Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
File: zvcELPfCTHnXmEiy6MqzNXpkD9s.mft (raw, json)
Hash identifier: ex94zTZF623oCnXcMK2j6Ry3mRXa3PQnUcmxfDwnLUo=
Subject key identifier: 2E:A9:A6:5C:BA:2D:A4:F3:4F:30:B4:35:A6:45:B8:01:A3:FC:4D:5B
Authority key identifier: CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
Certificate issuer: /CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Certificate serial: 019D2703D6CD85A75589074DD50334E2D3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
Manifest number: 0AA4
Signing time: Wed 25 Mar 2026 22:00:56 +0000
Manifest this update: Wed 25 Mar 2026 22:00:56 +0000
Manifest next update: Thu 26 Mar 2026 22:00:56 +0000
Files and hashes: 1: zvcELPfCTHnXmEiy6MqzNXpkD9s.crl (hash: ealizue+qo44TEg1WxwEqQfuKzpMwtZUXpJrT8HlakQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d6:cd:85:a7:55:89:07:4d:d5:03:34:e2:d3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Validity
Not Before: Mar 25 22:00:56 2026 GMT
Not After : Mar 26 22:00:56 2026 GMT
Subject: CN=2ea9a65cba2da4f34f30b435a645b801a3fc4d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:dc:d5:31:34:0d:51:bb:11:e9:10:dc:26:
f7:58:55:42:d8:7b:85:67:ee:fb:37:d6:f7:8d:a1:
9b:4b:d1:3b:7c:22:03:1f:a2:a0:06:35:44:88:5d:
3d:f4:5e:19:c1:b3:5e:ea:3b:db:a8:3c:18:36:cb:
e5:2a:b7:3c:eb:6e:c3:86:48:df:23:24:29:ac:29:
9c:2f:78:23:d4:ec:96:d4:e9:83:71:b4:c1:1b:a6:
48:0d:c7:e5:50:8b:5c:ed:a2:85:17:0a:20:76:52:
93:eb:ce:55:fe:ce:dd:db:41:36:bb:48:62:de:12:
68:07:bf:24:16:81:90:e0:da:33:63:4d:d4:0d:9a:
89:6e:89:5f:ba:7e:89:0d:15:b3:48:43:24:e5:d0:
42:27:6f:4b:76:bf:b8:86:56:2b:b5:81:9b:1c:0f:
41:31:4d:bf:e0:c4:8c:58:5a:4f:a9:c0:fd:b5:df:
ac:7d:07:8b:19:d8:de:22:d4:35:f2:3d:0c:00:33:
9a:68:1d:08:90:8d:07:d6:1f:39:d5:cc:14:33:5d:
e7:bc:29:b1:7f:25:f5:cd:77:19:89:5b:34:80:df:
2c:bf:3d:ca:e1:81:22:d3:6b:83:74:c8:f1:d7:69:
52:5a:9d:84:73:32:b8:e3:9f:d9:0b:f4:50:88:95:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A9:A6:5C:BA:2D:A4:F3:4F:30:B4:35:A6:45:B8:01:A3:FC:4D:5B
X509v3 Authority Key Identifier:
keyid:CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9b:b7:91:f4:68:7d:eb:0f:55:32:61:48:cc:41:f0:a1:9d:
18:cd:b0:13:65:ab:6c:65:bd:3c:c8:ec:fd:92:b3:3c:29:4e:
91:c2:89:1e:5f:93:6f:ba:ec:c7:cc:28:eb:3a:58:a7:0a:78:
f9:1f:b6:a0:77:2a:52:88:82:54:c5:f8:b0:a8:9d:2d:a4:9a:
ec:b4:4d:d9:c2:3c:91:b4:a5:56:74:41:7f:74:ea:7a:10:aa:
1c:e7:3c:a8:b9:c1:d7:fe:d3:79:08:d1:d3:ef:d4:20:45:d4:
79:08:65:4a:f4:da:cb:86:11:fa:6c:01:06:df:38:d0:27:54:
9c:31:09:e3:35:35:67:53:ae:40:ee:b5:98:cc:aa:e4:10:af:
c4:d8:26:dc:75:88:66:9f:98:9a:04:9a:83:91:d6:3b:2b:70:
bc:5b:0d:ef:c8:b5:c6:d6:7b:b2:39:83:63:17:dc:ac:1b:48:
a2:9a:f4:33:1c:89:79:39:8b:a9:76:19:6a:15:4a:01:a0:8a:
23:e9:20:f0:5a:5a:be:5e:f7:3e:04:5a:3d:2a:3b:19:aa:97:
db:bd:ee:1c:2c:02:63:53:3b:27:5e:37:3a:61:c3:21:79:4c:
c3:16:b2:b8:23:a7:79:7c:6c:70:d0:de:3c:bd:be:b5:1e:c2:
b5:57:94:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:10 2026 by rpki-client