Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
File: r-Zisul_0r2pHzKyzOnnRculhgI.mft (raw, json)
Hash identifier: yXIU7+OfMc0GItrDYAtIvHvd91oJjcm/RdMhuZUw3Gw=
Subject key identifier: 2A:81:4E:80:64:18:80:51:0B:54:BF:5F:23:68:DF:81:5C:E1:53:C8
Authority key identifier: AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02
Certificate issuer: /CN=afe662b2e97fd2bda91f32b2cce9e745cba58602
Certificate serial: 019CABA227DC3B3C201856C8AEE81463D315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
Manifest number: 022C
Signing time: Sun 01 Mar 2026 23:00:56 +0000
Manifest this update: Sun 01 Mar 2026 23:00:56 +0000
Manifest next update: Mon 02 Mar 2026 23:00:56 +0000
Files and hashes: 1: r-Zisul_0r2pHzKyzOnnRculhgI.crl (hash: Ic9NQ6p8poP9/p2gw5jloJpv4fLoXVSADoWUXOX3pKI=)
2: sBjAqPrKhV1Z1WPs7LsZcM8hAlM.roa (hash: FofTnNrc0AeEr8Tl3KCw6xOYYJYEqXcD/ByXgE3T67E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:27:dc:3b:3c:20:18:56:c8:ae:e8:14:63:d3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe662b2e97fd2bda91f32b2cce9e745cba58602
Validity
Not Before: Mar 1 23:00:56 2026 GMT
Not After : Mar 2 23:00:56 2026 GMT
Subject: CN=2a814e80641880510b54bf5f2368df815ce153c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:9a:c6:23:ed:95:a0:cc:8e:e7:54:dd:8f:
7f:7e:36:91:76:1f:e4:ce:91:f7:a4:69:d2:a5:fb:
47:f1:25:a5:1a:cb:51:86:ca:c5:ec:fb:2a:15:d1:
04:06:e7:a3:0e:ed:45:13:68:f2:dd:8f:e3:03:f2:
57:56:f3:a4:f2:b9:69:36:79:bc:9d:d1:7a:04:e7:
18:3d:f8:7e:32:a7:f0:30:7c:d1:d1:29:06:5d:4c:
21:f4:ad:a5:f4:f7:83:b6:ce:13:17:97:96:b9:75:
35:d0:b8:21:d5:97:f3:fa:39:cc:07:2d:9c:b3:a5:
4c:3f:d2:9f:fc:05:72:e8:31:93:fa:c6:3a:d9:6e:
7e:38:5e:c7:11:01:19:10:1f:a9:5f:8a:01:88:b7:
19:9d:a9:fb:68:e3:a3:c4:9a:4e:a4:3b:ea:40:d2:
6e:00:2b:8d:a6:60:4f:ea:2a:f2:78:1d:53:63:e0:
a7:a5:36:01:86:3a:b6:42:92:d0:13:45:08:65:66:
c5:5c:31:55:ab:31:34:a9:80:06:92:db:00:32:f1:
de:3c:16:b5:72:97:31:78:2c:33:37:30:a8:45:68:
64:dd:06:d5:28:1a:34:c5:94:f1:07:97:40:36:1f:
77:0a:c5:8b:7b:08:20:ed:7e:f3:3e:50:dc:fe:c6:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:81:4E:80:64:18:80:51:0B:54:BF:5F:23:68:DF:81:5C:E1:53:C8
X509v3 Authority Key Identifier:
keyid:AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0b:85:17:37:6a:63:8e:d6:c5:1a:8c:43:d0:8b:1f:be:9b:
41:db:1a:5d:1f:4c:30:27:f3:41:b7:74:e1:62:4b:1a:8b:50:
84:81:3a:9c:d0:27:6e:20:50:a0:fd:c1:bd:93:00:c8:79:99:
7d:71:cc:62:7b:7f:87:93:fa:fb:c8:af:76:5e:32:9a:4a:6b:
a4:90:3b:9f:01:d8:bc:c4:f3:47:91:c9:da:c1:f7:72:93:68:
9e:2f:ac:4e:76:fd:06:d5:41:1c:f5:fb:0e:12:66:38:37:d3:
bf:ee:dc:bd:c5:e3:7a:a8:51:8a:1c:0d:d0:3b:2e:10:40:c0:
58:5d:9e:d2:80:b7:7a:b6:ee:19:54:c5:cf:e4:6c:74:19:1f:
1a:b6:20:7e:21:ae:ed:7e:24:6c:7e:28:45:14:45:91:43:c0:
8c:96:ac:15:3b:f8:ac:79:aa:4e:22:61:f9:3d:df:bf:4d:ee:
8e:d5:1b:7b:c7:9c:3a:8c:2f:32:90:a8:1d:d9:76:e6:dc:c6:
e1:ee:93:ba:df:cb:0d:48:be:26:ff:8d:92:36:d1:4a:c0:42:
26:a7:cb:3f:19:bd:46:73:71:b1:2d:0c:cf:6d:92:2b:eb:e6:
9c:4c:7a:59:f6:18:cb:63:3d:6f:a7:d6:22:e9:c5:53:ea:b0:
d9:70:de:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:57 2026 by rpki-client