Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: 2U9Cpub30gJnfCzlSEJnWnjAHci8Cqpy6I/c7Qe6O7s=
Subject key identifier: C7:4D:39:22:73:BA:38:6D:F2:C8:0B:31:00:6B:C8:C0:0E:9F:79:1B
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 019CABD9028AACF257C28D18255D1C872374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 00:00:51 +0000
Manifest this update: Mon 02 Mar 2026 00:00:51 +0000
Manifest next update: Tue 03 Mar 2026 00:00:51 +0000
Files and hashes: 1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: i9FjOPw2GV8drxv0l3hRn9go+gYpE4EgX6iSMn0Uam0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:02:8a:ac:f2:57:c2:8d:18:25:5d:1c:87:23:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Mar 2 00:00:51 2026 GMT
Not After : Mar 3 00:00:51 2026 GMT
Subject: CN=c74d392273ba386df2c80b31006bc8c00e9f791b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fb:b6:05:5c:f0:e8:31:21:56:c0:a5:cd:91:
f7:90:14:00:3b:5f:62:a6:4a:c8:80:71:52:54:79:
43:0a:e8:6b:ab:7b:fe:4e:0e:81:5b:aa:98:59:80:
c4:53:62:f7:f0:17:0c:32:a6:f7:23:8a:38:70:8c:
98:c3:4e:53:d8:8b:b8:8a:ff:2a:e5:84:5d:6e:e7:
17:97:1b:12:89:f3:cb:b8:83:07:6e:6a:fb:42:51:
bb:4e:8a:ec:92:f3:e2:fd:ed:19:b3:fe:e8:51:f5:
4b:7d:f4:e5:72:84:30:70:76:00:42:c8:17:33:c9:
04:b7:4d:6e:99:00:ac:2d:02:99:48:37:fc:87:0b:
24:2c:f3:3f:01:2d:47:03:10:82:5a:58:5f:5a:6a:
b4:8f:d4:30:f3:e8:f7:20:29:04:4c:94:66:dd:e6:
b5:ec:4d:a4:cc:34:52:da:57:b1:7b:27:bc:ea:e6:
2c:d4:c5:0a:6e:e9:18:de:45:1e:7f:be:05:ac:7a:
b4:8b:49:91:47:55:9f:b2:99:28:1b:67:52:fb:84:
43:90:8f:1f:67:54:7d:e1:5e:2a:da:67:a2:e4:bd:
ed:da:25:9e:60:81:3e:67:e7:42:12:af:0f:2b:45:
20:dc:fa:df:53:68:54:69:a2:5f:4d:8e:22:d1:37:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4D:39:22:73:BA:38:6D:F2:C8:0B:31:00:6B:C8:C0:0E:9F:79:1B
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f6:bb:96:32:ba:ed:28:a8:75:00:fd:75:e6:5a:42:1b:fc:
9b:e8:27:6b:33:bd:b2:1d:c3:a7:2a:75:ef:6a:df:ba:0b:db:
6d:08:b0:bb:65:df:1f:15:dd:96:35:29:a7:45:dd:fd:ed:2a:
a8:e8:1b:51:2f:5d:10:36:5e:f8:de:db:62:06:02:8e:cc:fc:
df:6b:a2:3f:83:82:42:75:f6:ff:99:41:5a:14:9f:88:42:90:
90:bf:3b:9f:6a:73:ab:ec:91:d1:e2:13:b3:59:1c:f0:d0:37:
c1:4d:ea:9e:0c:d9:80:53:93:10:2e:40:56:89:4c:cc:f6:65:
1b:ab:b6:76:89:76:2e:28:0a:bb:04:1f:8a:2e:39:65:31:e0:
55:0f:5c:78:a7:de:b4:2b:3b:9a:aa:72:f2:82:34:b1:58:84:
75:2b:7c:4f:95:a2:35:de:11:4c:f0:d4:dd:53:9c:ec:9b:4f:
c5:46:1a:6c:d3:62:58:e4:10:f5:90:ca:b4:4c:a5:90:83:46:
4b:1a:08:71:f9:0e:4d:69:54:53:70:41:b2:cc:95:e1:53:15:
7c:e9:b8:e7:b5:a2:e2:35:23:24:4d:97:f0:e7:17:4a:62:9f:
df:5f:50:18:43:c2:e3:53:65:3c:2d:2c:30:1c:4a:d9:af:76:
f0:3d:ea:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:32 2026 by rpki-client