Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json)
Hash identifier: J97IwgqT7n1lNLBPMSGlxVoJsJ2c1Bjv21wQY1gAHd4=
Subject key identifier: E4:F1:2F:E9:41:46:28:08:99:DE:9E:0C:D0:06:4E:8C:A3:2A:76:4A
Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Certificate issuer: /CN=6414775fdaeec7b0d5c927083988d555727c21b5
Certificate serial: 019CAB6B8B098ABF844E56A628FC500361FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
Manifest number: 09F3
Signing time: Sun 01 Mar 2026 22:01:17 +0000
Manifest this update: Sun 01 Mar 2026 22:01:17 +0000
Manifest next update: Mon 02 Mar 2026 22:01:17 +0000
Files and hashes: 1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: uttPELX5t53ZYB8oTIkEQaDOcfyfFPzckkFjaxo3M9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:8b:09:8a:bf:84:4e:56:a6:28:fc:50:03:61:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5
Validity
Not Before: Mar 1 22:01:17 2026 GMT
Not After : Mar 2 22:01:17 2026 GMT
Subject: CN=e4f12fe94146280899de9e0cd0064e8ca32a764a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:85:18:8a:56:6b:ac:64:17:c9:e8:a4:2c:
cc:73:88:0b:d7:35:0f:12:99:64:16:b1:83:c6:7a:
d4:08:0f:a9:36:db:df:83:ad:bd:87:fe:13:03:d2:
8a:b9:58:28:12:fe:cc:a7:23:29:4e:7b:27:0d:65:
15:2a:e7:a9:11:b1:40:68:6a:62:9c:c0:23:ff:56:
7b:f9:de:9e:8c:43:bf:82:e5:00:d2:0d:61:e9:b4:
23:37:2f:61:40:d6:c6:e7:b9:79:9e:cb:20:fd:6c:
83:7a:7e:05:72:8e:56:e5:2b:c7:08:91:e0:ca:26:
70:40:4f:37:79:bf:6b:65:f2:08:07:8c:ac:9b:fa:
88:85:d5:69:38:97:b6:98:73:17:1b:de:cd:fa:47:
46:d5:04:b3:82:8a:b2:24:e9:e9:80:0a:cb:57:59:
50:24:38:4b:73:82:6e:bd:8b:cd:f4:e4:24:07:24:
8a:85:b3:07:63:33:6e:58:03:06:b8:64:12:4f:52:
e0:c5:a6:20:5c:0f:f0:2b:81:e7:0b:ce:64:7b:0a:
5d:74:7a:58:0d:25:13:2a:e5:8a:de:65:af:56:98:
fa:f8:54:03:14:bc:0d:90:75:30:00:75:6d:ce:dd:
0f:50:50:7f:d3:65:8d:5c:77:eb:62:1d:ed:04:1a:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F1:2F:E9:41:46:28:08:99:DE:9E:0C:D0:06:4E:8C:A3:2A:76:4A
X509v3 Authority Key Identifier:
keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:be:58:9a:bf:48:db:d6:1b:18:df:42:3e:9e:55:ae:ea:21:
2b:6c:41:0c:b8:d5:9f:55:63:9c:26:93:dd:7d:b4:db:f8:55:
c4:0b:51:34:2f:80:5a:70:da:f0:e8:d5:07:3d:af:68:b1:4f:
6e:d0:3a:46:78:b9:17:5c:e8:31:85:69:62:e0:ad:af:71:87:
66:4e:64:25:89:56:8b:50:2d:91:1d:bb:e7:f2:d8:38:66:72:
3c:60:50:d1:f3:ad:60:33:84:1e:36:5d:23:4d:ee:d5:5d:5d:
6b:77:05:c7:d7:df:bb:e9:35:ce:e3:5b:65:b9:c9:fe:20:a9:
64:40:9c:32:2a:52:9a:3d:75:75:1d:21:64:cc:d1:97:14:61:
05:97:49:53:8b:0d:94:db:88:c7:4e:ae:01:74:1c:d7:e9:63:
a0:a8:0e:18:7e:a5:77:31:77:e5:33:57:4a:05:c6:11:44:e4:
73:b9:96:39:a6:92:19:e4:d0:c8:6f:a3:30:ee:c6:e9:3f:c2:
47:4b:01:a4:34:d4:e9:83:62:01:62:9a:cb:ef:53:c8:61:13:
61:a9:21:39:87:06:79:a2:79:c0:82:f7:f1:78:3b:d9:1c:65:
fb:04:09:a1:9a:dd:57:c8:f7:30:34:6a:b9:58:9f:23:1a:b6:
0a:c1:4d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:35 2026 by rpki-client