Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json)
Hash identifier: NHSpcJlL2Yj2L/1dwAM7PdL4XDjAV83uadeBT4F4jsQ=
Subject key identifier: 5A:96:8B:BF:77:84:56:0E:09:B8:90:D4:6F:8F:44:4F:C4:B9:A4:6C
Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Certificate serial: 019CAA21D0B49A5A37701E2B39AA56EBF7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
Manifest number: 131A
Signing time: Sun 01 Mar 2026 16:01:08 +0000
Manifest this update: Sun 01 Mar 2026 16:01:08 +0000
Manifest next update: Mon 02 Mar 2026 16:01:08 +0000
Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: kjag8Aox055wRx5Az1AYfR43O3IuebZaaWx87c1foBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:d0:b4:9a:5a:37:70:1e:2b:39:aa:56:eb:f7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Validity
Not Before: Mar 1 16:01:08 2026 GMT
Not After : Mar 2 16:01:08 2026 GMT
Subject: CN=5a968bbf7784560e09b890d46f8f444fc4b9a46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:68:51:f1:16:26:f4:85:12:62:e5:ec:ea:
1c:6b:7d:d7:8b:0a:ba:8e:2b:d3:e8:c0:6e:c1:5e:
30:31:5f:4e:4a:16:b1:72:4b:21:2d:37:01:f2:83:
7c:af:0e:1f:f6:08:34:3d:d8:4a:da:a4:33:a2:6b:
3f:67:52:4c:c2:e5:f6:65:bf:7c:0e:0e:99:53:b1:
40:44:20:15:94:4c:e3:06:49:b4:d2:8d:e5:f6:b3:
67:95:68:8e:52:c3:98:19:f6:01:0c:b8:32:cd:0b:
c6:c8:e9:f6:69:d5:8c:00:44:54:20:63:3b:7e:cd:
49:02:dc:4e:d5:39:75:5a:22:9c:82:90:67:b6:95:
b1:5c:e6:02:66:ec:ec:1c:d7:ea:f6:25:3e:27:9c:
b4:13:a5:49:af:57:17:72:1d:b0:83:49:70:bc:34:
cd:2c:ea:f3:4a:50:a9:db:2f:b1:5d:cc:17:33:0b:
01:18:53:28:47:59:ef:4c:fe:53:90:20:60:ab:19:
fb:5c:04:26:64:92:eb:52:d0:42:eb:29:66:24:ce:
ef:dd:af:9a:b6:af:6a:ba:4f:5c:a1:aa:6c:c3:75:
22:14:2d:c6:ad:67:bc:47:1f:3f:dd:82:84:ba:b8:
b9:0a:ef:a1:99:85:4b:68:da:10:c4:3e:0a:1b:ff:
23:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:96:8B:BF:77:84:56:0E:09:B8:90:D4:6F:8F:44:4F:C4:B9:A4:6C
X509v3 Authority Key Identifier:
keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:18:e7:0a:7c:1e:d5:04:2c:9c:97:d2:80:02:66:c0:92:2d:
49:06:3a:76:59:15:d6:b6:f9:de:ed:2c:83:f1:f0:b4:fd:cf:
d5:97:ae:81:1f:54:76:cf:a3:dd:96:df:6e:f5:c6:34:e1:b2:
41:4a:0e:4a:94:23:a9:b5:cd:bb:80:59:ae:b5:49:ce:4c:f8:
59:2d:d5:56:05:c5:78:4f:ae:e2:b1:ca:63:70:52:1f:65:77:
16:da:b3:a0:eb:ce:cb:6f:bb:db:da:24:89:99:57:b3:f7:af:
ed:33:e7:cb:d1:2e:5b:6f:5c:31:a9:24:3f:ac:f6:0e:48:2a:
42:dc:50:8c:7b:0e:5e:6a:52:60:09:01:9e:f1:59:84:d0:87:
57:e6:c7:0e:0a:db:e0:64:54:a1:26:1f:36:aa:56:89:05:ad:
bb:20:e7:1d:a8:70:00:c2:1b:83:4e:65:39:66:24:a2:62:cb:
3d:8a:d1:c5:71:91:a7:6b:ba:56:56:e7:b2:35:a4:17:60:6c:
53:13:64:b8:ad:b7:13:f7:79:1f:95:a1:57:9b:a3:a3:44:13:
aa:fa:ba:2f:7f:c7:7d:1d:4e:db:d7:f7:47:be:9a:88:1d:0a:
93:3f:73:a3:95:8b:f9:e8:dd:a3:da:b2:6c:87:d9:6c:cf:ca:
fd:93:77:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:18 2026 by rpki-client