Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json)
Hash identifier: 3CdH3+73PAEEDYMQlvvz+6c662sVYoN6Xv4/27ki6kM=
Subject key identifier: E1:FB:9A:CC:52:38:71:C8:C8:CB:C7:1B:A9:3D:16:9D:00:C6:A6:FC
Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851
Certificate serial: 019CAB3409363F6559751AE85D390DF338CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 21:00:40 +0000
Manifest this update: Sun 01 Mar 2026 21:00:40 +0000
Manifest next update: Mon 02 Mar 2026 21:00:40 +0000
Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: TaMvehKDoxeruxMatwWBcHWwlHMpaRTvXcQyHrMvjmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:09:36:3f:65:59:75:1a:e8:5d:39:0d:f3:38:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851
Validity
Not Before: Mar 1 21:00:40 2026 GMT
Not After : Mar 2 21:00:40 2026 GMT
Subject: CN=e1fb9acc523871c8c8cbc71ba93d169d00c6a6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:38:4e:0d:fb:9f:3a:34:da:0f:89:dc:d1:
5e:e2:f0:e6:9e:a0:a6:3b:ed:43:d0:d9:37:e3:3d:
3e:27:22:6c:b5:4e:8a:32:5c:a1:4c:83:4f:b8:39:
cb:09:35:3a:33:00:2f:8e:8c:90:f2:ab:bb:8d:07:
7a:ec:b4:90:43:0a:92:20:13:a6:2d:f9:3d:6d:62:
a3:66:db:17:31:d2:d4:03:a1:74:18:4e:19:09:bb:
9c:b3:d2:77:a3:ed:c6:7d:45:d2:65:14:7d:be:7f:
a1:a4:9d:9c:3c:41:8d:53:3e:50:a1:96:fe:f2:9f:
9d:03:c6:0a:8f:1b:39:0e:bb:ad:a9:09:40:8a:51:
c0:be:64:c9:0c:53:4f:f8:4b:5b:4d:d1:25:de:12:
b0:4b:95:04:6b:26:f0:f2:96:4d:97:e7:8c:3d:be:
f7:79:7f:c7:c3:cb:a9:32:6d:39:65:70:e3:36:6d:
e8:dd:cc:0c:fe:81:92:6d:d6:08:15:77:c8:07:9e:
45:b3:8f:65:cc:51:e2:2a:3e:d5:16:04:b8:6e:ec:
b3:00:c7:bf:2d:95:b8:63:53:41:96:0d:67:c7:ea:
43:5d:8d:33:38:e4:25:d6:f9:08:04:87:87:66:ce:
56:d5:47:22:2d:7f:fc:32:04:07:77:01:0e:64:73:
c9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FB:9A:CC:52:38:71:C8:C8:CB:C7:1B:A9:3D:16:9D:00:C6:A6:FC
X509v3 Authority Key Identifier:
keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:96:f0:b1:c0:75:7b:e3:ca:da:db:e3:cc:13:65:21:95:19:
7c:42:6b:6e:a0:0d:b1:46:8d:ae:d2:0e:9e:6a:b6:d2:1a:6e:
ad:e0:6e:97:a0:7c:a7:23:a5:b0:b6:73:49:97:1b:1e:d5:46:
08:b8:36:ea:79:c7:18:6f:b6:a9:d0:5b:5f:34:d8:89:e2:a2:
6e:5a:ee:09:66:2d:e0:f6:6e:b4:0e:ff:ab:61:2e:dc:7f:a5:
ae:d5:e5:d5:88:ae:3f:2f:0c:ee:ee:17:59:82:1b:6c:84:b8:
d7:c9:d7:f9:66:1e:3a:95:f6:ea:76:fb:b3:90:a4:79:4f:9c:
a0:9f:2b:a2:3e:d4:21:ed:b1:40:c8:91:05:e1:56:f8:06:df:
9c:0c:c7:1a:46:a6:14:5e:60:ed:8e:7e:61:18:d5:3a:4d:cb:
93:72:e3:2a:c4:23:9d:95:90:8f:7b:42:96:0d:df:18:2a:8a:
5e:2a:02:42:df:e3:db:6c:ae:96:0e:b2:50:04:14:cf:56:9a:
d1:51:00:b2:9e:8f:53:d9:a8:8e:37:ad:cf:f4:f1:d8:d5:1f:
21:1e:be:07:18:cd:df:db:25:19:24:d8:76:b6:47:bf:b1:21:
3d:d8:4d:07:41:10:0e:17:61:ba:4c:88:36:f2:65:53:b2:e4:
b1:fa:d3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:53 2026 by rpki-client