Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: P3r+MspMI5D7TYa/rFKOE4iw9+uiWxugeNF6uRBAZfE=
Subject key identifier: F6:39:89:0B:5A:36:1E:0B:C4:83:33:70:CB:C5:F2:EF:CD:D3:50:AB
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 019CAB6B17EAA1596CADE3DD658200261F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:00:48 +0000
Manifest this update: Sun 01 Mar 2026 22:00:48 +0000
Manifest next update: Mon 02 Mar 2026 22:00:48 +0000
Files and hashes: 1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: TJCegysrQR9o5K7V0o+c42btF9L44T+tRJQE2iUenXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:17:ea:a1:59:6c:ad:e3:dd:65:82:00:26:1f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Mar 1 22:00:48 2026 GMT
Not After : Mar 2 22:00:48 2026 GMT
Subject: CN=f639890b5a361e0bc4833370cbc5f2efcdd350ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:ac:33:12:6d:ce:1b:ca:f9:26:e3:f2:29:
59:cf:59:2e:6d:c0:0e:4e:c9:0f:e3:14:98:30:14:
38:e3:be:9b:34:09:30:40:83:97:07:45:86:0f:54:
07:9d:01:cd:5e:f1:f4:6a:e0:de:de:5f:f9:f9:8f:
c0:1b:56:42:5d:ea:7e:0e:98:44:60:47:ac:be:dd:
fc:ce:37:e0:fd:ea:95:fa:02:45:20:75:e7:d8:60:
5e:48:a3:0f:c2:47:05:da:ad:a5:ef:67:bc:4b:12:
a2:bb:5a:f0:00:f3:1e:25:ba:50:2b:d2:89:ed:88:
08:12:96:7f:60:d2:6c:c7:29:6d:e7:de:b4:ea:65:
d5:19:fe:86:70:a2:1f:aa:a8:5e:bf:aa:cd:d5:92:
7e:7c:4a:a1:43:42:a8:d4:8d:a3:69:7c:6f:dc:3e:
9e:5a:e0:44:e9:97:00:70:5c:a9:cd:b1:54:93:95:
ad:d0:a2:97:89:00:13:3b:f5:2d:51:be:f3:eb:40:
9e:dd:aa:ad:4a:6c:12:22:58:f1:ea:21:69:a0:b4:
93:e7:ff:61:3b:f9:98:cd:a5:38:38:91:79:a2:be:
f6:ed:1f:eb:11:6b:6d:00:62:ac:dc:b0:e9:ab:e5:
eb:fc:44:37:3b:2b:ce:91:e6:ba:c9:5b:7b:13:6a:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:39:89:0B:5A:36:1E:0B:C4:83:33:70:CB:C5:F2:EF:CD:D3:50:AB
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b0:64:37:b4:aa:5b:13:ee:b7:b2:49:66:f7:e2:6f:dc:aa:
0c:ed:21:b4:82:b4:47:22:53:8b:2b:c1:9f:d1:33:52:c8:a1:
43:c2:48:9b:81:3d:42:0a:fe:41:b0:6d:f8:26:06:64:12:cd:
90:50:17:b6:67:49:89:26:d2:96:a4:28:1f:68:db:0e:8f:63:
b0:32:17:e5:d0:6b:5a:b7:01:a7:13:58:34:2d:0a:66:5f:5f:
81:a7:f2:8d:5d:79:64:d7:7a:99:39:29:75:d5:6a:ae:35:7a:
cb:ad:72:f0:69:24:28:f9:9f:08:8a:2f:d9:73:17:b5:37:b0:
55:bc:70:a4:ed:c0:1b:d8:fb:43:d4:70:b9:6e:8c:db:57:2b:
58:6d:c9:fd:8a:46:2b:ef:ec:50:91:ab:43:17:3f:bd:0d:7d:
04:f3:9e:62:19:5d:e2:38:77:cb:bb:50:92:f3:de:bd:8e:32:
e1:8b:e4:c8:e1:da:4e:c3:73:c0:5d:49:d6:e9:f6:3c:45:72:
9e:fb:40:1d:4b:42:5c:2b:6f:4e:6e:72:05:cc:24:95:29:79:
9b:5e:7e:3a:80:6c:65:83:ad:3f:62:72:8d:aa:d1:39:a9:c5:
d3:42:d6:9e:0e:94:b1:d4:6d:c6:89:79:c4:4f:ac:74:4c:1a:
03:9c:3b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:06 2026 by rpki-client