:0a:49:9f:5f:17:23:78:d5:ad:
1a:f2:3b:dd:64:f1:98:78:18:3d:09:dd:35:cd:17:3e:bc:ef:
6a:50:7c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:16 2026 by rpki-client