Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
File: z2wawDKfN1f-h9q2IGq8FXHES7A.mft (raw, json)
Hash identifier: FsO3hNPMj9QOlEx9BKVIh5AasB/y512D2iYO6LJ0baA=
Subject key identifier: A2:04:00:1C:86:1F:6F:88:B3:25:41:E8:99:D2:7E:0E:70:20:95:2D
Authority key identifier: CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
Certificate issuer: /CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Certificate serial: 019CAEA30AAF8F6CF9E557298C0473BDC247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 13:00:46 +0000
Manifest this update: Mon 02 Mar 2026 13:00:46 +0000
Manifest next update: Tue 03 Mar 2026 13:00:46 +0000
Files and hashes: 1: z2wawDKfN1f-h9q2IGq8FXHES7A.crl (hash: z8OdrogPDIdI1jC4Ix0OHbImseQ9FKcXoFICig+3E3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:0a:af:8f:6c:f9:e5:57:29:8c:04:73:bd:c2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Validity
Not Before: Mar 2 13:00:46 2026 GMT
Not After : Mar 3 13:00:46 2026 GMT
Subject: CN=a204001c861f6f88b32541e899d27e0e7020952d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e0:80:99:84:9e:e6:32:fb:b4:d2:02:aa:c5:
57:63:8e:3d:01:d9:8e:58:35:ee:4a:c6:9a:e5:cb:
5f:7d:56:d8:b3:8a:a9:34:00:c1:ce:bc:8b:7e:26:
5b:fc:ed:c1:77:f4:00:9e:a7:fd:0e:54:ac:50:dc:
16:ea:83:db:ce:29:59:5a:6e:48:37:ca:bd:1f:f7:
55:f4:7f:e4:e6:05:e6:63:7e:6a:f7:a4:ec:d6:52:
e6:55:ea:78:1d:7b:c8:c1:b4:fc:62:12:3a:b5:02:
24:1d:71:c0:81:dc:94:b0:68:4e:44:df:76:1b:49:
22:95:64:e1:17:ad:29:b3:77:15:3c:a1:80:05:64:
99:67:3a:62:dc:ca:68:24:73:33:19:0c:f3:17:ab:
b2:93:45:5f:1f:6e:a1:2c:f7:2b:17:2e:2a:b7:76:
e3:9f:54:45:7a:ed:7d:65:bb:3d:d7:8e:8c:8f:f4:
e1:3d:1e:10:92:0a:d5:04:fe:6d:20:8d:f1:b7:4c:
77:5e:ae:d8:56:55:61:ed:19:fd:d8:95:f3:2c:46:
21:01:bb:b7:08:dc:f7:8e:c7:1b:1e:dc:7d:ea:22:
d8:c2:d0:fa:8e:3f:8e:02:ec:86:36:72:50:10:9c:
6a:0f:02:54:88:dd:82:c6:c8:2f:13:5e:bb:8d:68:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:04:00:1C:86:1F:6F:88:B3:25:41:E8:99:D2:7E:0E:70:20:95:2D
X509v3 Authority Key Identifier:
keyid:CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:95:1d:dc:ef:21:50:23:58:9c:33:6f:ca:a6:7a:03:72:10:
7a:a2:95:b9:dd:55:a5:73:c6:64:a7:20:30:2b:c2:6d:d7:71:
68:53:a4:60:84:73:9e:c2:a5:dc:d2:fc:a9:9a:35:21:58:63:
90:6f:dd:42:12:18:2f:43:b1:c6:33:f6:d1:10:26:72:4d:a4:
e1:7f:2b:1d:2f:ab:df:c8:cb:04:98:2e:f5:bf:27:7c:d8:0a:
1e:fb:21:c3:6f:8d:a9:21:f2:4b:f3:30:f1:c0:65:a0:4b:85:
ea:79:48:d9:ea:c7:c2:e5:1e:c0:25:2f:79:59:4c:2d:03:15:
0a:38:ef:a8:fd:7e:bf:68:be:71:0d:da:24:26:81:e8:d7:d1:
3c:87:31:bb:7a:ea:87:44:72:ec:91:c6:f9:a5:17:94:66:bd:
5c:da:5e:36:bd:25:44:32:ca:8c:74:e8:d8:9b:2d:ea:e5:6f:
23:fe:c2:aa:b2:8b:8a:bb:59:1c:64:9d:86:72:fc:02:9e:2a:
7b:66:db:61:13:1b:c8:c2:fe:3f:b7:ca:bc:65:c3:e6:f7:67:
a7:7e:54:b2:75:6c:d3:4c:fc:4c:e8:ab:8a:15:b9:42:87:48:
30:b5:fc:69:17:f7:56:6a:c3:8e:43:ca:42:b8:0d:a5:fd:65:
cb:86:44:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:42 2026 by rpki-client