Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
File: ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json)
Hash identifier: 31AZ26Sx96wPFY9xfWsLhBUGgXlHzYIeHiPdfZ/15/Y=
Subject key identifier: 7A:CB:91:93:58:8F:EE:73:65:F4:02:01:8D:A2:20:C1:25:E5:CB:4A
Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
Certificate issuer: /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Certificate serial: 019D9998E2DBA701CA7C393F63BCF4E85777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
Manifest number: 0F0E
Signing time: Fri 17 Apr 2026 04:00:26 +0000
Manifest this update: Fri 17 Apr 2026 04:00:26 +0000
Manifest next update: Sat 18 Apr 2026 04:00:26 +0000
Files and hashes: 1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: hV+QW5Qow08HqJf/p3uTYLbhabMPQ197O1OostiobrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:e2:db:a7:01:ca:7c:39:3f:63:bc:f4:e8:57:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Validity
Not Before: Apr 17 04:00:26 2026 GMT
Not After : Apr 18 04:00:26 2026 GMT
Subject: CN=7acb9193588fee7365f402018da220c125e5cb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:70:ce:af:af:d4:32:02:70:51:e7:70:8d:
3a:5b:b4:5f:64:93:e3:1c:83:c5:e8:03:22:ae:85:
28:43:25:6a:91:85:26:71:d5:1f:2f:07:fa:92:8f:
d6:12:a7:26:ba:a0:8f:e6:c3:62:98:40:7c:3a:24:
dd:1e:49:0b:f5:75:49:88:2f:b7:76:fa:ad:89:b5:
04:c1:ba:17:5f:bd:9e:59:ab:f1:2c:47:07:cb:c1:
bf:3a:0f:dc:5a:c3:8d:fb:ce:ec:60:db:d8:6c:ff:
e0:7b:c4:88:9f:99:c4:1a:c1:3e:0f:16:75:f8:9d:
5a:66:6f:3f:ca:75:88:a0:2b:96:4a:aa:9f:13:6f:
c6:7d:e9:a9:f1:5d:03:11:0d:83:6a:f1:07:03:d4:
15:a9:c0:92:c7:90:bf:bc:6c:db:45:95:d4:46:97:
31:9b:84:77:25:89:68:74:9b:a1:25:39:58:14:45:
85:ab:7c:07:26:7d:05:0f:ba:83:af:74:f1:1a:53:
3d:3e:74:f5:d3:8a:ff:ca:a4:fe:e8:2d:6c:a4:36:
35:77:9d:20:7e:60:c4:97:ee:89:d5:ef:ad:92:e2:
91:ff:14:6a:0d:2f:06:5b:da:08:98:8a:45:96:5e:
b5:57:03:ad:d9:55:6a:39:9f:4b:16:72:56:bd:c7:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CB:91:93:58:8F:EE:73:65:F4:02:01:8D:A2:20:C1:25:E5:CB:4A
X509v3 Authority Key Identifier:
keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ab:a4:ff:29:2f:36:89:05:01:46:aa:da:77:78:18:c3:4f:
73:75:05:eb:d8:56:03:3b:92:57:b0:f8:fc:59:f0:50:f0:8a:
a7:1f:5c:89:78:63:07:e2:56:5a:7e:3d:b6:1c:5b:28:9c:a6:
7f:5d:fa:4b:7b:86:78:b1:80:9f:e6:0d:e5:71:39:e3:61:f2:
95:d1:c2:9f:01:6f:fb:6d:57:e1:f4:e1:31:a0:34:32:74:ad:
fa:d6:15:5d:b4:2b:04:f9:2f:4f:cd:d4:aa:83:e9:6a:01:5a:
28:eb:ae:67:2b:c4:ee:bb:05:af:aa:b7:44:81:9c:ed:4d:72:
91:35:27:0e:59:9e:c4:36:f2:b9:09:1e:8e:09:5b:d2:91:74:
ac:96:70:e2:c2:c3:27:f3:af:a2:1e:8b:c3:61:89:25:b3:b4:
6f:2d:97:a7:a4:ee:6d:5c:60:47:a0:93:cb:bb:d2:bf:6c:56:
11:a9:ce:a4:23:e2:95:31:55:f8:09:16:ad:4e:3b:29:ef:4a:
4e:88:1e:d2:cb:ba:80:03:47:b4:b7:9d:b6:23:8d:cc:5f:4c:
e3:a8:8b:e6:c3:d0:45:e8:11:73:c9:c1:c2:6c:ba:9c:8f:4b:
d6:80:ae:57:52:1d:82:d6:a0:02:bd:c6:b4:e3:9e:cd:af:6f:
4e:aa:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:27 2026 by rpki-client