Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
File: ZLPjZgb6UsOkchyMoPszCZU0GVo.mft (raw, json)
Hash identifier: 1eL7qU/RlUqkAtDz5ubn3ZHpv8nHDjEAIsriwJXRab8=
Subject key identifier: 8B:1B:55:81:1A:2E:EE:77:0E:6A:1A:1D:97:95:DD:73:39:E1:E0:A5
Authority key identifier: 64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
Certificate issuer: /CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Certificate serial: 019CAB6AD3B72429DA4E1B337E0988AD7CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 22:00:30 +0000
Manifest this update: Sun 01 Mar 2026 22:00:30 +0000
Manifest next update: Mon 02 Mar 2026 22:00:30 +0000
Files and hashes: 1: ZLPjZgb6UsOkchyMoPszCZU0GVo.crl (hash: +X0TS56cOCYIIjtRh8yQlA29F6Wj6WKXaTY7VtdlVOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d3:b7:24:29:da:4e:1b:33:7e:09:88:ad:7c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Validity
Not Before: Mar 1 22:00:30 2026 GMT
Not After : Mar 2 22:00:30 2026 GMT
Subject: CN=8b1b55811a2eee770e6a1a1d9795dd7339e1e0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:39:b5:ae:a1:25:2f:b6:60:53:f4:3a:4b:b5:
79:75:a2:c7:95:ba:e1:00:27:0b:5b:36:e0:7b:0a:
bd:6d:59:c9:b4:f7:2a:d8:20:71:30:4b:84:e2:d0:
18:f0:d3:a7:d8:d0:fc:ef:cf:c3:38:64:cb:e1:0d:
97:ae:95:74:21:fb:9f:04:ff:cb:2d:a6:c7:79:cf:
63:c3:2f:f3:b6:d3:cb:2d:03:91:0c:82:da:d7:c0:
ae:9e:3e:26:c9:24:65:f2:86:c1:20:ff:75:1a:6e:
f6:a0:0e:d3:6c:7e:7c:c0:56:45:fa:a3:24:cd:42:
3b:9d:61:be:b1:bc:cd:78:3f:d8:52:54:9b:81:b4:
72:26:e9:bb:40:90:73:0b:e3:5a:43:07:92:ec:3a:
5b:20:bf:79:7e:96:fd:f5:77:1a:64:8b:5c:4a:cf:
0a:e8:f9:8f:8b:ce:6d:e2:d3:d5:f8:6d:4f:26:fa:
48:bd:51:90:07:02:21:3f:cb:83:75:0f:b0:bd:3e:
a3:84:33:69:68:47:36:8f:30:34:e0:6b:c2:11:2d:
5c:8f:ed:5b:13:2f:b2:2c:b9:da:63:8b:65:59:c9:
16:81:49:26:b7:d8:42:9c:66:78:59:69:44:e3:ec:
f9:62:6b:9e:ff:6c:e1:9b:85:79:fd:c0:6f:fa:66:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1B:55:81:1A:2E:EE:77:0E:6A:1A:1D:97:95:DD:73:39:E1:E0:A5
X509v3 Authority Key Identifier:
keyid:64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0a:34:17:e2:34:52:db:a1:b7:ad:bc:45:73:31:c3:e6:18:
4f:0f:21:37:b0:dd:b6:32:67:a6:8e:61:f8:b7:6f:03:51:f1:
a7:56:01:c9:58:5f:11:4d:13:a0:14:5f:4f:1b:1c:0a:fd:07:
7b:bf:73:37:b1:31:bb:b2:02:e2:02:83:a3:6f:fa:c1:c2:2d:
9e:82:a0:ab:ff:3b:d1:57:a3:26:ec:fa:58:51:0a:03:b3:59:
80:ec:ef:f7:8c:d6:2f:e3:75:af:8f:9f:e5:73:13:78:01:86:
b2:f0:71:fd:69:a5:d4:0b:25:dc:08:69:00:f8:55:ed:80:8b:
79:ca:68:1d:12:6c:47:b0:22:36:32:70:2c:b7:c4:39:57:4e:
88:20:eb:0c:8a:ab:b1:69:55:cf:fb:93:a7:6d:d2:fa:62:f0:
c7:62:da:e2:63:0a:b6:19:32:e2:99:32:fc:45:d0:2f:d6:8c:
f5:bc:91:46:22:ee:a3:76:62:20:5b:93:09:c7:46:c2:1b:fa:
dc:5e:3e:22:1c:2f:05:4f:0f:07:6b:1a:81:6a:f5:ca:1c:a6:
72:f0:ba:cb:02:54:80:59:6d:ba:8d:57:67:20:28:b1:5b:ab:
b1:d7:cd:83:d4:5b:64:99:b0:be:4d:75:7a:db:d7:7f:30:98:
73:55:3c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:11 2026 by rpki-client