Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
File: Zur1u0vnZQbp7F5pTYtYUKmOciM.mft (raw, json)
Hash identifier: 5XOK3yfICI4J8DYO9tYsQW1vIGKgMQu40hAhGYbFiiU=
Subject key identifier: 3C:8D:F5:76:FA:9A:A5:AC:E8:DD:0C:64:23:B3:71:E0:E4:5D:FF:35
Authority key identifier: 66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
Certificate issuer: /CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Certificate serial: 019D284DC7E9CED096DF6FFC8209F325C8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
Manifest number: 0EF3
Signing time: Thu 26 Mar 2026 04:01:19 +0000
Manifest this update: Thu 26 Mar 2026 04:01:19 +0000
Manifest next update: Fri 27 Mar 2026 04:01:19 +0000
Files and hashes: 1: Zur1u0vnZQbp7F5pTYtYUKmOciM.crl (hash: PSyHICsCFVfu9JemEvebaDn0vEHQH3UPxwqdc5/y9xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c7:e9:ce:d0:96:df:6f:fc:82:09:f3:25:c8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Validity
Not Before: Mar 26 04:01:19 2026 GMT
Not After : Mar 27 04:01:19 2026 GMT
Subject: CN=3c8df576fa9aa5ace8dd0c6423b371e0e45dff35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:a3:26:4d:05:3f:84:3e:56:69:4a:9f:9f:
40:3e:bd:cb:25:ff:05:83:84:4d:76:76:ec:b2:48:
4b:dc:e4:8c:f8:41:6b:4b:7b:3f:44:0a:78:9e:e7:
24:94:e3:46:de:35:04:67:d7:5d:c7:ba:43:2b:ee:
de:b3:6c:e7:0d:09:fb:e9:5b:a3:69:13:a0:82:56:
28:ab:a8:20:e1:13:1e:10:b1:21:9a:88:c0:34:a0:
dd:9f:f8:58:88:39:34:88:19:8e:f7:c2:c3:3c:c9:
a2:7f:44:8a:1c:38:75:db:f9:7b:71:e4:62:6b:52:
51:3a:ac:96:d1:ef:b4:f2:55:8c:d6:ee:9a:33:d5:
d2:fe:15:3f:d6:e4:69:04:b9:f0:0f:6a:b0:14:3e:
30:dc:96:40:a5:2d:c3:92:fe:b9:68:ca:a4:eb:ce:
c4:bf:a0:b7:15:16:63:48:1b:a3:03:6c:29:55:aa:
2b:cd:cb:97:96:6c:df:5e:c2:8a:3b:3e:12:e7:f3:
25:03:51:5c:24:48:d3:63:ba:20:2a:dc:18:bd:b0:
87:83:aa:e4:3f:be:b1:28:83:70:45:28:c9:61:5a:
5b:aa:37:4c:54:9e:51:6d:2a:27:6d:a7:ad:e4:68:
9e:b8:d4:34:83:9b:2d:71:bc:c2:44:ad:c0:08:0f:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8D:F5:76:FA:9A:A5:AC:E8:DD:0C:64:23:B3:71:E0:E4:5D:FF:35
X509v3 Authority Key Identifier:
keyid:66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:34:f4:f8:53:13:6c:a9:3c:79:7f:83:37:34:07:b7:5a:99:
07:6e:0a:f2:71:1c:20:d6:21:81:8c:b3:91:d8:e8:7c:2d:a3:
b0:fd:d7:d4:a0:03:53:0c:42:74:84:8f:e9:5f:01:60:55:54:
3a:26:08:a6:a2:a6:63:2f:ce:8d:7d:5e:ac:17:0e:ee:bb:26:
ea:54:26:42:ba:3b:e6:d7:b6:ac:ce:b8:d9:3a:f4:0a:d4:35:
e9:e3:0a:bb:63:91:da:1e:85:b5:e9:ad:b3:4e:a0:1c:25:33:
75:05:bb:22:bf:3f:78:68:93:4f:e9:fd:9a:42:1f:e6:f4:4e:
c7:f0:49:da:db:ed:90:9f:5b:56:e1:95:5c:be:46:c6:5a:12:
46:60:8d:a1:86:eb:35:15:d8:a8:a8:96:ea:b4:8c:c5:52:b3:
f8:f6:55:a5:fe:b9:13:08:88:0b:cf:3d:20:3b:d0:ca:b9:d7:
f3:40:f2:b9:d8:02:76:32:ee:e4:1f:00:73:a9:3b:39:ac:f8:
47:c8:a8:d5:e0:a1:d7:7b:19:8e:c8:9b:3b:64:ef:73:fd:f3:
b1:57:17:3b:b6:df:43:dd:c8:88:96:f2:aa:6d:4f:0e:59:68:
cc:96:75:06:a8:3f:b3:c6:88:89:fb:7d:34:10:21:67:a8:13:
6a:eb:ee:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:12:55 2026 by rpki-client