Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
File: Zur1u0vnZQbp7F5pTYtYUKmOciM.mft (raw, json)
Hash identifier: iOkBLIQ6lpNEACjxp4gN4FrS1lmSUHYlNr0BtI28b8Q=
Subject key identifier: BE:DF:6B:4D:59:CC:39:70:81:65:B5:C4:F8:57:A1:85:58:25:62:3C
Authority key identifier: 66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
Certificate issuer: /CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Certificate serial: 019CAEA3CFEE6E56BF253C5C330F949C6019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
Manifest number: 0EB4
Signing time: Mon 02 Mar 2026 13:01:36 +0000
Manifest this update: Mon 02 Mar 2026 13:01:36 +0000
Manifest next update: Tue 03 Mar 2026 13:01:36 +0000
Files and hashes: 1: Zur1u0vnZQbp7F5pTYtYUKmOciM.crl (hash: EEwF8tngVKliB2g9iSMpKAzBbRdvpe8HbK7+pfqvm38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:cf:ee:6e:56:bf:25:3c:5c:33:0f:94:9c:60:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Validity
Not Before: Mar 2 13:01:36 2026 GMT
Not After : Mar 3 13:01:36 2026 GMT
Subject: CN=bedf6b4d59cc39708165b5c4f857a1855825623c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:23:b2:c5:4d:f4:4a:d2:a9:e6:08:c4:5e:
16:78:df:9b:ef:26:90:67:88:4e:f5:56:b6:2a:62:
f1:c4:45:b4:3c:9f:22:7d:84:44:aa:85:e5:de:f9:
3a:e0:ec:49:a4:ab:dd:c1:af:e5:05:77:b3:9d:8d:
71:d8:36:b8:4d:fe:ad:66:13:a7:3d:5c:d5:b1:7e:
af:b2:b6:65:f7:9c:46:d5:99:93:94:36:21:b0:21:
6a:7f:b6:69:17:35:b2:fc:fd:88:8f:0b:6b:02:f2:
5c:81:06:dc:0f:6e:25:95:f1:0d:16:09:ce:73:a4:
ab:25:11:74:10:8f:d4:e6:89:57:d9:58:f8:68:cc:
42:51:98:49:6e:12:24:c3:c0:56:13:7e:2e:ef:fb:
3d:f3:51:25:35:49:b6:a6:d4:9b:35:01:f2:1f:47:
43:c0:d8:72:cf:db:6c:93:c0:30:5e:13:a2:4a:5f:
9e:3d:00:7b:18:6c:d3:b2:9f:77:30:89:29:f2:ab:
be:9d:9f:bb:dc:89:4a:b9:74:bd:ba:05:23:88:37:
f1:98:01:ab:6e:43:80:06:f7:fe:86:e0:1e:43:0c:
be:fc:af:1f:0f:81:cc:af:5e:ce:cb:52:6d:6e:9d:
29:2b:69:18:36:d1:34:f4:7f:00:42:6b:c0:cb:6c:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DF:6B:4D:59:CC:39:70:81:65:B5:C4:F8:57:A1:85:58:25:62:3C
X509v3 Authority Key Identifier:
keyid:66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:fb:7f:64:12:5d:2a:74:c0:e3:ac:a4:3c:d0:06:9b:41:28:
18:f3:d9:8d:ae:08:9d:c9:11:18:5f:c6:61:5e:d2:f4:59:7c:
48:41:56:b3:e0:f7:9f:8b:12:49:2f:92:1e:5d:7a:70:10:c5:
ca:05:46:fc:cd:5d:8c:e3:24:3d:ce:5a:2c:f8:b7:9c:2a:8b:
b9:39:dc:3c:05:a6:6e:5d:1f:1d:9e:c5:38:dc:74:40:07:95:
7a:f9:d4:cb:49:ca:0e:81:aa:cb:14:47:da:7e:c8:9d:68:14:
7d:0d:88:af:15:00:36:0d:62:39:3e:ca:dc:3a:7e:0b:79:cc:
30:9a:10:23:36:b0:2c:e3:06:ef:5e:49:db:d3:3c:15:b5:7e:
f6:e1:e9:02:29:7c:6e:c1:90:fd:cc:d0:11:96:5b:2b:69:d2:
61:bc:02:e2:fc:66:59:0a:66:bc:68:08:f5:c4:71:c5:90:82:
e5:d1:1d:07:bd:4a:97:39:46:69:6c:e8:70:86:3e:05:fb:c1:
84:0b:75:d4:4b:53:a2:eb:f8:64:b4:68:54:3b:ba:9f:be:ec:
77:34:c6:1a:2d:16:36:e8:8b:ea:44:4e:af:ed:a2:71:0a:a9:
8d:68:6f:7c:d5:1a:3e:77:81:d7:52:f3:ba:4d:2b:82:e6:59:
79:66:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:00 2026 by rpki-client