
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File: zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier: UsEZ7Jj38OKvL4dJu90Qn/Pjs+T4H1Ya4ICF8Nd6dzo=
Subject key identifier: 80:C2:0E:CA:81:1A:16:FC:0B:BC:40:56:6A:C6:2F:F9:67:AD:AB:2B
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer: /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial: 019CAD5A1D8EF2062F26C095D659874975D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number: 14D8
Signing time: Mon 02 Mar 2026 07:01:29 +0000
Manifest this update: Mon 02 Mar 2026 07:01:29 +0000
Manifest next update: Tue 03 Mar 2026 07:01:29 +0000
Files and hashes: 1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: N/bBFZSTxY2sTHLP0wq0p3QBxdu+FWm6teKvOSbhNaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:1d:8e:f2:06:2f:26:c0:95:d6:59:87:49:75:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Validity
Not Before: Mar 2 07:01:29 2026 GMT
Not After : Mar 3 07:01:29 2026 GMT
Subject: CN=80c20eca811a16fc0bbc40566ac62ff967adab2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:a0:35:fa:c5:d2:93:6e:ee:61:e6:39:83:
8f:0a:33:4f:6e:f3:bf:17:64:03:28:f2:38:58:c5:
4e:da:98:0b:3b:f0:13:0c:57:22:5b:a3:34:90:ff:
33:5c:50:6f:4b:a5:8f:f1:e0:3e:15:5c:63:4a:63:
23:00:9e:90:6d:90:87:c8:0c:97:d4:0c:70:03:15:
82:43:b9:a5:a7:fb:c2:8b:fa:fc:d9:fa:4f:3e:6d:
9c:e2:9d:17:6b:ee:95:97:5a:c4:0d:c0:80:18:8b:
66:d3:31:83:dc:89:bc:b2:38:be:0b:3d:e0:47:f4:
c6:d1:03:62:a4:54:51:48:1c:35:f9:d2:45:4a:4b:
9e:cf:8f:9e:40:68:3f:7c:e2:88:4d:3c:2b:26:09:
e7:f3:27:20:00:a9:0b:86:13:2c:1d:c1:8f:6b:95:
3c:51:4b:8a:5a:8c:5e:fd:76:5f:9b:a4:70:a8:b4:
bc:ee:d9:67:42:db:b6:36:f2:55:a4:0e:53:cf:24:
27:2a:11:de:5b:ea:a6:f6:eb:73:f6:8b:45:26:10:
09:85:57:a1:ba:89:bc:a2:93:06:d2:50:11:a7:ba:
ec:a3:1f:a4:d4:dd:9f:95:be:1c:8e:3c:52:ef:c7:
c3:58:d1:22:ea:e3:b6:15:de:5f:1f:e3:0e:3f:74:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C2:0E:CA:81:1A:16:FC:0B:BC:40:56:6A:C6:2F:F9:67:AD:AB:2B
X509v3 Authority Key Identifier:
keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c0:ec:32:a8:f4:37:a1:8b:ee:2e:9e:4e:dc:42:ec:6c:ab:
72:9d:05:be:e2:68:4c:ce:93:0a:6f:83:72:ed:ce:f3:73:17:
4a:e8:6e:0b:49:00:80:24:17:8c:d1:7a:0c:15:54:90:9b:78:
d6:b4:82:e1:1d:0f:b5:8b:5c:a7:a8:50:3e:e2:4f:c3:31:a8:
23:7f:10:aa:aa:a2:56:b9:bb:81:80:cf:33:21:a1:46:6d:5f:
38:6d:f0:5b:28:49:be:14:fa:ef:45:c0:fc:e4:07:c3:37:90:
72:88:e1:e7:a1:5e:1d:93:67:f6:8e:68:c5:49:30:d2:2a:b1:
91:6a:f0:60:2b:87:56:48:fb:f3:6a:a1:5d:69:6e:87:03:86:
24:55:ed:b2:6d:8f:92:84:c7:a8:43:a4:0c:52:54:8d:bb:38:
d0:14:6b:f8:2b:9f:1f:6b:07:bf:2f:cb:07:74:39:16:d0:96:
d9:75:4d:91:cb:44:39:cc:c3:92:d7:98:b6:a0:11:20:7f:45:
30:07:47:74:df:0a:53:4a:8d:c8:f1:7a:09:bd:85:3e:f6:ae:
a8:bc:ce:b4:02:2d:ba:46:37:38:a5:10:ef:b9:43:97:8d:ae:
99:3f:a6:22:67:e5:56:3a:51:b1:3b:1f:be:ab:d1:e8:76:f4:
0d:46:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:20 2026 by rpki-client