
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
File: ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft (raw, json)
Hash identifier: 6RDc7OnhRUannSZnVodBqGJL4sPVC7I3B8pBNYrG/1I=
Subject key identifier: 45:D3:1D:E8:F0:F1:43:C9:F1:47:52:29:1B:05:C2:5B:97:BA:FF:CA
Authority key identifier: 64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
Certificate issuer: /CN=64f47c98440f103825c8ea5074298b18cc113e20
Certificate serial: 019CABA201B115BA65D4A7A5549368093C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:00:46 +0000
Manifest this update: Sun 01 Mar 2026 23:00:46 +0000
Manifest next update: Mon 02 Mar 2026 23:00:46 +0000
Files and hashes: 1: ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl (hash: b3xw0M8XnJZhPV8+JrUT/GtUs1HuDzWHVzLV3/ulOGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:01:b1:15:ba:65:d4:a7:a5:54:93:68:09:3c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f47c98440f103825c8ea5074298b18cc113e20
Validity
Not Before: Mar 1 23:00:46 2026 GMT
Not After : Mar 2 23:00:46 2026 GMT
Subject: CN=45d31de8f0f143c9f14752291b05c25b97baffca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:af:25:16:6f:2d:9e:fb:c2:d2:60:9b:9e:
0b:47:a3:b6:8e:a5:1c:89:6c:58:88:2a:2a:72:c8:
8f:f4:73:b7:66:6f:6c:58:1e:63:e4:60:fb:60:29:
f5:38:e5:3c:a6:33:9e:e4:cf:33:2a:d4:25:ee:6e:
50:92:b6:e9:73:3b:5c:6b:bc:98:be:cf:b5:3e:15:
63:57:99:d2:87:c8:e4:10:bd:d3:7d:8e:a3:07:19:
d2:57:18:d6:0e:4c:24:3c:63:33:5a:e5:b8:af:18:
33:f2:0c:9b:0a:c5:75:d1:19:e9:c5:04:83:c6:92:
28:0a:e3:05:ce:e2:bd:6b:fc:1f:5a:5e:20:fa:5e:
a9:5e:03:3c:b8:6f:d6:7f:c0:2a:b8:31:82:6e:d3:
41:91:1d:48:e9:88:e6:e3:0e:df:0e:fd:3a:f5:77:
1d:74:40:49:c4:20:ac:2c:ea:7b:46:51:41:52:b0:
35:54:44:1a:06:8c:0c:d2:b0:89:48:5d:00:72:ac:
6e:22:ed:65:0a:f0:2b:05:13:d2:4d:25:43:13:90:
ab:ac:45:22:5a:13:55:e4:a7:31:ca:21:6a:5c:01:
26:ca:27:86:da:95:2c:10:e0:7d:9b:2d:7e:6c:35:
53:98:7d:9d:1e:47:2c:89:61:0c:44:9a:65:4f:e0:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D3:1D:E8:F0:F1:43:C9:F1:47:52:29:1B:05:C2:5B:97:BA:FF:CA
X509v3 Authority Key Identifier:
keyid:64:F4:7C:98:44:0F:10:38:25:C8:EA:50:74:29:8B:18:CC:11:3E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPR8mEQPEDglyOpQdCmLGMwRPiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/099aeb-c713-42f8-91d6-38447855d669/1/ZPR8mEQPEDglyOpQdCmLGMwRPiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4c:2d:0f:d9:89:b7:d9:6f:ef:75:29:d0:05:7d:85:f4:7e:
9a:84:15:3e:d0:e8:d3:fa:e4:b0:eb:81:64:50:27:6c:0f:62:
a8:f0:39:b7:cf:0d:fe:2d:dc:c5:c7:3d:fb:de:6c:d2:df:44:
13:e8:53:ce:e7:5b:cd:37:c1:fc:29:76:93:e2:72:36:7e:51:
cf:d9:b4:74:bc:07:d2:7d:c9:bd:68:26:a4:92:6e:ea:9e:46:
c8:32:37:f9:9f:63:a7:f1:87:0e:56:50:d5:15:b4:e0:89:4d:
db:0f:51:e4:6e:a1:54:55:80:52:65:23:3d:38:59:9e:15:98:
f2:c7:88:46:11:b8:ce:44:b6:4e:f3:ec:92:f4:bf:a4:68:c4:
82:06:e1:4a:d1:60:01:0a:fd:7b:5e:ff:21:85:cd:6d:11:97:
b1:20:f2:c5:42:48:68:df:99:bd:10:18:24:89:04:de:a7:cc:
d6:e4:fd:4c:b8:00:4b:d3:90:1b:3b:5f:99:30:f0:22:76:27:
47:09:04:ea:07:d3:0f:16:62:fc:93:01:7c:bf:fe:d0:d0:77:
1d:f2:f1:2e:da:d5:ce:34:1d:d6:94:a0:a1:8f:55:29:6e:64:
a0:d3:a2:51:63:66:56:d8:d1:62:a9:be:73:26:8a:61:60:2a:
b7:2b:3e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:03 2026 by rpki-client