Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
File: ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft (raw, json)
Hash identifier: 4oFV2Lsh0nAP7mfq8mtu36th6iCF/e2CPJX2A7bbZ6s=
Subject key identifier: 1B:8F:0B:7A:08:64:06:1E:E0:79:77:0F:78:E1:6A:1F:4B:6D:A2:B1
Authority key identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
Certificate issuer: /CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Certificate serial: 019CABD96CA0397CEA535ED3F4F79F264CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
Manifest number: 11BB
Signing time: Mon 02 Mar 2026 00:01:18 +0000
Manifest this update: Mon 02 Mar 2026 00:01:18 +0000
Manifest next update: Tue 03 Mar 2026 00:01:18 +0000
Files and hashes: 1: ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl (hash: Uka2bLnJMzXKnnPkmYzG3rZm+bPmfgGTkRenkBx/4uA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6c:a0:39:7c:ea:53:5e:d3:f4:f7:9f:26:4c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65186e4ef8caedf66ed34d93aba80b2cfc068673
Validity
Not Before: Mar 2 00:01:18 2026 GMT
Not After : Mar 3 00:01:18 2026 GMT
Subject: CN=1b8f0b7a0864061ee079770f78e16a1f4b6da2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:b0:64:d2:eb:3a:65:c9:01:96:9f:f0:e5:
66:08:74:af:f2:02:74:18:7a:7f:bb:62:a2:a0:94:
6e:07:39:75:49:63:b9:c4:f7:5b:ff:3a:fe:06:ea:
49:c6:7d:f9:a1:20:bc:de:2b:3b:12:5a:22:31:e6:
d8:d4:f2:0d:ff:97:5b:53:65:04:2a:79:e1:17:27:
dc:21:80:36:1c:59:50:54:e6:14:e5:f9:1f:4f:50:
96:05:f4:3d:8e:d3:4f:cb:ce:4f:4c:92:8e:ce:48:
7e:e1:eb:8e:2c:0d:1a:e8:1a:2f:5a:76:e1:3e:06:
11:e0:c9:a4:59:50:31:21:83:a3:13:f6:4d:d6:69:
f6:c7:ff:a4:d4:24:a8:de:45:b7:6b:4f:f1:fc:0a:
75:5a:15:3f:37:c2:2a:c0:bc:2f:2c:9d:d2:ff:5d:
6d:87:4b:64:0d:52:6d:82:ad:d0:55:66:88:f1:d7:
69:53:3e:99:30:2c:7c:fb:73:51:bd:2c:77:3a:c5:
25:f9:90:a5:50:76:e9:84:ab:e1:8a:2e:ba:68:2a:
3a:1b:53:71:00:02:0e:21:9b:fc:12:07:b9:8f:6f:
8e:8f:5a:99:60:13:8c:ed:14:b9:a1:39:51:bf:19:
15:78:d7:04:81:a3:22:66:a1:18:1d:4f:a9:e8:92:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8F:0B:7A:08:64:06:1E:E0:79:77:0F:78:E1:6A:1F:4B:6D:A2:B1
X509v3 Authority Key Identifier:
keyid:65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6d:65:91:77:03:a3:4f:5e:dd:e6:14:a5:7b:86:f1:88:6f:
42:35:17:5e:9e:0a:40:cc:87:eb:5b:b5:95:f9:fe:a3:f0:ce:
55:a3:cf:5d:78:43:9c:e7:b3:52:ce:aa:9e:27:0d:04:b7:ed:
46:f6:7d:ac:d6:42:ef:48:8a:6c:73:c4:af:7c:6a:71:b0:22:
e5:ae:3e:a6:43:3d:23:33:43:54:ec:75:b3:2e:55:79:3f:1b:
79:0c:59:1f:b1:ee:bc:29:61:89:51:07:51:bb:0a:aa:e0:0b:
fd:69:b9:83:d1:a3:34:8f:61:e5:4e:ea:e8:d4:d3:17:08:3b:
ff:f1:a9:7c:1a:94:96:d7:01:41:14:90:25:19:9f:db:3d:f1:
29:41:71:db:53:8e:cd:be:19:0d:56:b2:3d:70:69:30:c4:f8:
e6:75:c0:b2:4f:9b:c5:de:f7:34:21:fb:be:ae:de:3c:d6:94:
d4:ce:0a:2e:13:3b:ae:ed:db:56:29:87:00:a3:1a:ee:18:ea:
05:fe:50:4e:94:32:f8:48:66:be:d6:cd:ad:c8:8e:c3:25:a6:
47:cf:d1:47:16:c8:85:2d:7a:67:5f:c7:14:b7:fe:36:06:c8:
e4:db:c7:9a:9f:75:20:14:e4:07:0e:96:47:f3:f5:d3:f3:52:
4e:fa:26:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:28 2026 by rpki-client