Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
File: Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft (raw, json)
Hash identifier: a5UxPuh0ZZ39zPt8uL7hldxOB+qtAfCvuff/Oa0R/fM=
Subject key identifier: D0:EF:27:61:F0:B7:5C:B5:08:EB:60:D1:25:54:78:3C:22:95:F1:15
Authority key identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
Certificate issuer: /CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Certificate serial: 019CACB4943891186B3EFE3F40581B219ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
Manifest number: 1664
Signing time: Mon 02 Mar 2026 04:00:41 +0000
Manifest this update: Mon 02 Mar 2026 04:00:41 +0000
Manifest next update: Tue 03 Mar 2026 04:00:41 +0000
Files and hashes: 1: Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl (hash: At6Jb4btB/oepKrAB6eqp6e+lAdEPT1c0tjtHfDWQZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:94:38:91:18:6b:3e:fe:3f:40:58:1b:21:9a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Validity
Not Before: Mar 2 04:00:41 2026 GMT
Not After : Mar 3 04:00:41 2026 GMT
Subject: CN=d0ef2761f0b75cb508eb60d12554783c2295f115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:d7:fa:3b:57:99:fa:b7:b5:d2:96:53:76:
13:52:f6:74:ac:25:8f:87:02:65:80:de:d2:60:e2:
08:f6:f8:7f:59:f8:84:2d:70:ff:88:d3:fb:10:81:
1a:28:e1:1c:9b:c0:a9:1a:51:24:d7:e0:07:2e:1e:
d6:c9:c6:65:eb:a4:af:28:f2:f5:2b:6a:1f:bb:64:
bb:b1:ba:95:2e:42:48:9e:71:e9:0f:bb:61:6b:67:
2c:91:6b:32:a5:3c:37:80:69:7d:ae:0b:4a:ee:46:
85:fc:72:90:eb:47:3b:46:46:52:6e:aa:d8:de:65:
64:89:62:96:ea:8f:84:2b:02:79:a5:62:19:11:aa:
63:b8:4f:6f:64:a3:51:24:42:4e:0d:2c:e0:2c:63:
ce:87:9d:6a:1d:ae:89:71:39:ca:e4:43:a2:05:aa:
62:8d:e7:7c:ee:2e:21:40:90:f6:a4:f9:58:a4:b5:
fb:31:04:7b:07:ef:df:59:12:a5:40:cf:8d:6d:d4:
8e:ca:11:fa:50:7b:bf:bf:4d:e0:33:00:e3:1c:92:
a5:92:0f:5f:1f:bb:78:25:68:7b:5c:1f:4c:9a:47:
42:54:df:c2:6e:7c:c6:4d:22:20:93:dd:cb:20:aa:
53:a4:47:19:62:d5:78:8b:df:65:93:82:3a:65:96:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EF:27:61:F0:B7:5C:B5:08:EB:60:D1:25:54:78:3C:22:95:F1:15
X509v3 Authority Key Identifier:
keyid:66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7e:73:e3:c5:19:e4:1a:46:71:52:14:d5:c3:c8:6d:1b:21:
ef:35:47:30:86:b6:83:67:c0:4b:e3:3f:0e:df:ac:29:c9:3a:
cd:2b:1c:81:68:bf:82:1a:99:4b:a2:72:38:f3:9a:1d:e8:29:
25:a6:0c:a9:e3:ea:a6:87:35:95:de:7c:c8:7a:bf:b5:59:57:
c7:83:e3:9c:c5:e2:9a:cb:f6:b7:3d:41:c8:d3:46:4c:0f:b9:
69:46:2e:65:4b:54:c5:7a:7f:1c:15:d2:39:6f:59:7a:c9:12:
1c:43:09:db:95:80:00:7e:34:41:2c:ca:e3:a5:de:09:14:88:
5b:34:0c:cb:3c:34:e0:a3:d1:87:60:14:78:57:d7:da:1c:b5:
e8:09:17:f3:7e:e3:d3:1a:5a:24:c3:12:5f:5a:26:bb:2c:1e:
e7:4c:0e:ef:05:2b:ea:24:75:8c:39:b8:3a:8d:88:bc:c4:7e:
95:e3:22:07:9f:12:51:13:22:3d:c3:30:b2:be:16:f7:bf:e8:
3d:66:a6:cf:b0:9e:6c:dd:ef:b0:51:92:d7:16:eb:78:b8:6f:
70:4b:63:e3:40:49:ae:a4:f4:aa:34:a6:d8:6c:e6:ce:14:66:
39:31:d8:2e:9b:ec:2e:4b:a4:34:66:82:12:9a:2d:b2:b0:59:
52:fb:19:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:13 2026 by rpki-client