
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
File: dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft (raw, json)
Hash identifier: 9RweNRHF6058P7iJfRSdjIC5Aob6MzM6l7BdVdWXqMA=
Subject key identifier: A9:59:16:13:F5:3D:69:86:4B:BD:A7:86:E8:10:66:EF:1D:4C:32:CC
Authority key identifier: 75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
Certificate issuer: /CN=75923ec546df371d09e68c6b06025ea31261234a
Certificate serial: 019CAB6BA80093E0CD64DD3FC19F1C6D4DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:01:25 +0000
Manifest this update: Sun 01 Mar 2026 22:01:25 +0000
Manifest next update: Mon 02 Mar 2026 22:01:25 +0000
Files and hashes: 1: dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl (hash: dWUct4DRxoh2EvhZxymkqc1iIRuXAMWbi8r6zlxCEyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a8:00:93:e0:cd:64:dd:3f:c1:9f:1c:6d:4d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75923ec546df371d09e68c6b06025ea31261234a
Validity
Not Before: Mar 1 22:01:25 2026 GMT
Not After : Mar 2 22:01:25 2026 GMT
Subject: CN=a9591613f53d69864bbda786e81066ef1d4c32cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:38:28:86:5c:56:20:59:db:b6:22:71:e9:
bc:bf:2c:20:11:d8:05:ac:25:5b:a7:51:da:16:89:
a6:ff:bc:d3:a5:15:37:f3:65:03:5d:dd:82:bb:a5:
76:b0:68:7b:5f:47:7e:2b:4e:26:72:d5:68:8f:8c:
e9:9b:68:00:3c:3c:b1:76:fe:3c:1c:da:c4:b8:82:
0c:6c:0f:94:78:2a:11:a3:b2:aa:42:43:2e:09:cb:
ad:8d:09:ce:97:42:4d:58:4e:a2:da:04:4b:03:b2:
3e:4a:26:d3:10:3d:65:35:2c:11:34:cd:45:ac:9d:
2d:35:49:0a:3a:c8:31:e1:0b:56:87:50:81:a3:6c:
bd:52:bd:f1:ec:5c:55:e5:51:c7:ef:d7:5e:ad:5d:
1f:19:7a:cc:3b:24:3d:11:95:b1:8f:65:6f:b5:02:
cd:49:4e:7e:8f:c7:07:d2:a8:31:86:4f:b2:6f:9b:
0e:11:40:a5:2a:0b:4c:99:1c:dc:9a:18:8d:25:aa:
cb:8e:dc:82:fa:de:46:63:50:f5:19:f3:46:d1:bf:
83:c6:a7:6a:39:d3:f6:d5:e7:43:ca:03:7d:49:70:
7f:9a:9a:5e:4e:40:da:e8:02:87:25:f7:56:09:1b:
5b:69:3b:0b:d4:63:a7:93:bf:26:2a:3d:d1:73:c9:
ba:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:59:16:13:F5:3D:69:86:4B:BD:A7:86:E8:10:66:EF:1D:4C:32:CC
X509v3 Authority Key Identifier:
keyid:75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5b:f9:1d:ac:d5:8f:e3:c5:aa:68:7d:17:de:86:6e:e6:a4:
06:db:1d:3d:d4:51:f2:f6:44:92:ae:0d:7f:93:c1:ce:1e:e3:
32:5e:8c:13:1f:e7:89:dc:82:c4:05:70:46:e6:14:2d:7a:c0:
a9:12:99:1d:29:1d:b4:79:a9:6e:b4:89:e4:8e:2b:28:4e:63:
84:a3:a6:fa:cc:d3:32:1c:a6:55:aa:c4:3f:a8:a7:d8:6b:4c:
dc:f2:42:85:dd:47:3c:c5:c2:74:d5:af:61:c8:63:85:d1:96:
56:c6:7b:9c:c8:65:49:77:95:90:0f:86:d3:db:0e:66:31:cf:
9b:11:a1:5f:60:2a:34:b8:c7:da:da:98:a9:ec:85:38:5e:16:
d2:53:6a:f6:47:8e:17:fd:bc:c8:d8:65:c7:2a:c2:f9:fb:87:
a8:a9:7e:36:bd:86:5a:79:2c:d3:01:f2:4f:b3:fa:3d:d5:8c:
81:d9:a4:ce:26:52:de:8c:87:47:87:90:ce:d8:32:b4:2f:cb:
31:c2:3c:eb:a7:24:55:75:68:db:cc:3a:27:a7:c8:bc:47:c3:
ad:0b:e0:ab:d4:db:aa:61:3c:fd:f3:cf:62:eb:b2:0c:97:90:
df:5a:ef:95:97:99:9a:bc:c6:42:f7:f9:be:72:ae:b5:41:18:
40:d7:85:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:04 2026 by rpki-client