Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
File: Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json)
Hash identifier: sAytq1wNAEI353M/NrtHdzuM6dk4UfNVYcnSX2SMYqc=
Subject key identifier: 0A:5E:11:F4:2B:11:38:F3:79:AA:5D:EC:05:D6:56:74:00:17:38:45
Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
Certificate issuer: /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Certificate serial: 019CAB6B0643B4821E81B73D55A65DD94C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
Manifest number: 0C52
Signing time: Sun 01 Mar 2026 22:00:43 +0000
Manifest this update: Sun 01 Mar 2026 22:00:43 +0000
Manifest next update: Mon 02 Mar 2026 22:00:43 +0000
Files and hashes: 1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: LomxS6V9DO8hWuztJ/Npt+tqbBUHK4N5RCofAsD9pF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:06:43:b4:82:1e:81:b7:3d:55:a6:5d:d9:4c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Validity
Not Before: Mar 1 22:00:43 2026 GMT
Not After : Mar 2 22:00:43 2026 GMT
Subject: CN=0a5e11f42b1138f379aa5dec05d6567400173845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e2:6a:96:82:00:35:2f:ad:18:fc:15:40:03:
22:22:22:23:2d:64:c1:18:2b:dd:3b:c9:98:fc:57:
32:99:3e:59:9b:52:a0:13:de:dc:b0:9a:b5:50:0e:
b0:93:e0:38:f2:26:4f:0b:0a:80:d7:8d:62:5f:05:
f1:78:84:19:a5:a1:53:64:ca:a6:43:01:01:93:a6:
46:58:5f:99:a5:7e:8c:46:e6:57:69:2b:fc:53:dd:
d3:79:13:65:42:8b:bf:06:2b:07:81:70:5a:bf:92:
35:a5:eb:4b:d0:08:ba:cd:1f:79:d0:9e:e4:b9:41:
98:6c:8a:b4:ce:0f:1e:04:55:5f:c1:24:1b:66:a3:
0d:e5:83:af:51:02:2f:ff:64:2e:83:d3:19:62:ae:
29:3e:6f:f5:a0:59:cc:a2:0d:65:89:2a:b7:13:67:
56:36:ae:52:80:ac:3b:01:95:66:b5:ac:c1:c0:bd:
0d:3d:b3:32:ef:35:44:8b:d2:57:04:6b:bf:9a:ed:
0e:9e:88:97:69:86:d3:a7:05:e0:e6:a8:43:98:8e:
98:e8:01:70:43:27:13:72:c8:1f:48:fa:7c:b5:07:
eb:4b:b8:58:65:5e:bf:a6:65:02:11:d7:c0:87:79:
a9:b7:92:48:0c:ba:2d:03:bd:f9:4e:85:0c:d9:3e:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5E:11:F4:2B:11:38:F3:79:AA:5D:EC:05:D6:56:74:00:17:38:45
X509v3 Authority Key Identifier:
keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:45:64:bc:a8:41:2e:88:51:95:02:82:1c:81:87:b9:9f:43:
77:9e:ca:57:a0:0b:de:16:bc:55:5e:9c:df:82:58:33:cd:c7:
58:27:4e:81:89:8d:91:3c:b6:9d:6c:0f:85:1d:8d:3f:66:99:
31:95:b7:a2:da:90:49:f1:95:ab:f4:7c:3f:dd:16:7c:82:9a:
e3:84:1f:55:f4:1c:5a:56:10:9f:65:e1:bc:25:d4:42:42:7e:
f4:3b:64:e9:ee:db:7b:5b:dd:da:0d:af:fc:e7:22:b6:ec:b0:
76:f2:90:a1:2c:a9:c7:cf:bd:5d:04:62:6b:82:aa:bf:3b:bc:
9e:b4:c3:b4:d5:b1:2c:4e:df:ef:e9:57:28:0d:80:f0:93:ea:
82:27:5e:ba:57:c7:56:3a:4a:aa:c7:4b:47:d1:8f:39:86:dc:
99:7b:63:ce:5f:ef:9c:5a:12:38:b3:72:18:f3:e8:10:f8:2d:
22:f4:1e:2b:5f:b7:b8:3b:48:76:8d:ce:8d:02:96:b2:ac:4c:
b9:d0:c7:a0:b8:20:88:c0:c3:7b:e5:69:7c:ea:95:48:e4:5e:
5e:00:bc:f7:a8:75:c6:22:ce:59:02:0e:d6:ad:ac:dc:18:3b:
9e:9a:ff:9e:fe:c3:b9:29:b8:73:b7:1f:a8:30:f1:09:d2:73:
85:7f:02:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:48 2026 by rpki-client