Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
File: cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft (raw, json)
Hash identifier: 0vh5dofDBsLa24BPkdVS1zikm9JgnSoUbs9d0fQWfKQ=
Subject key identifier: 90:F4:65:AA:A1:85:F6:1D:0A:2D:C1:8F:42:42:60:C3:53:A9:4F:37
Authority key identifier: 71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
Certificate issuer: /CN=7192f3560c15b94d1ef497726845d786786bc762
Certificate serial: 019D28F28E07AA9EBB6DC74EE1B7F6549C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
Manifest number: 0FBB
Signing time: Thu 26 Mar 2026 07:01:17 +0000
Manifest this update: Thu 26 Mar 2026 07:01:17 +0000
Manifest next update: Fri 27 Mar 2026 07:01:17 +0000
Files and hashes: 1: cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl (hash: 4/DGAylnCPQnAPhpMCxgw+EeBKz12JfR8bnMLuq0zvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:8e:07:aa:9e:bb:6d:c7:4e:e1:b7:f6:54:9c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f3560c15b94d1ef497726845d786786bc762
Validity
Not Before: Mar 26 07:01:17 2026 GMT
Not After : Mar 27 07:01:17 2026 GMT
Subject: CN=90f465aaa185f61d0a2dc18f424260c353a94f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d4:2b:3f:e5:77:5f:28:2a:97:e3:e7:1f:c2:
00:7c:8a:c2:ca:3b:7b:b1:9a:97:7b:96:98:3f:9a:
b2:20:c3:7f:33:0e:20:82:97:7f:53:5e:f8:ac:69:
17:3a:50:76:df:b2:b4:17:00:9a:15:6e:a5:1f:a1:
8b:17:0e:ad:e9:b2:09:fa:79:74:03:e6:dc:71:ba:
71:96:17:d3:c5:5b:58:4e:0d:64:3a:15:8d:b4:60:
4d:b1:3c:83:20:96:90:35:69:16:7c:2c:86:b5:e2:
41:bc:41:89:33:85:72:ff:ab:33:8f:60:45:0a:03:
c4:99:d6:e5:21:9f:75:54:e3:39:0e:47:00:0a:86:
2c:c6:12:b7:55:0e:4c:a5:d0:65:ce:b8:35:60:1d:
d3:46:c9:40:c6:49:0f:5e:b0:f1:ff:8c:d7:a2:24:
db:ab:9a:c6:72:c8:e7:f6:47:c3:77:af:e6:20:ee:
99:91:a8:dd:3a:47:82:80:e7:8e:a6:a7:d4:3e:26:
f1:41:16:16:00:7f:84:02:33:c7:39:ee:b6:e5:3c:
50:4b:fa:52:b7:cf:29:ce:85:b9:ea:f7:f5:d3:3c:
bb:4b:25:47:f3:db:b6:79:ad:b6:89:84:3d:3a:c4:
46:8c:df:1e:29:5a:ff:c0:a1:a2:f8:83:36:b1:ee:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F4:65:AA:A1:85:F6:1D:0A:2D:C1:8F:42:42:60:C3:53:A9:4F:37
X509v3 Authority Key Identifier:
keyid:71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:39:c9:51:d3:db:6a:f8:51:41:ee:80:af:a2:37:a8:d9:26:
18:52:46:5c:d0:27:4a:68:8f:7e:9a:27:4e:96:8a:45:80:fd:
f6:f5:a4:ab:9a:bf:f2:1b:d7:2f:e5:60:79:c8:65:72:54:9b:
af:16:9e:be:6c:15:a1:06:81:9a:de:31:09:9f:5c:fb:d5:1d:
08:45:05:7a:84:37:f3:cc:d4:f5:46:de:50:1b:57:94:6a:a2:
43:ef:79:e1:1e:5f:1c:b6:0d:a2:b2:89:47:9f:d6:39:0c:69:
05:9d:e5:b7:9e:14:70:78:ed:af:a0:bf:a0:d7:d0:3c:94:c5:
d3:d6:2e:28:95:1c:1e:9a:66:7a:69:df:23:05:9c:f4:e6:0b:
ee:6b:b5:4c:56:16:20:21:e3:9d:ab:e3:01:bc:9f:09:ca:b4:
66:65:52:d1:f3:13:52:c8:c8:a3:77:61:ec:5f:f3:91:15:66:
4d:9d:35:c1:52:47:8b:5b:21:97:24:7d:cc:f3:26:12:cf:5b:
de:92:9d:d9:84:18:6d:32:09:e7:ee:c2:46:24:83:78:d8:15:
7e:9f:e9:bc:0e:5c:f6:9c:47:26:bd:be:82:cc:b9:77:28:28:
79:f8:e1:28:df:42:0e:6b:54:ae:d5:b0:a2:81:1e:f0:7a:12:
d4:46:1b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:03 2026 by rpki-client