Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
File: zfDoJMYqWSimUCFO8z6Md-fB_40.mft (raw, json)
Hash identifier: wgZIzgZrxDrnv26Ki9tstDfwI8PJ4w3eSJweICpDpDU=
Subject key identifier: 5F:78:5D:81:A2:8D:C7:66:AD:EA:76:95:80:BA:C4:98:83:E4:1F:AD
Authority key identifier: CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
Certificate issuer: /CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Certificate serial: 019CAB6BDF79136A8C69D72F07E20F8834FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
Manifest number: 11E7
Signing time: Sun 01 Mar 2026 22:01:39 +0000
Manifest this update: Sun 01 Mar 2026 22:01:39 +0000
Manifest next update: Mon 02 Mar 2026 22:01:39 +0000
Files and hashes: 1: zfDoJMYqWSimUCFO8z6Md-fB_40.crl (hash: et3CI/IAD9BgjHIwfrI5OZYPL5g6tdDnrahHrCY4ezM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:df:79:13:6a:8c:69:d7:2f:07:e2:0f:88:34:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf0e824c62a5928a650214ef33e8c77e7c1ff8d
Validity
Not Before: Mar 1 22:01:39 2026 GMT
Not After : Mar 2 22:01:39 2026 GMT
Subject: CN=5f785d81a28dc766adea769580bac49883e41fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:f3:49:1c:9c:50:9d:b9:93:9d:78:f6:8b:
fc:67:27:54:5e:86:29:fe:49:36:f1:4c:ad:19:86:
50:89:65:71:06:ad:bb:d3:43:8a:fd:75:b8:c0:25:
c9:fa:5d:30:83:03:11:d8:c7:39:4d:b3:8f:8b:65:
46:92:a9:54:8e:8b:14:51:71:44:83:99:84:a7:fe:
d9:7c:34:67:af:16:69:8c:12:ce:c0:72:7f:75:e9:
4b:df:04:a2:99:a3:4f:d8:41:cc:4c:ff:52:c2:5c:
d3:51:77:de:15:dd:12:81:3d:9a:87:00:ba:fc:30:
23:e2:3b:3f:22:80:4d:db:98:85:86:75:0f:56:44:
e7:1d:2a:ed:6f:fe:55:b9:b7:a3:8d:51:db:63:fc:
cb:c6:9a:3c:1b:8b:ca:1c:60:ff:18:63:3d:00:f4:
b3:d3:21:ab:85:e3:49:bb:fe:1c:29:97:e0:1c:70:
2e:87:ed:9b:be:55:6c:36:c0:4e:13:4d:e9:f2:e1:
97:b8:cf:e3:71:19:7a:37:01:a1:aa:39:f6:7f:af:
e4:be:8a:f5:39:05:81:13:d8:db:b7:f2:76:65:4e:
8c:fc:27:32:58:61:4f:c6:ee:b2:ed:67:16:4b:34:
90:d6:fc:71:4f:20:d2:ac:d7:e2:6f:1c:c7:80:1e:
e7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:78:5D:81:A2:8D:C7:66:AD:EA:76:95:80:BA:C4:98:83:E4:1F:AD
X509v3 Authority Key Identifier:
keyid:CD:F0:E8:24:C6:2A:59:28:A6:50:21:4E:F3:3E:8C:77:E7:C1:FF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfDoJMYqWSimUCFO8z6Md-fB_40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/224967-cd1b-46f9-a46e-2583af237e2c/1/zfDoJMYqWSimUCFO8z6Md-fB_40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:94:5e:58:66:ac:3b:e3:4c:e4:ad:f3:f8:f9:e2:88:09:e0:
b2:9a:02:0c:a9:15:6f:d1:2b:c8:03:97:8c:57:f8:b0:eb:77:
5d:d9:57:69:0f:54:6b:e3:b3:64:07:b1:15:92:4e:a2:e7:03:
42:af:a1:84:b9:7b:d9:66:f5:79:f6:88:b1:d2:13:43:3c:4d:
86:98:13:5d:c6:6b:82:81:5d:f0:16:02:81:22:04:b0:8d:2a:
71:e3:9f:f6:de:17:67:bf:c9:5f:0c:5f:3e:52:18:3f:3c:14:
b4:55:4e:b6:58:cf:37:76:4b:51:21:ae:38:7e:06:b7:c9:bf:
c0:fc:5a:de:e9:74:d1:3c:96:2b:46:6f:d7:6f:3f:54:ad:29:
72:1c:57:32:50:fa:8f:54:27:34:87:38:d9:50:29:b7:79:ff:
84:9e:de:23:05:8e:be:aa:ba:61:3b:dc:9e:01:ec:50:25:1a:
30:ac:f4:a8:e2:df:09:79:62:b3:3c:17:2e:52:67:6b:39:ec:
47:ec:03:f5:d0:65:24:f6:85:99:d1:f9:83:bb:11:b6:38:1b:
9c:64:91:fb:6d:af:c4:57:6d:27:78:f4:11:1b:de:16:49:fe:
a5:6d:04:07:c5:a5:aa:40:1f:19:6f:02:fb:38:26:64:e8:de:
65:5e:c5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:48 2026 by rpki-client