Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
File: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft (raw, json)
Hash identifier: miPa0GYpL/ks7locRfpM0n2kNfDu/udblgVkJUXdhr4=
Subject key identifier: AE:40:ED:E4:35:3B:49:D5:A5:1D:46:A3:E1:87:2B:2C:9D:35:CA:9D
Authority key identifier: 66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
Certificate issuer: /CN=6683a96cf511a67919d900f3fc934099341f87d8
Certificate serial: 019CA97D78708C4650D45803063F3C51BABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
Manifest number: 1024
Signing time: Sun 01 Mar 2026 13:01:38 +0000
Manifest this update: Sun 01 Mar 2026 13:01:38 +0000
Manifest next update: Mon 02 Mar 2026 13:01:38 +0000
Files and hashes: 1: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl (hash: pfXbAGluxoILDVh6Pt0ZSG3LqP98WkpKMO9u2FBVDLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:78:70:8c:46:50:d4:58:03:06:3f:3c:51:ba:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6683a96cf511a67919d900f3fc934099341f87d8
Validity
Not Before: Mar 1 13:01:38 2026 GMT
Not After : Mar 2 13:01:38 2026 GMT
Subject: CN=ae40ede4353b49d5a51d46a3e1872b2c9d35ca9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:09:99:b1:09:16:5d:b2:cf:ea:da:10:09:
90:e2:4f:36:d4:ad:91:f0:67:02:3a:63:c5:92:6b:
bf:08:80:02:a5:9d:27:15:58:65:15:b7:9a:47:0f:
76:2f:df:56:a7:f8:25:2f:07:e1:7c:85:04:18:f5:
69:e1:35:29:ca:1e:ee:9a:1d:f8:81:f4:27:b4:19:
b6:ce:16:37:21:46:1d:fa:a1:80:46:db:b3:41:53:
8f:e3:c8:da:33:f0:ad:47:1a:00:d3:41:cc:94:2d:
25:b9:49:65:d5:2d:78:e4:d1:14:52:a1:ce:5c:23:
8a:56:d7:f0:c1:cb:0d:92:37:d8:da:c9:e3:8a:94:
8f:49:11:d6:c1:99:ff:27:70:33:3c:a3:03:48:55:
78:1e:99:af:97:31:44:2a:5d:96:b0:1b:1e:fc:1b:
dd:9d:73:bc:14:06:48:6a:79:04:ce:88:5b:a9:79:
12:3e:22:c2:bc:9e:60:17:fb:d7:60:e2:8e:e8:eb:
1b:ce:b3:7d:5c:a2:59:55:f8:38:ff:15:d0:61:6f:
ea:7d:cd:76:81:10:ea:92:82:b0:ac:da:b8:75:07:
90:6a:c2:a9:37:62:be:be:94:8c:92:d8:7f:21:67:
18:06:56:41:04:1f:8b:68:15:f4:f5:c1:4a:2b:d0:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:40:ED:E4:35:3B:49:D5:A5:1D:46:A3:E1:87:2B:2C:9D:35:CA:9D
X509v3 Authority Key Identifier:
keyid:66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c7:e4:29:29:66:f8:03:1b:33:d9:3b:32:00:d7:d2:6b:67:
3c:1f:9e:25:a7:65:35:79:ac:49:6d:d8:bd:0f:2a:de:37:17:
e9:bc:49:e3:f1:1a:5c:27:81:99:f5:2e:2f:e8:7b:22:55:d3:
fc:7f:c0:4b:a4:ab:79:6f:8a:ad:36:d6:20:92:3d:c6:59:c7:
95:b3:95:ff:d8:bc:97:b5:3e:3b:74:4a:65:fd:75:88:ea:ed:
1f:d6:2a:b6:88:57:60:bf:89:4a:c5:d3:dc:a8:b0:82:6e:3b:
62:0a:65:14:a4:13:1e:e4:1c:47:45:75:d9:e4:52:fb:9e:83:
ae:1d:07:97:ae:f8:d6:cb:43:eb:77:9e:d8:04:e1:b0:94:80:
03:2c:c8:ea:ce:58:12:1c:01:9e:e2:75:fc:11:07:70:7b:7f:
f6:ef:2d:f8:fa:41:02:2f:15:91:99:42:13:59:bb:a7:09:9e:
2b:f7:d5:e9:df:ba:e2:76:f1:da:a6:bf:2a:b1:8e:b4:89:fd:
c2:9f:16:58:af:8f:38:5a:d4:e5:35:ed:9b:dd:e7:b8:a1:26:
7b:84:dd:87:43:6f:f1:db:fe:ff:88:64:30:b0:f6:e8:a7:d4:
2f:b9:48:8a:4a:bb:8c:6e:19:ff:96:5a:60:47:de:14:a6:5b:
42:51:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:42 2026 by rpki-client