Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
File: z9rC7BEEwkXZyrqOthY46drxADk.mft (raw, json)
Hash identifier: h65V6vY+HJpgxhK3FAWqZlWZU2QBJ4b9nYpD8a7h/Y4=
Subject key identifier: A4:5A:16:FF:7C:E5:2D:99:22:AF:F7:C2:C9:46:D9:83:47:FE:E1:0B
Authority key identifier: CF:DA:C2:EC:11:04:C2:45:D9:CA:BA:8E:B6:16:38:E9:DA:F1:00:39
Certificate issuer: /CN=cfdac2ec1104c245d9caba8eb61638e9daf10039
Certificate serial: 019CAD59634310F6CC8DAED896F7BEA87872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
Manifest number: 1384
Signing time: Mon 02 Mar 2026 07:00:42 +0000
Manifest this update: Mon 02 Mar 2026 07:00:42 +0000
Manifest next update: Tue 03 Mar 2026 07:00:42 +0000
Files and hashes: 1: z9rC7BEEwkXZyrqOthY46drxADk.crl (hash: 47BwgFVSl9EwAbVnq2cJGkZpJSnO6ez3gipYjlpn/x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:63:43:10:f6:cc:8d:ae:d8:96:f7:be:a8:78:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdac2ec1104c245d9caba8eb61638e9daf10039
Validity
Not Before: Mar 2 07:00:42 2026 GMT
Not After : Mar 3 07:00:42 2026 GMT
Subject: CN=a45a16ff7ce52d9922aff7c2c946d98347fee10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:f1:93:1b:39:b9:e9:f3:48:0f:34:21:fc:
3c:32:0e:4b:9e:3e:2f:5c:cb:9b:a1:3c:0a:08:ac:
57:fd:7e:79:1c:9e:08:8e:d7:e4:39:8d:0c:0e:6f:
b4:ca:34:07:b3:23:21:31:54:2e:f9:c6:b5:b8:7c:
c1:12:1f:70:77:8e:3d:7a:6c:95:ba:e4:89:14:53:
8f:e1:0d:c2:fc:66:22:79:70:0c:5a:82:0f:e7:58:
e7:1f:e1:c0:83:fa:aa:29:6b:8c:10:d6:ae:69:7c:
3b:21:42:e5:0a:d6:bc:e7:fe:36:68:82:02:4e:2e:
64:e2:bf:a9:81:56:06:9f:69:a7:5b:d7:5f:0a:74:
ae:ca:d2:42:02:59:37:f9:fe:ae:40:64:8d:36:71:
1f:18:1d:10:52:3f:28:b2:b4:63:37:3b:e3:94:17:
5f:d6:91:46:3f:bc:ef:91:12:14:92:75:68:60:4b:
97:6c:e7:bc:9f:2d:2f:65:39:7e:4d:73:55:77:6d:
96:0d:e6:d6:05:2f:47:41:37:8f:84:6b:f5:e4:8d:
46:10:65:c6:ac:c1:94:0e:60:4c:71:9a:33:63:2e:
b6:1d:06:dc:9e:0a:59:f1:e6:a1:80:ea:21:ce:6b:
e8:92:2b:81:c1:14:50:ba:a6:f7:64:ed:04:68:f7:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5A:16:FF:7C:E5:2D:99:22:AF:F7:C2:C9:46:D9:83:47:FE:E1:0B
X509v3 Authority Key Identifier:
keyid:CF:DA:C2:EC:11:04:C2:45:D9:CA:BA:8E:B6:16:38:E9:DA:F1:00:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b7:40:19:9b:50:33:26:c6:43:89:94:4a:d1:ba:e7:00:82:
20:bb:0d:70:0b:00:a2:ea:cb:44:5a:4a:30:15:b6:50:d9:18:
af:0e:e8:88:b8:b7:ca:69:c6:67:a9:e1:c1:c1:f6:18:34:6d:
44:51:85:56:1a:9f:c6:cf:f8:a9:98:c0:13:94:a4:c2:7a:92:
8b:ea:76:b5:02:a0:31:7c:9c:65:15:68:21:4b:12:a5:8a:f5:
a9:35:c8:aa:fb:ed:5c:05:b2:26:a9:23:f9:c1:a5:47:f2:25:
0c:4d:f4:f7:42:4b:1d:2d:fb:83:63:e3:a2:94:43:d6:46:3a:
6d:7f:8b:98:0a:ac:b4:71:10:ce:bf:ad:b5:44:0f:64:0a:d9:
a5:1c:4b:74:f2:b0:f9:40:1d:f7:72:89:97:87:7b:df:ff:8a:
96:61:03:1c:cd:14:2c:82:09:1c:c7:51:94:d3:88:ec:22:83:
76:04:e3:c5:25:08:af:ce:72:79:fa:0e:1d:ad:76:6c:37:1c:
69:26:ba:45:2a:1c:46:f1:88:1c:c9:cb:37:75:53:e2:0a:aa:
56:68:7d:fd:9c:e2:01:0a:62:02:cd:3c:74:17:20:ff:fe:57:
4e:cd:3e:4d:7c:95:61:23:0b:6c:2e:ec:2d:12:c9:fd:ca:ac:
a7:04:e6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:27 2026 by rpki-client