Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
File: zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json)
Hash identifier: UPMLaXAu5o3rPB4asQk2reviuMGi0DlzwRn0BHgqyaE=
Subject key identifier: FB:98:8A:06:BB:78:6F:0A:9A:FF:42:1D:4D:89:26:32:F9:65:33:6A
Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Certificate issuer: /CN=cefe18ac971c82a777f7db19ffab334a32537703
Certificate serial: 019CAAC6040E074A9EDEDF1F01441CE59D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
Manifest number: 12F8
Signing time: Sun 01 Mar 2026 19:00:29 +0000
Manifest this update: Sun 01 Mar 2026 19:00:29 +0000
Manifest next update: Mon 02 Mar 2026 19:00:29 +0000
Files and hashes: 1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: wrsAzlq+T33F+TKVzMMgt+QuudTJH5ZFIepTyO+I3M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:04:0e:07:4a:9e:de:df:1f:01:44:1c:e5:9d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703
Validity
Not Before: Mar 1 19:00:29 2026 GMT
Not After : Mar 2 19:00:29 2026 GMT
Subject: CN=fb988a06bb786f0a9aff421d4d892632f965336a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:c2:b9:ea:bd:a4:8c:07:fb:0a:6e:0e:14:
d4:e3:34:9b:1e:e2:7d:98:5f:0a:68:1e:10:0d:3e:
eb:94:8b:de:95:f8:b0:f9:ce:18:f2:cf:16:a5:29:
96:4d:f8:a9:d9:d3:41:00:01:1f:ce:a0:8f:f0:ef:
31:bf:3e:7b:05:07:af:d0:f5:31:b8:7e:46:b6:3f:
8f:37:04:9d:5b:c2:d0:64:d7:a6:44:f2:c4:d3:c1:
9d:61:34:e3:a2:74:19:3f:80:ca:d5:c7:05:f4:f0:
a7:0c:ec:ed:79:49:d8:03:3b:bb:e9:8a:65:bf:4a:
2e:4c:d7:3a:15:6c:1e:8e:2e:f9:b9:b2:43:c5:70:
9c:ca:ee:5f:77:a4:d3:84:b9:02:2c:07:6c:30:70:
bb:60:03:e2:97:27:90:3e:e9:c0:08:c9:f1:fb:ae:
08:14:5f:46:6d:63:4d:3e:56:05:37:a4:ce:f5:ca:
25:39:6a:65:33:25:c0:ce:0c:9a:6a:3d:23:73:18:
3b:ef:b2:45:73:57:07:ec:1a:be:04:6e:80:e4:c7:
0a:8c:d3:97:b0:12:f9:dc:98:29:30:b3:8a:a6:f6:
31:3b:ea:ef:f5:86:ab:2d:70:e1:80:25:d8:1e:4a:
6f:3c:3c:91:ae:09:0d:73:de:67:45:6b:00:7b:29:
bf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:98:8A:06:BB:78:6F:0A:9A:FF:42:1D:4D:89:26:32:F9:65:33:6A
X509v3 Authority Key Identifier:
keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7d:82:02:bd:7e:8b:ea:9b:d2:27:fd:79:a2:6c:28:c0:5a:
9b:9a:2c:6e:08:6b:ad:a2:fb:36:82:f3:5e:ce:0d:fc:f1:ad:
b1:c6:ae:d6:c8:1b:c1:47:98:48:fc:91:08:fb:8d:66:7a:e2:
e8:d8:e7:0a:b6:13:74:e0:2d:39:8a:f8:89:18:c1:f2:bb:78:
a7:c2:c0:ff:ea:5a:65:f2:0a:03:30:d8:cf:6a:fa:54:2f:23:
f2:86:f3:3e:10:6d:f3:c7:fb:95:4e:1a:d1:16:52:57:73:37:
a1:e0:25:17:9b:21:2d:f2:05:e7:da:b2:b0:15:98:28:03:1b:
bd:7e:ab:1d:e3:51:11:a8:8a:f0:b0:72:67:ac:f0:d8:b4:b1:
4b:92:0f:77:31:12:4c:00:d2:8b:08:5c:d5:ec:a3:46:72:6a:
03:ed:95:8d:ba:a6:76:22:d4:f2:99:f3:b4:f9:fd:82:1b:9f:
05:d8:44:2c:b1:c9:7b:6c:7e:2a:c8:b3:0a:b5:5f:88:a6:ea:
8c:46:ea:33:3f:bc:61:71:d8:e6:fd:ca:54:a9:e8:ef:46:03:
7b:80:28:bc:0f:96:a6:56:f6:da:d2:6b:76:3d:5a:34:03:7c:
a1:79:07:a0:c8:a7:97:8f:05:8e:69:64:26:74:96:ef:fd:13:
20:dd:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:19 2026 by rpki-client