
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
File: ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json)
Hash identifier: 0ev5M6dPBgFim/gkf9yMF3yrw9XWxQ1rtR3rY48kFVI=
Subject key identifier: C5:F2:A0:73:38:56:57:C8:A8:BA:0A:4E:E5:F9:FB:52:31:03:22:9F
Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
Certificate issuer: /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Certificate serial: 019CAB6B1B04D5A4432B308B947FC7DEA3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
Manifest number: 1395
Signing time: Sun 01 Mar 2026 22:00:49 +0000
Manifest this update: Sun 01 Mar 2026 22:00:49 +0000
Manifest next update: Mon 02 Mar 2026 22:00:49 +0000
Files and hashes: 1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: h/VVkdqBHAFpXpuq/il2YRiJLA8ZDDmdQgKXoHVYoNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:1b:04:d5:a4:43:2b:30:8b:94:7f:c7:de:a3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Validity
Not Before: Mar 1 22:00:49 2026 GMT
Not After : Mar 2 22:00:49 2026 GMT
Subject: CN=c5f2a073385657c8a8ba0a4ee5f9fb523103229f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:03:04:0e:90:e6:f6:d5:21:67:64:79:b2:46:
d0:ca:b9:dd:15:b9:cf:4e:34:49:03:fa:19:7c:bc:
1c:b7:b3:55:b9:a8:21:37:d7:35:f7:3c:4d:41:57:
bf:e4:a3:72:00:0b:58:70:18:7c:c2:5d:56:b4:80:
83:01:1a:60:2a:f2:0e:3f:74:c5:59:2b:8b:71:ec:
a8:02:bb:c0:d5:e4:f5:e1:d5:a0:5a:e0:69:d5:29:
fc:42:26:8c:0c:c2:f9:ab:e0:67:97:60:5d:d6:1c:
87:8f:22:f1:20:65:72:e1:fd:45:75:3f:30:f8:2f:
fb:1f:18:1e:b1:1b:56:c9:08:dd:f2:fa:29:35:7e:
fa:8d:a8:ff:9e:29:07:c2:84:59:a8:32:5f:7a:ec:
19:b9:32:83:1b:2f:e1:50:9f:99:ba:f4:e8:a1:be:
07:29:13:87:2e:c0:2b:84:36:70:79:08:96:eb:eb:
97:04:37:08:cf:52:97:60:81:2b:5f:68:ad:a7:93:
25:8c:27:04:af:de:57:3f:99:4d:51:b0:fe:e4:0b:
f9:13:3e:28:5b:c3:49:0d:74:25:0f:8e:03:b3:41:
ca:6a:ec:f7:eb:d4:34:b0:30:61:80:39:01:13:fe:
ec:ed:e2:05:54:2a:8d:c8:a3:35:60:c7:d5:b8:2d:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F2:A0:73:38:56:57:C8:A8:BA:0A:4E:E5:F9:FB:52:31:03:22:9F
X509v3 Authority Key Identifier:
keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ad:a0:8c:d9:54:99:1f:f5:83:f4:8d:4d:64:31:e5:4d:ff:
35:19:1a:ca:78:8c:11:51:f3:5a:d5:2a:fb:5a:5e:48:6c:18:
45:f5:17:29:c3:d4:60:1d:47:4b:86:d7:81:0c:b3:9a:d8:60:
68:97:d9:e3:bf:68:ce:ad:fd:a0:af:84:f2:68:21:90:bc:fe:
b7:48:89:f2:e5:7a:46:65:31:f7:cf:aa:a4:1e:5f:2b:ec:67:
0d:fa:c6:55:fc:22:33:c0:6e:bb:d4:a7:56:69:03:c0:70:03:
6a:42:88:f5:1d:91:47:8c:2f:72:b2:69:60:59:05:5e:98:cd:
f9:69:2a:8e:0c:4f:19:ea:10:84:55:48:ab:33:1b:b1:93:a3:
c5:8a:a0:f3:b4:9b:16:3c:98:45:03:29:9f:28:c7:82:6b:86:
49:f6:93:44:1a:54:cd:76:91:b6:34:cf:da:1b:ab:de:a5:61:
46:e4:5b:6d:57:22:34:14:27:a2:e4:c2:ae:39:67:24:a9:63:
e6:bc:2d:70:08:4f:64:9f:39:ae:36:6b:e9:df:1d:b6:cd:1e:
47:65:2a:53:ff:33:f5:97:c1:70:0c:25:f2:61:b9:42:f4:c1:
30:be:46:8b:50:43:fb:49:e9:71:6f:0c:ab:6b:75:29:68:37:
3b:d3:d0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:39 2026 by rpki-client