Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
File: ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft (raw, json)
Hash identifier: dO0BJQsJV/mMPALNhxXVycJXyzIjJ81iWrpXYDTnTew=
Subject key identifier: 6C:64:3D:5D:47:7D:EA:5B:26:1A:C7:E3:A4:67:28:8A:3D:AA:99:67
Authority key identifier: 66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
Certificate issuer: /CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Certificate serial: 019CAB6B36F8F5DD375B60E04D7E79DBE04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
Manifest number: 1523
Signing time: Sun 01 Mar 2026 22:00:56 +0000
Manifest this update: Sun 01 Mar 2026 22:00:56 +0000
Manifest next update: Mon 02 Mar 2026 22:00:56 +0000
Files and hashes: 1: ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl (hash: T1dqY7GKr9DFOUySEattz/UlKwPpybNG8DBX1fCVeGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:36:f8:f5:dd:37:5b:60:e0:4d:7e:79:db:e0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666a6f432d0c31fb1017e2ab68bb1d6eefccf699
Validity
Not Before: Mar 1 22:00:56 2026 GMT
Not After : Mar 2 22:00:56 2026 GMT
Subject: CN=6c643d5d477dea5b261ac7e3a467288a3daa9967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c9:39:17:47:0d:66:df:a5:61:22:99:9d:62:
a9:95:44:ea:aa:2f:cf:c6:a7:fd:79:28:f6:53:81:
0d:94:00:7d:b1:b7:87:c1:71:72:7b:6d:ff:ac:38:
60:b2:40:98:8c:9a:7f:58:e5:03:1a:a0:85:a4:d2:
bf:e3:79:2b:62:14:87:87:3d:c3:77:18:ba:bf:05:
06:3c:4f:76:6c:eb:4f:fa:c9:5b:d6:51:06:e1:7c:
69:3a:0e:82:14:ab:09:fa:be:79:f9:11:c0:88:17:
45:06:d2:bf:4e:e8:d0:9c:9b:de:fa:03:0c:c4:a9:
43:3d:84:a6:12:5a:ba:b7:99:1c:60:95:cd:82:96:
47:38:8b:67:3b:14:ae:82:ab:2d:89:b9:a1:f9:fc:
01:b8:7f:14:9d:52:eb:3f:44:5c:be:a0:c3:c7:5e:
77:c4:3b:28:3c:34:37:30:76:53:9b:c2:eb:20:13:
29:85:6c:40:42:93:da:51:23:de:ef:76:70:35:67:
66:a9:65:44:3c:25:6f:6f:f7:53:dd:01:75:32:af:
b6:65:4b:38:56:e0:be:9a:df:d6:37:56:27:e2:ce:
c3:96:dd:79:f3:08:df:db:81:df:01:37:05:4a:91:
1a:95:53:16:f5:a3:de:5e:ee:fb:e6:6c:ae:80:19:
bf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:64:3D:5D:47:7D:EA:5B:26:1A:C7:E3:A4:67:28:8A:3D:AA:99:67
X509v3 Authority Key Identifier:
keyid:66:6A:6F:43:2D:0C:31:FB:10:17:E2:AB:68:BB:1D:6E:EF:CC:F6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmpvQy0MMfsQF-KraLsdbu_M9pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/646891-045e-44e5-8991-27cc0aa0c049/1/ZmpvQy0MMfsQF-KraLsdbu_M9pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a0:2e:3a:28:dd:bb:28:90:12:29:38:54:28:57:58:42:7e:
fc:48:e5:57:90:1d:1f:ba:6b:84:c5:95:89:26:42:4c:48:51:
13:ff:92:6f:27:6b:b3:48:16:8a:ed:8a:c7:02:a8:4f:17:26:
94:23:0f:cf:71:b9:a6:3c:50:90:8b:37:ec:5c:1f:66:82:89:
fa:15:48:de:b6:a7:20:4e:22:6b:df:ad:47:43:85:39:17:77:
18:ab:8a:c7:c9:39:69:b4:72:7e:30:84:15:34:8f:12:d2:8f:
2b:71:3d:6a:eb:08:cd:84:79:16:87:39:9b:58:6e:f0:0f:dd:
71:7e:5d:ab:70:c2:5a:31:5d:c0:66:c8:b5:f9:69:d7:3d:79:
17:b1:61:0c:dd:b0:f8:1a:eb:51:c9:c0:56:3e:85:ec:c7:8d:
3f:6d:20:11:51:7b:bc:eb:a2:4c:0c:61:d3:ad:50:4d:92:2a:
46:f0:db:b9:16:31:74:9a:f4:26:00:f2:6f:62:2a:53:4e:e6:
bc:eb:21:42:ad:71:c0:11:1b:95:55:81:be:4f:c2:a7:3d:ce:
a4:ef:f8:64:c0:1e:ef:7b:d7:36:1f:34:9f:eb:ac:eb:fe:23:
7f:1d:b3:4f:cd:4f:48:fa:e2:d7:9c:9d:4f:40:64:cd:11:d9:
b8:00:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:31 2026 by rpki-client