Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: FKRgdHCrYYzSCiMDAiJkxCaRD6wlIJrXHNhyIO+AxDA=
Subject key identifier: BD:BA:86:A3:D4:06:56:73:D8:A9:C8:29:E0:44:9E:1E:91:E6:48:DB
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 019CACB525250A8E2A6DAC13DC5537432F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0EB6
Signing time: Mon 02 Mar 2026 04:01:18 +0000
Manifest this update: Mon 02 Mar 2026 04:01:18 +0000
Manifest next update: Tue 03 Mar 2026 04:01:18 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: Dbwe6aMy3ShO6Mos7M4m+q2kFwXodWniDk3zMqoLmjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:25:25:0a:8e:2a:6d:ac:13:dc:55:37:43:2f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: Mar 2 04:01:18 2026 GMT
Not After : Mar 3 04:01:18 2026 GMT
Subject: CN=bdba86a3d4065673d8a9c829e0449e1e91e648db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:a0:aa:68:25:90:11:36:2c:e1:1d:3d:a6:
fa:df:f2:8a:4a:54:43:39:38:d9:82:07:e4:2b:61:
ea:d1:7b:81:45:fb:e0:3c:13:da:cc:ec:01:03:05:
3c:87:7a:49:2a:e8:bc:42:70:4d:53:10:8d:85:63:
3a:2a:78:c7:43:5f:6a:9b:db:f0:34:60:69:58:30:
f8:04:09:99:77:23:e1:41:ef:10:e0:f9:f5:7c:2d:
38:67:39:1f:fd:25:31:49:df:b9:7b:3d:95:6e:c8:
48:ba:90:80:b1:ab:91:cd:b7:fe:93:ec:48:f3:b4:
fa:d8:fa:eb:04:c9:1a:99:c9:04:93:08:b7:32:f0:
f8:be:4b:61:9b:46:3e:49:c2:91:e4:74:0d:86:e7:
98:fc:15:a4:da:ac:ff:05:0b:ad:f4:5e:34:65:11:
45:17:e0:d5:29:b9:b1:bd:a4:65:b0:77:34:a5:be:
9f:40:f0:d9:12:50:1d:1b:9c:b7:9c:d6:89:72:1f:
33:1a:70:7c:22:33:17:43:97:3d:f3:88:e4:49:64:
28:bc:37:9b:82:ef:73:6b:bb:2b:b4:da:ef:da:6d:
9f:2f:a4:21:c7:ab:79:eb:4d:71:42:54:1d:b0:e7:
98:4e:0b:0e:ae:81:e6:be:25:2c:0d:9a:e5:35:9a:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BA:86:A3:D4:06:56:73:D8:A9:C8:29:E0:44:9E:1E:91:E6:48:DB
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:63:cc:26:58:57:05:6f:94:ad:49:08:9b:dc:ee:eb:ba:86:
db:cd:50:7b:a3:71:53:02:03:c8:1a:89:8f:30:1a:8b:4c:23:
80:68:67:cb:00:a6:d2:6b:ec:51:24:5d:4d:38:06:0f:86:b3:
94:b7:22:e1:06:f0:16:77:63:cc:24:c3:fc:bf:ea:1a:40:e7:
12:1a:c0:a3:02:37:2b:eb:1f:51:2d:f1:63:90:66:d6:ed:4f:
ae:41:70:6c:24:a3:21:8d:f2:cc:c8:81:50:bc:c2:70:c4:b4:
bb:fc:01:34:0d:3d:11:d7:54:37:78:33:18:b6:4b:05:f8:db:
32:2b:e0:7f:05:33:a5:e8:82:c7:9f:9e:46:4d:a9:1e:dc:e6:
42:35:a1:b2:4f:7c:c2:d8:29:da:83:4a:55:ca:ca:fe:c9:ba:
62:44:de:03:43:77:de:8d:8b:e8:26:4a:75:9c:e7:db:a7:f3:
52:49:61:ec:c8:6b:14:59:02:4b:7d:5c:bf:7e:d7:2d:fa:45:
bd:9f:ed:bc:9d:80:22:17:73:28:13:cf:93:44:b1:82:72:bf:
7e:db:e6:45:3c:78:fc:bd:9a:54:bb:3e:48:c8:17:8e:0b:32:
2c:46:b9:39:ad:b9:25:fe:6e:20:aa:c0:00:e3:cb:76:23:83:
f7:77:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:53 2026 by rpki-client