Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier: BC+u9X49fdnQT90kmiJGQz7Kx/ELkFIbrJC0FaXn9JE=
Subject key identifier: 40:2B:3E:D3:84:C7:E5:3F:E1:34:F6:71:65:F6:B1:5D:94:47:E7:97
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial: 019CAB6B74ED8DC46A6EF8D58B1CD44C9ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number: 0E41
Signing time: Sun 01 Mar 2026 22:01:12 +0000
Manifest this update: Sun 01 Mar 2026 22:01:12 +0000
Manifest next update: Mon 02 Mar 2026 22:01:12 +0000
Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: HSvpRcBo5OUAL3SVt9E25sgnisj5/NTeOnMyi2vUctc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:74:ed:8d:c4:6a:6e:f8:d5:8b:1c:d4:4c:9e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Validity
Not Before: Mar 1 22:01:12 2026 GMT
Not After : Mar 2 22:01:12 2026 GMT
Subject: CN=402b3ed384c7e53fe134f67165f6b15d9447e797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:5d:cf:ee:88:06:81:b0:19:cb:4e:04:d9:
9a:db:ba:32:81:66:1e:3b:19:5c:d6:5e:08:dd:dc:
60:eb:28:31:45:58:de:42:7e:19:38:fc:1b:23:22:
34:7a:93:14:ee:dd:74:33:e3:b9:57:19:7f:bb:be:
26:39:33:c8:29:62:13:41:cc:9e:c4:60:42:be:88:
01:71:cd:cc:13:d1:5b:50:cc:7a:22:76:35:87:e2:
19:63:34:42:ab:44:99:00:04:04:cd:e3:df:62:45:
88:19:bc:e7:2f:2e:ee:6a:c8:da:d4:ad:0f:77:7f:
80:7c:a4:59:68:8e:ee:b3:3d:26:4c:33:1e:82:1e:
3a:6b:37:f2:81:4a:40:db:45:c4:17:75:69:c0:1a:
cd:02:5c:78:b8:8c:95:07:23:0f:c5:8b:ea:8c:8e:
df:df:9d:67:e1:56:d6:b1:b2:c3:01:85:d6:ed:3c:
0e:46:f6:f4:b6:46:4f:88:c5:de:bf:2d:b3:a0:1f:
37:1d:9d:ad:30:5b:f9:a5:5a:6a:80:6d:4f:1b:52:
5c:5b:bf:bf:25:a4:34:32:79:c5:e8:cf:8d:71:41:
f1:47:13:79:c1:94:ee:82:30:fb:b1:86:73:c8:b7:
7d:b9:5e:ef:c1:0c:17:b4:88:be:2c:64:34:28:bb:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2B:3E:D3:84:C7:E5:3F:E1:34:F6:71:65:F6:B1:5D:94:47:E7:97
X509v3 Authority Key Identifier:
keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f9:7d:aa:fa:be:2c:13:7d:1c:d9:87:9e:c9:c1:e5:32:d5:
42:e3:bc:5a:87:42:36:54:1f:e0:2a:0f:cc:14:9d:77:3f:8f:
cd:20:c2:72:64:65:dd:5e:f4:13:9f:1f:02:66:1d:f1:76:e5:
d7:63:53:82:5e:fe:2e:27:65:b8:49:cd:b8:4d:bb:d9:e8:8f:
78:a1:43:cb:bc:e4:f2:a3:c7:02:24:e3:81:bb:88:84:aa:c5:
1b:ad:9b:3a:b4:05:22:b7:ff:b5:25:b2:1a:3c:88:19:ab:c0:
cc:ad:46:ef:65:8f:cb:fd:f4:60:e7:d1:35:36:7f:c0:e5:26:
10:26:5e:07:5b:8a:b8:49:c8:a8:ce:be:4c:71:bc:80:f4:45:
86:8c:76:a0:bb:11:51:0e:45:d0:09:59:93:35:ad:9d:23:11:
4f:0f:fd:f2:62:bf:88:bd:47:38:43:f7:db:3e:ef:09:8c:b6:
e6:e8:5f:93:ba:44:f1:7b:ea:61:25:e0:00:24:df:94:bf:b2:
28:58:60:72:08:86:bc:f8:f7:97:46:65:88:ee:db:e5:1c:4f:
d4:fc:97:25:34:c9:9a:e6:79:89:78:63:0a:c5:d2:ff:5d:da:
0e:ea:76:c9:51:4d:9c:4b:f6:39:54:92:05:ff:0c:f6:57:2e:
f4:10:e8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:46 2026 by rpki-client