Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File: z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier: BQ2FXifUbd771vjgbYCN7L2BItiyqygzEmtZQyex9vo=
Subject key identifier: 7F:46:5D:CC:52:8B:B9:8C:F8:78:EE:CD:03:A9:F4:83:63:71:D7:90
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer: /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial: 019CAB6B1A2EB786AB4456D95A744C024F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number: 13F7
Signing time: Sun 01 Mar 2026 22:00:48 +0000
Manifest this update: Sun 01 Mar 2026 22:00:48 +0000
Manifest next update: Mon 02 Mar 2026 22:00:48 +0000
Files and hashes: 1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: /cG03s0oj4aMZX7sEYMbWWDNm1mVpS+MaV45Eq+ChIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:1a:2e:b7:86:ab:44:56:d9:5a:74:4c:02:4f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Validity
Not Before: Mar 1 22:00:48 2026 GMT
Not After : Mar 2 22:00:48 2026 GMT
Subject: CN=7f465dcc528bb98cf878eecd03a9f4836371d790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:df:9c:e3:86:e6:6f:d4:7f:fd:11:33:ac:
6d:71:b7:3b:22:87:09:e0:1c:e3:ba:93:cf:d4:cd:
4d:5f:00:2b:32:7c:f8:84:b9:9d:d6:a2:4a:7e:5a:
07:b0:dc:a1:9a:a5:6a:64:7a:12:6d:ef:1d:2a:e0:
ab:a3:2c:12:b7:13:d8:6a:0d:a6:b0:1b:89:31:fb:
97:cf:0a:cd:6d:3e:98:ef:02:9f:62:13:17:6c:7a:
c3:61:6c:0d:b7:6a:32:c1:ad:80:c5:90:6e:bf:66:
18:40:eb:91:9c:fc:f3:98:53:a4:54:63:9d:03:38:
e6:3f:36:47:d3:f6:1e:60:b3:fa:07:5d:55:f8:fa:
2c:67:4e:30:c5:4e:b9:3d:d2:ec:92:f6:58:b3:61:
57:24:5d:ba:e6:5d:e0:d6:15:3a:a3:ba:0b:00:46:
32:ac:b0:56:fd:77:b0:6f:d3:84:46:28:1b:73:bd:
2d:48:7c:33:28:c1:93:f3:00:af:35:d7:a5:ca:a0:
41:f8:d2:4b:03:8a:6d:29:c9:82:58:fa:46:87:b3:
3e:51:9f:a5:84:eb:33:19:fc:36:46:7c:0e:b5:ef:
61:fe:33:0b:d2:4d:ca:37:a8:60:fc:96:02:97:76:
af:52:a0:06:f7:7b:12:9c:8b:5a:05:3a:bb:b1:d2:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:46:5D:CC:52:8B:B9:8C:F8:78:EE:CD:03:A9:F4:83:63:71:D7:90
X509v3 Authority Key Identifier:
keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:46:41:18:91:80:30:c9:b8:65:b7:1f:10:e7:e6:31:d5:4d:
d2:ea:fb:93:27:f4:62:67:b4:95:cc:97:07:ba:d5:04:b6:f4:
94:bd:66:b1:ad:34:ef:1d:40:13:55:71:b0:eb:d0:8b:61:08:
cd:c5:0f:4f:32:04:0f:c7:45:a3:e0:c0:c8:c3:4e:ef:c9:38:
a1:e7:ee:f8:db:a1:6d:56:58:9c:76:1f:3f:df:de:1e:b1:c0:
6d:41:dd:f0:31:52:34:45:21:f7:dd:37:c0:3f:2b:84:a3:54:
f5:41:30:71:4b:94:d1:56:50:61:86:b4:fd:08:48:25:e5:94:
ff:66:20:c6:ef:fb:9d:cb:ed:6c:d1:a9:8c:b6:b8:8e:2b:e7:
49:93:f9:5c:1d:71:da:86:a4:4d:b0:84:43:0c:aa:0e:79:50:
7d:03:fb:53:d5:85:7a:35:9f:96:6d:13:bd:11:10:44:51:c2:
99:bc:be:05:dd:b0:0b:f1:3d:e8:2a:dd:02:9e:d1:11:32:6c:
32:ca:da:88:0c:26:f6:c6:29:9a:01:2f:da:cb:51:3f:24:84:
a5:ab:32:fe:2f:f1:3e:82:b9:6d:d8:79:71:fa:4e:06:9f:de:
e3:b7:5e:95:97:d2:34:4d:bc:66:ff:23:8c:92:4c:65:5c:1b:
b3:90:df:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:33 2026 by rpki-client