Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier: 7KC2tBS+JXax1pKlCYTmuZpYUo3YMSP0uYKhNHDmmqM=
Subject key identifier: 1B:B2:CB:5F:EA:B9:F0:4E:84:7F:93:35:C8:A6:67:B9:23:08:5C:21
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial: 019CADC81214B56CE79A8CEDC91B0D2308E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number: 1507
Signing time: Mon 02 Mar 2026 09:01:35 +0000
Manifest this update: Mon 02 Mar 2026 09:01:35 +0000
Manifest next update: Tue 03 Mar 2026 09:01:35 +0000
Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: mtcPUw9bl1gB5swA+8RYCG0FVCE+qpv8Q9kilQrognA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:12:14:b5:6c:e7:9a:8c:ed:c9:1b:0d:23:08:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Validity
Not Before: Mar 2 09:01:35 2026 GMT
Not After : Mar 3 09:01:35 2026 GMT
Subject: CN=1bb2cb5feab9f04e847f9335c8a667b923085c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:14:45:1e:4c:1d:34:98:34:23:4d:4d:5e:
0e:db:7e:0d:e5:8f:69:7b:ea:dc:16:d3:4a:c3:9e:
64:bf:c1:c8:e8:0b:0e:bb:93:ee:b4:c9:cb:02:45:
2e:79:3c:2b:15:0b:70:73:fe:7e:57:e7:47:14:5a:
98:0a:63:8a:7e:0a:0a:db:1e:b7:70:42:52:b0:80:
7a:a5:34:fa:ec:0b:16:e3:80:ee:9b:62:a3:e1:0a:
2c:9d:c8:9f:db:82:0a:a4:22:cc:d7:a1:4f:91:bb:
48:15:70:5f:2d:09:d7:24:90:5b:23:0c:0b:db:09:
84:2b:12:ce:21:db:b0:93:0b:6b:64:6a:9b:7e:8c:
92:c0:85:01:f7:7b:1c:27:44:f5:c3:20:d5:ca:7e:
04:2c:76:0b:95:d6:4a:cc:86:d3:d5:fd:09:ce:16:
4e:a2:9c:94:5a:e0:81:36:ba:00:56:3b:45:29:cb:
ae:5f:f4:44:11:00:86:c1:d6:8a:0f:56:45:37:c6:
08:05:1c:a7:17:21:aa:2e:11:d7:80:da:54:f1:86:
36:96:e2:ca:4a:df:58:41:c3:c1:80:bb:19:94:c5:
b1:97:23:dd:1d:14:05:fe:df:dc:5d:cc:04:88:1e:
c3:25:d3:73:63:a3:f4:0a:c6:5b:19:84:30:11:d5:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B2:CB:5F:EA:B9:F0:4E:84:7F:93:35:C8:A6:67:B9:23:08:5C:21
X509v3 Authority Key Identifier:
keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:83:b2:2f:2a:e4:c9:3c:00:81:03:23:05:5f:9d:d2:d9:46:
1f:c5:a6:9f:15:50:26:3f:c3:d4:ec:07:e2:a8:88:49:8b:6f:
e3:d2:cd:74:5f:8c:6d:d4:37:2a:1c:58:c5:63:84:8e:d4:ce:
a7:c2:6a:08:03:37:a8:e5:e7:bb:f3:71:1b:e0:89:bb:b2:b6:
50:e0:db:6f:74:d2:bc:2d:57:4d:85:e2:54:20:a7:87:10:b8:
94:81:50:62:58:80:17:de:87:3f:b7:19:f2:c5:44:b3:eb:81:
30:4d:1d:26:e2:0f:a5:b1:05:19:b3:3b:66:bc:ea:5d:d7:96:
2d:f0:04:de:52:d0:2a:9f:35:77:dd:1b:c4:86:cc:10:0e:b2:
22:20:ae:b8:53:ab:6d:16:ab:de:46:fa:7e:fa:73:55:56:54:
36:2d:e7:ff:e3:0d:47:39:de:a8:2c:36:9d:1c:bf:f0:6e:3f:
4a:55:03:cf:5f:b0:5f:e1:0a:1e:de:89:50:be:d6:9f:7f:4c:
1b:cd:42:9e:7b:7b:dc:70:33:43:35:d0:54:a1:57:2d:6f:da:
43:a7:d8:b5:35:c3:26:a8:39:07:6a:ef:10:10:79:e8:2d:49:
6d:2e:0f:2d:db:d8:ae:0f:51:83:5b:f7:ee:d1:f8:dd:49:93:
8c:b4:c0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:14 2026 by rpki-client