Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json)
Hash identifier: bUKtLRz1OKScb02T8YFUTe8v4NUD9SWL081BMVbttDg=
Subject key identifier: 25:1C:F0:CE:3C:D8:42:69:D1:CD:C4:AA:64:FB:36:F4:A8:C3:1B:F8
Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Certificate issuer: /CN=6414775fdaeec7b0d5c927083988d555727c21b5
Certificate serial: 019D98F516407655508D5EBD6D58FE603B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
Manifest number: 0A6E
Signing time: Fri 17 Apr 2026 01:01:31 +0000
Manifest this update: Fri 17 Apr 2026 01:01:31 +0000
Manifest next update: Sat 18 Apr 2026 01:01:31 +0000
Files and hashes: 1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: XrOZ4Dl99fiFEweAOuJvwUAI/BVV3+R9xCeHonUwA8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:16:40:76:55:50:8d:5e:bd:6d:58:fe:60:3b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5
Validity
Not Before: Apr 17 01:01:31 2026 GMT
Not After : Apr 18 01:01:31 2026 GMT
Subject: CN=251cf0ce3cd84269d1cdc4aa64fb36f4a8c31bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:63:0d:05:3d:20:fc:3b:95:92:69:02:5e:
0f:fa:49:5b:cd:2b:43:2d:34:af:d7:da:f2:a8:1e:
29:f8:66:a7:ba:60:12:7e:ae:ca:34:55:34:12:26:
a4:1c:3d:8c:76:87:24:c5:94:09:62:eb:49:c7:f3:
60:53:3e:0f:e1:14:f6:ee:0b:7d:94:01:d0:a8:0d:
a1:c3:c4:c5:46:90:a0:c6:3b:ce:7a:e1:8c:87:6c:
ed:3e:96:1f:76:28:89:21:af:3b:c4:a8:4e:4f:f3:
9e:8f:b1:17:e5:32:59:65:3e:bd:e3:cd:9e:b8:8d:
91:85:52:7a:9e:b2:1c:b6:aa:7b:f0:d0:af:41:00:
14:a1:ad:cf:65:27:30:96:1c:57:df:b1:78:96:78:
9e:07:d2:77:14:2f:bc:d9:e0:df:13:c8:76:87:fb:
01:ac:d5:8a:0b:82:f8:50:38:1a:ae:00:1c:eb:f1:
03:04:04:b1:f3:45:bc:87:85:bf:4c:d7:a5:d3:08:
2f:5d:36:c8:ac:4c:17:99:78:c7:ff:03:8f:50:3f:
a3:68:42:86:6e:18:b7:ed:06:2e:53:e8:de:c9:45:
6e:e1:96:1a:73:83:f5:62:32:20:f6:34:ae:52:fd:
ae:34:ba:7e:40:97:cf:9c:86:38:0a:24:d5:da:32:
39:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1C:F0:CE:3C:D8:42:69:D1:CD:C4:AA:64:FB:36:F4:A8:C3:1B:F8
X509v3 Authority Key Identifier:
keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:46:d4:3b:c5:ef:51:ec:5c:16:bc:d2:d4:3a:9d:c0:5a:14:
28:e6:14:6a:22:e4:7b:f8:2c:5c:a3:f6:d9:1f:d9:aa:40:da:
ba:b7:b1:e2:67:de:cb:4e:a9:7d:b8:d7:bb:29:a9:d1:5c:01:
2e:f9:aa:9b:bc:19:9e:eb:43:2d:0c:83:be:36:d0:e1:7a:2f:
40:05:74:a2:05:d2:b4:0a:6d:38:34:e2:9e:69:d9:d5:38:64:
a1:8a:8c:5e:97:ae:39:24:73:51:ce:e4:1b:91:50:2a:9c:3b:
ea:e2:4c:46:2d:bc:aa:60:54:73:47:98:1e:f0:a7:38:5b:6c:
67:c4:3c:d6:b6:29:eb:c5:0b:0b:9a:7b:f2:75:1c:30:e9:7b:
53:6a:3a:9b:67:ec:be:d0:66:2e:93:3a:28:d0:8e:b5:c7:7d:
d4:71:37:93:e2:b8:3e:6d:27:8d:0c:82:4b:95:08:b3:2a:6e:
63:db:0a:fe:ae:16:b5:d6:d0:e1:f0:77:c8:69:8e:a9:7d:03:
2f:8c:34:f4:29:8c:87:0e:92:07:70:f1:70:7d:0f:b9:ab:fa:
f2:8b:7d:be:52:5d:a1:7d:5e:1d:a7:c8:25:f2:4f:5e:47:fc:
66:76:9e:d0:bb:d2:3f:fc:d3:6c:3c:a1:98:00:1b:5a:49:e0:
49:a9:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:56:45 2026 by rpki-client