Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
File: zb7dtaniq1M0dBCLfIAPgTLxDiE.mft (raw, json)
Hash identifier: 5rDh2TjlbGGWu5yCW4fmOUQG4Bm0kxYCS968BYrH6ns=
Subject key identifier: 06:67:53:55:0A:10:0B:0C:89:2D:85:7A:FB:E1:3B:DA:4F:D4:D6:E7
Authority key identifier: CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
Certificate issuer: /CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Certificate serial: 019CADC7B306894BBA4B2A0D5BD85A15D7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 09:01:11 +0000
Manifest this update: Mon 02 Mar 2026 09:01:11 +0000
Manifest next update: Tue 03 Mar 2026 09:01:11 +0000
Files and hashes: 1: zb7dtaniq1M0dBCLfIAPgTLxDiE.crl (hash: iHFfu+5PfAltyeCApqZddh6My4H8OzuXUzbTmMim7WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:b3:06:89:4b:ba:4b:2a:0d:5b:d8:5a:15:d7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Validity
Not Before: Mar 2 09:01:11 2026 GMT
Not After : Mar 3 09:01:11 2026 GMT
Subject: CN=066753550a100b0c892d857afbe13bda4fd4d6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:1f:80:7f:ed:fa:3e:6b:d0:ae:b2:93:d2:
6f:4d:bf:d8:9e:4f:ed:43:a0:b8:8d:09:83:89:33:
d9:88:c5:97:91:46:89:a7:31:d7:5a:ba:48:6a:56:
a9:e6:32:ae:07:a3:e8:d6:61:0c:ae:07:86:87:eb:
21:78:5b:71:0e:84:b1:78:fa:b3:04:84:b2:47:a0:
3f:d1:f5:05:f5:b4:66:23:a6:eb:6f:04:78:b5:26:
9b:59:ee:7b:46:d8:7f:bd:d6:6a:af:1b:7d:51:fc:
8d:93:e6:fc:72:cc:55:d8:70:d1:b1:aa:e6:6a:ef:
8f:8e:b4:e9:19:3f:da:29:c4:b5:bb:5f:d1:9c:dd:
bc:be:3d:18:11:ad:18:bb:9e:85:f4:c3:0b:22:6a:
6e:c0:c2:49:45:5f:d3:f0:b1:cc:eb:77:1d:22:9d:
56:15:b4:23:3c:26:c4:30:0b:fb:58:a8:94:d1:16:
84:2d:ac:98:06:67:a3:06:fe:4f:68:60:8d:5d:4f:
11:59:68:75:64:29:7d:c7:80:0c:a9:c7:4f:e4:3a:
fd:26:b4:b6:2e:36:2c:4b:00:27:07:c2:b5:b1:f4:
30:48:4b:47:27:be:7a:95:77:91:f2:a6:7f:1a:c3:
e1:0f:c3:b1:db:f1:f9:c1:da:38:c4:77:9a:28:2a:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:67:53:55:0A:10:0B:0C:89:2D:85:7A:FB:E1:3B:DA:4F:D4:D6:E7
X509v3 Authority Key Identifier:
keyid:CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8f:f5:4f:f1:04:13:3e:7d:50:89:af:7a:ba:fc:79:6e:53:
9a:a6:20:07:c6:18:54:aa:e9:de:91:e4:61:1b:03:18:d8:19:
c1:13:a5:de:b3:63:b4:fb:d1:53:7f:83:ce:3e:8e:d6:8a:e9:
7b:88:c1:2d:10:e5:21:10:c2:ff:86:ac:ca:47:12:68:76:ab:
cd:dc:76:b9:73:16:1a:0b:46:b7:1f:8e:89:10:65:fa:2a:f7:
a2:e4:90:30:00:e6:ac:5c:5f:60:b3:8b:25:c8:9e:98:64:0b:
48:ee:19:d0:32:15:d2:e3:73:f3:0e:a7:d0:e6:a6:40:26:0c:
ff:de:a7:3a:2e:3f:95:cd:34:af:a6:cc:ae:9e:08:94:30:0d:
91:52:a1:6b:3d:f7:d1:f1:a5:82:f8:95:19:1a:4a:9a:b1:61:
ed:7e:f4:49:15:da:fa:2a:44:6d:75:41:67:9e:8e:2a:88:68:
b5:3a:73:ab:8d:48:cc:b9:0f:3b:b7:60:3e:d9:4b:ce:07:39:
96:e3:88:5a:b0:63:38:bc:cd:ae:3f:5b:cd:ca:67:83:7d:59:
6f:88:3c:02:5f:2a:d8:73:46:2c:4c:4a:3d:c1:ff:d5:a6:82:
ee:b8:3c:39:2a:48:34:84:ff:3d:18:ca:45:59:08:4b:0b:76:
b4:9e:a3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:23 2026 by rpki-client