Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File: z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier: IZB+STYETQoCXVHInDJy+8HHIx7X5lP9AkrmDhzVb0g=
Subject key identifier: 1C:E6:8C:88:E0:9B:7F:C0:29:85:2D:51:65:7F:B3:0F:0D:2E:FC:F9
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer: /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial: 019D28F201E4D679ED6BAC1488615DBEBF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number: 1438
Signing time: Thu 26 Mar 2026 07:00:41 +0000
Manifest this update: Thu 26 Mar 2026 07:00:41 +0000
Manifest next update: Fri 27 Mar 2026 07:00:41 +0000
Files and hashes: 1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: VtvJw+60dGmTdNbaLyUfgWLhYFTJD+xk5tj4J4sDMU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:01:e4:d6:79:ed:6b:ac:14:88:61:5d:be:bf:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Validity
Not Before: Mar 26 07:00:41 2026 GMT
Not After : Mar 27 07:00:41 2026 GMT
Subject: CN=1ce68c88e09b7fc029852d51657fb30f0d2efcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:ed:08:d2:6d:e5:2c:05:b8:d5:c2:1a:f5:
11:ea:6d:f7:0d:de:c1:8d:22:63:2a:db:c5:2c:0f:
8d:74:56:7c:fd:be:ab:62:42:01:01:2c:85:e7:cc:
66:02:6e:ea:fe:bf:60:77:59:fa:4c:12:d8:68:d1:
df:19:12:b5:c7:a2:36:a9:cf:ee:4c:3e:41:1a:48:
2f:d1:de:72:b3:c3:a8:70:17:21:cb:e1:10:e8:ea:
27:ba:8a:bb:6e:97:63:5f:d9:0e:68:ea:59:f3:38:
8e:0e:f9:f7:e2:1a:ba:7d:f5:be:be:8a:11:a2:61:
a6:65:0b:80:fa:b7:1e:d9:bf:07:21:dd:e3:41:4e:
a4:3e:93:6e:b8:08:44:f5:4d:f0:5d:24:a7:b0:e8:
84:dc:f3:55:b4:ae:8b:e9:e2:24:52:d2:f8:77:61:
6e:44:c7:32:3d:76:db:e1:69:00:49:4a:3a:2b:38:
38:f3:93:44:dc:8b:e3:8c:79:52:77:0b:e9:e8:1f:
c9:25:54:51:b3:98:06:c6:d7:3c:87:ab:74:67:bf:
af:c6:3f:77:38:0e:90:49:77:16:4f:b4:18:d5:f3:
2d:67:8a:19:9a:54:c9:40:18:6a:ad:ce:f8:78:37:
18:1b:e1:65:ee:06:b6:80:4f:0f:d7:41:1a:e3:2b:
50:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E6:8C:88:E0:9B:7F:C0:29:85:2D:51:65:7F:B3:0F:0D:2E:FC:F9
X509v3 Authority Key Identifier:
keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c0:d6:ec:e1:39:51:a1:73:62:6a:78:9d:0b:8c:44:60:a0:
ec:00:f2:ae:1d:16:54:50:41:ba:8e:49:1e:b9:44:05:75:cc:
6d:ed:b1:e5:f7:b9:38:85:bc:8d:64:9f:5e:0f:c6:7a:ac:a7:
ec:87:55:78:2c:09:70:9e:c1:cd:23:2c:6f:00:7b:0d:53:51:
9f:53:a0:3e:fc:7c:76:30:41:86:67:b2:33:b6:fd:b0:f5:40:
46:1b:37:db:ec:6a:c2:32:6a:75:b3:fa:59:54:34:a1:d8:68:
74:00:5b:d6:6b:bb:c2:a7:cd:f3:16:1b:f2:05:49:a9:2a:ff:
4d:95:d5:e6:c5:12:f1:91:6c:e3:3c:b9:80:cc:6b:31:2f:2e:
cf:30:ff:74:c0:ed:5b:46:0a:fc:e4:11:47:c9:27:56:e6:8d:
23:b6:07:08:57:9c:12:2d:d0:52:b5:51:ea:52:cd:b0:2d:5b:
00:09:6d:bb:62:84:67:2e:64:19:14:8f:1f:0c:7e:99:68:24:
e4:5b:49:5e:f5:31:ed:33:6c:84:a4:98:d5:1d:d6:95:71:17:
d1:a5:3d:88:d9:cc:91:6e:0a:70:14:b5:ae:9a:a1:2e:70:f9:
b2:ce:05:77:cd:65:00:ed:dc:7d:d8:16:08:29:09:2e:70:05:
0e:b0:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:29 2026 by rpki-client