Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json)
Hash identifier: HJ5yysgnzCzE6rmzIn5MfFEnLyOxAGj2lwrBK1kMx4k=
Subject key identifier: 66:7D:C3:D9:84:0C:3D:11:D9:6A:2D:1C:4C:B0:61:03:B5:D3:65:C8
Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Certificate serial: 019CACB4F3AA2E000B29D5C68C96C8C24DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
Manifest number: 0C94
Signing time: Mon 02 Mar 2026 04:01:05 +0000
Manifest this update: Mon 02 Mar 2026 04:01:05 +0000
Manifest next update: Tue 03 Mar 2026 04:01:05 +0000
Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: 17n/4rLgC+i2to+qnvLva76ojemiSezhxyc44djL6AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:f3:aa:2e:00:0b:29:d5:c6:8c:96:c8:c2:4d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Validity
Not Before: Mar 2 04:01:05 2026 GMT
Not After : Mar 3 04:01:05 2026 GMT
Subject: CN=667dc3d9840c3d11d96a2d1c4cb06103b5d365c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:51:9f:20:68:86:5c:da:ee:04:b0:0c:65:
14:a0:93:d3:c7:32:76:70:bd:f3:55:36:3f:94:7a:
e5:a0:4b:f8:a3:b0:f6:2f:ce:f9:19:26:4e:b2:e5:
bd:01:21:04:cf:af:ce:d0:0d:27:70:7d:84:dc:a2:
a2:ca:20:6c:72:9c:9b:a6:76:cf:0e:ad:c1:3d:ed:
e0:61:04:ab:7e:20:a8:a1:5b:32:c0:fb:eb:a1:1c:
80:57:fb:ff:32:4f:1a:f2:1e:a4:a8:e5:f2:65:91:
cb:52:a9:6b:9b:3b:97:b8:fa:1f:bf:85:06:57:59:
26:6a:0a:5a:c8:8e:e3:a8:9e:35:1c:7d:61:73:c0:
a9:ea:fd:7f:2f:78:a0:09:cb:75:7a:01:e5:97:aa:
46:31:5f:97:94:45:59:7e:28:92:93:da:90:3d:bd:
8e:5b:2a:6c:fc:96:55:74:08:5c:b1:c0:88:fa:52:
d4:6c:28:5d:d6:29:ec:0e:f2:ad:48:96:e5:96:48:
b6:b4:8b:7f:03:ef:cb:39:39:85:6c:6b:ab:48:d6:
0b:6f:39:34:ca:79:28:24:8b:d0:3a:ba:17:72:70:
81:4f:3f:ec:97:7a:27:3c:38:45:6a:3d:a4:b9:58:
67:4f:ec:fc:2d:04:4e:4f:31:e5:b0:89:f0:44:38:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7D:C3:D9:84:0C:3D:11:D9:6A:2D:1C:4C:B0:61:03:B5:D3:65:C8
X509v3 Authority Key Identifier:
keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:08:49:3c:fb:b7:0a:b0:1a:10:18:f1:66:e3:3e:eb:ba:b4:
aa:4c:4f:4f:bd:6e:df:6e:b8:de:49:a2:81:ac:d5:1f:63:64:
ee:d7:8f:cb:c7:14:a7:1a:25:54:f3:92:3f:d5:be:c8:67:c6:
8e:1a:de:ec:74:4e:89:51:ce:54:d3:84:2d:6b:6d:b5:20:1f:
88:8c:b6:c1:92:5a:d4:bd:47:01:fd:19:3c:c9:01:4c:ae:bf:
49:66:eb:df:b2:0e:dd:69:14:f9:db:c4:5d:86:1b:de:e2:bb:
37:2b:5f:49:b8:dc:18:90:39:f2:20:c7:5f:37:d6:cd:f0:51:
86:5c:6a:0f:3a:92:9d:6b:94:34:0c:80:de:89:ea:cf:28:0c:
33:77:28:07:1f:46:fc:6f:89:03:51:7e:7b:dd:91:ee:b3:c7:
78:04:1f:31:8c:50:4a:74:ee:c6:38:41:55:d9:59:b9:8c:e2:
6c:4c:7e:ab:21:df:0d:75:1e:38:24:65:b1:6d:f4:87:c8:df:
2d:54:40:3f:40:ce:39:ea:fd:0a:4d:8f:e1:87:86:9a:3d:b3:
d3:54:a0:70:4f:74:05:0a:8b:1f:d9:ef:67:b4:1d:7d:53:50:
c8:5b:11:3e:de:ba:43:be:1a:9d:69:5d:36:59:49:02:ab:28:
65:67:fc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:21:53 2026 by rpki-client