Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
File: zsUHpaHlUBp61jVTNazf5j2ryQs.mft (raw, json)
Hash identifier: 4my5gY1Ur1Cxjc+s1M7I7KxLPA2vqQ9VcWZv0hmJG84=
Subject key identifier: 82:41:A4:5D:10:A5:E9:BB:74:70:73:02:01:B9:64:95:C1:F1:93:3D
Authority key identifier: CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
Certificate issuer: /CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Certificate serial: 019CACB5139D81ADE5E1831E62660F08489E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 04:01:14 +0000
Manifest this update: Mon 02 Mar 2026 04:01:14 +0000
Manifest next update: Tue 03 Mar 2026 04:01:14 +0000
Files and hashes: 1: zsUHpaHlUBp61jVTNazf5j2ryQs.crl (hash: ClKr7VBuJW/LyXtW2Ec2vL7VD9XM8SoKLnu8i/8qrPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:13:9d:81:ad:e5:e1:83:1e:62:66:0f:08:48:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Validity
Not Before: Mar 2 04:01:14 2026 GMT
Not After : Mar 3 04:01:14 2026 GMT
Subject: CN=8241a45d10a5e9bb7470730201b96495c1f1933d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:c7:38:02:e8:2a:3d:11:13:52:f1:a0:93:
4b:87:b0:cf:a9:e5:c7:c7:63:65:f9:eb:96:93:a1:
84:70:f0:25:c0:e7:8e:23:9b:46:13:dd:2e:10:62:
b9:d2:01:48:6c:3a:3c:76:c0:f2:89:3b:5d:5a:96:
fe:26:f3:ac:c2:64:8d:af:34:4f:eb:b9:ac:7f:c2:
1c:c9:04:43:10:fe:90:04:4b:94:b4:fb:62:b3:70:
53:74:5a:d7:0e:d7:d4:39:16:b6:e8:8b:7f:9d:46:
4e:f9:18:11:2e:7e:a6:be:ab:f6:41:00:80:d4:22:
5a:c0:dd:33:09:ff:27:32:1f:b2:9c:0a:cb:0b:31:
3a:32:6f:7c:d7:33:56:1b:96:8c:76:18:93:11:31:
4b:67:1a:2c:d4:aa:9d:a9:fe:4e:6e:48:1c:b2:86:
05:6b:c9:7b:4f:43:54:0b:46:00:d4:0b:47:d3:6f:
26:6c:eb:04:ab:12:aa:dc:a0:98:3c:a2:30:a2:72:
dd:40:5f:2a:bf:95:25:4b:2a:f5:25:bb:75:4d:16:
f6:cd:7f:29:81:80:9a:8c:8e:de:5c:ae:9a:e2:cd:
e8:99:ec:c6:9c:8e:ad:a2:12:ca:a7:d2:af:85:53:
14:2a:3d:d1:19:e3:e5:e7:8f:cc:51:d5:12:9f:3d:
cf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:41:A4:5D:10:A5:E9:BB:74:70:73:02:01:B9:64:95:C1:F1:93:3D
X509v3 Authority Key Identifier:
keyid:CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c1:14:47:17:c5:27:8a:c0:f1:8e:17:46:a9:79:9a:77:12:
97:50:cf:ac:c0:8c:3d:47:03:14:ab:c1:ad:17:df:9c:f5:08:
d4:24:57:9a:e7:c2:64:1a:56:53:bd:38:e7:2b:d8:97:4e:01:
6a:c6:e2:76:76:a4:f1:e7:c0:bc:19:6e:9c:2d:64:29:24:77:
a0:20:02:03:38:c7:14:71:b2:9c:ee:df:c6:22:50:9d:20:ac:
e3:79:fe:f3:58:2a:29:e4:c1:02:2f:48:9a:1b:7d:5b:7c:f6:
b7:d3:7c:d4:d1:ee:9e:5c:60:63:a1:86:c7:7a:16:90:11:b0:
82:8d:a7:7b:4d:bb:63:1a:33:58:52:e7:b9:a4:52:8f:f2:d1:
a1:4e:93:2b:32:0a:52:dd:91:3a:46:3d:0c:71:63:fe:b1:9c:
c0:86:0c:95:89:4b:3f:3e:44:17:68:1c:bb:49:4b:79:6b:6e:
87:33:09:2c:fa:df:8c:70:ef:ab:94:a2:f6:93:1d:55:04:f6:
ea:64:72:aa:eb:d7:cb:f0:6a:40:b8:68:d7:53:ba:cf:ef:4c:
e8:bd:c2:64:8d:ab:6b:f5:de:22:23:4d:cd:47:be:77:1d:a8:
10:db:9d:b0:e3:a7:0b:76:58:81:fa:d9:37:4d:f7:58:f7:67:
d2:6e:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:24 2026 by rpki-client