Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
File: ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json)
Hash identifier: ER+93YSmFO4IPBe3VJ2hUjotL6yiazaPQVft954iPzQ=
Subject key identifier: 59:9D:CA:BC:66:98:3E:72:81:07:ED:FC:FE:FE:9D:53:E5:BC:77:40
Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
Certificate issuer: /CN=ce22ec994542ca7acaadd58727e4606ab4490040
Certificate serial: 019CAAC6BA9B44A05E92A47B36F0A3EA9C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
Manifest number: 1129
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: GEvjuQtOpCzrElZ6GGEIc4UlL8BbwdNwnsc/RlKcy38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ba:9b:44:a0:5e:92:a4:7b:36:f0:a3:ea:9c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=599dcabc66983e728107edfcfefe9d53e5bc7740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:eb:00:0d:c3:16:14:0a:49:8c:f4:c8:f6:
28:95:f1:bf:56:71:fa:4b:f0:9b:39:bb:12:6f:c8:
d6:39:a8:02:65:5b:af:9d:31:e0:79:65:72:e5:8c:
a8:81:fa:1c:1d:b0:d4:ff:f8:54:c4:0b:49:2f:4e:
c1:04:43:da:39:41:39:2f:3e:3e:03:56:a1:26:45:
e3:6e:3c:cd:2c:6f:7b:da:86:90:3c:40:05:24:4c:
b9:78:09:7f:30:a8:c5:ad:72:41:d8:9f:ef:03:44:
e0:da:03:00:82:f9:e8:d2:7c:cc:3e:b8:95:d7:6a:
c8:ef:58:a0:bb:79:30:0b:b8:a3:02:ba:66:f7:49:
85:6a:38:e4:49:eb:ef:37:1d:1a:aa:39:54:1f:e7:
cc:3c:ed:1c:07:f3:73:57:7e:b6:b4:c3:15:6e:1a:
79:b8:a9:37:65:96:26:ed:cc:73:59:e0:62:20:4d:
64:08:a5:9d:61:de:07:a6:2f:9e:72:6f:a0:89:54:
53:7f:42:18:c3:27:09:e3:3f:f5:47:7a:a3:e6:67:
ae:dd:98:b5:5f:a5:ec:3a:39:cd:70:3c:44:22:ba:
7c:68:19:97:00:31:72:06:41:03:03:cf:da:5a:91:
8c:7a:b2:55:c4:d3:11:49:1b:52:88:23:91:38:ce:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9D:CA:BC:66:98:3E:72:81:07:ED:FC:FE:FE:9D:53:E5:BC:77:40
X509v3 Authority Key Identifier:
keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:71:7c:9c:8f:5c:f0:d7:e2:35:a9:ee:c6:f5:a4:45:63:8a:
56:90:f5:39:d8:40:f6:01:ae:0a:9a:63:f8:8b:48:10:8c:e4:
a5:a7:36:ef:34:aa:76:82:64:96:f7:03:5e:99:c8:69:f7:db:
c6:64:71:01:2f:8e:db:c5:a5:cc:48:48:3f:cd:06:d1:9f:bb:
e9:0c:58:25:e9:1e:8e:02:ad:0c:81:41:e9:9b:13:a0:5b:38:
7c:44:de:f6:bc:dd:b8:b9:9b:b3:e9:ce:25:a9:34:b2:fa:50:
18:63:79:d6:e0:3a:b1:94:d4:81:59:88:f6:49:84:15:26:f7:
38:98:4d:27:8e:9c:6e:fd:6e:6f:11:50:fd:50:43:45:68:d3:
19:3a:14:23:cf:2c:23:18:69:db:75:b1:b1:97:9a:47:4f:d8:
da:38:5a:8b:c8:0e:59:00:0b:e2:af:99:2c:79:8b:b8:d9:a2:
19:66:49:62:9a:5a:8f:b0:4d:7c:8f:84:bd:19:ac:4f:d2:62:
36:b7:15:80:e1:60:95:47:a2:28:6a:20:d8:25:72:29:b0:ae:
22:e6:48:e6:b4:98:b7:58:b6:81:57:c8:32:a8:ee:d2:50:32:
2f:d0:69:a1:d1:a7:fe:f4:78:b8:74:d0:b6:6f:10:ff:2a:31:
9d:f4:c1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:12:51 2026 by rpki-client