Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier: 8MKbTxw6iBcf6DbWRS/2V6aM1h8uuW6ZtdewFcZGMzQ=
Subject key identifier: 7A:59:99:D3:19:66:EF:7B:3C:19:7D:82:4E:B1:CD:CF:BA:68:09:44
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial: 019D2703CE84D9E6F03BC44A41C27BF7BC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number: 0E81
Signing time: Wed 25 Mar 2026 22:00:53 +0000
Manifest this update: Wed 25 Mar 2026 22:00:53 +0000
Manifest next update: Thu 26 Mar 2026 22:00:53 +0000
Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: sekiMJlxem3MxPaCTjZbsM7u/5yNNs0oed0neFzNU1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ce:84:d9:e6:f0:3b:c4:4a:41:c2:7b:f7:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Validity
Not Before: Mar 25 22:00:53 2026 GMT
Not After : Mar 26 22:00:53 2026 GMT
Subject: CN=7a5999d31966ef7b3c197d824eb1cdcfba680944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:5e:3e:95:0a:31:fc:88:66:f3:0b:2a:db:
37:ba:dc:19:d5:45:a3:c5:23:2d:88:77:b6:2d:96:
51:07:90:30:c8:91:1d:a2:68:bb:c1:ab:b6:af:3a:
56:27:13:f9:e5:95:c6:a3:4c:c3:b8:20:5f:cc:76:
c5:72:39:18:1d:90:55:0a:8b:43:43:a8:22:7f:1f:
40:ef:b2:0a:7e:e3:4a:89:85:cc:68:dc:b7:f2:eb:
8f:55:92:e2:d1:51:00:01:87:0a:91:1d:71:39:77:
ca:51:60:6e:ef:f7:ae:87:26:bc:b2:8d:d3:f8:38:
40:19:20:d8:53:a8:6c:f2:98:ba:10:9c:c7:f5:c2:
18:c6:96:ad:f3:f1:7a:51:82:9d:0e:31:25:04:7a:
c8:0f:15:54:2b:0f:e7:08:0c:79:98:ca:c3:36:ae:
b0:1b:13:a1:56:a8:49:53:31:6c:bb:ab:e2:48:6d:
43:39:f6:f0:7e:5a:18:2b:ee:2f:35:fc:59:1a:73:
6b:cc:9d:2e:09:ec:ce:67:82:12:eb:76:ea:cc:92:
4f:97:43:da:6e:42:65:51:31:02:4b:21:8a:2e:cb:
f0:28:5a:ae:a0:5e:5d:37:e6:78:0a:7b:66:ed:c4:
32:09:81:fd:eb:62:c8:02:14:62:a6:a4:05:b6:05:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:59:99:D3:19:66:EF:7B:3C:19:7D:82:4E:B1:CD:CF:BA:68:09:44
X509v3 Authority Key Identifier:
keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fc:08:a3:48:41:08:3f:cf:8a:d7:a0:49:b4:de:40:73:1e:
a7:59:f9:19:1d:98:06:39:11:f2:8b:4f:2f:2e:dc:fe:9c:a7:
85:bf:40:f5:5b:ca:e6:87:c7:c3:f0:2f:e4:c1:89:a0:c5:b1:
fb:c1:3d:9f:f4:11:be:c8:bc:80:6f:7a:de:6c:c1:db:fc:19:
40:d4:27:79:52:fd:5b:d5:01:89:da:8a:8f:21:f6:bf:63:d8:
64:17:d9:c2:7c:16:4e:30:30:50:fb:ce:9f:33:79:10:8a:3c:
be:c9:9e:75:6b:2f:64:49:8d:0b:bc:a0:7b:3d:ff:c9:3e:09:
46:e5:65:14:1b:3b:00:7c:e9:6f:c6:cf:38:12:f2:34:64:63:
7c:45:5c:56:3b:d8:2c:11:5e:91:f2:49:dc:a0:a1:39:04:76:
34:d5:fc:fb:48:22:49:a8:eb:6e:94:2f:f5:27:0d:e4:fe:1e:
e3:3e:2b:89:d7:a3:3e:a0:df:53:a7:76:0e:78:74:8d:85:8c:
d1:0c:17:07:d3:93:5f:17:b6:5f:90:8d:ce:f8:da:7c:7c:0c:
73:cb:59:b4:ad:f5:28:23:25:9f:ac:9b:23:95:7f:8e:35:52:
0f:39:f7:95:56:1b:2e:bd:bd:56:98:fc:d3:68:ea:ad:bd:d2:
26:c6:14:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:30 2026 by rpki-client