Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
File: cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft (raw, json)
Hash identifier: pL80fmgZ82GftD+z7kQuybzS96EYoeKHsrEU8WqkbiI=
Subject key identifier: DE:07:24:83:9D:78:7A:9E:7A:17:21:DC:28:4C:AC:DA:20:CF:35:11
Authority key identifier: 71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
Certificate issuer: /CN=7192f3560c15b94d1ef497726845d786786bc762
Certificate serial: 019CAB6AFEF384055FA99A5699E2F9033D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
Manifest number: 0F7A
Signing time: Sun 01 Mar 2026 22:00:41 +0000
Manifest this update: Sun 01 Mar 2026 22:00:41 +0000
Manifest next update: Mon 02 Mar 2026 22:00:41 +0000
Files and hashes: 1: cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl (hash: pbigfdwnn122vqGCV7idQVCsN2Q/I9ie2fdxlXaaPdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:fe:f3:84:05:5f:a9:9a:56:99:e2:f9:03:3d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f3560c15b94d1ef497726845d786786bc762
Validity
Not Before: Mar 1 22:00:41 2026 GMT
Not After : Mar 2 22:00:41 2026 GMT
Subject: CN=de0724839d787a9e7a1721dc284cacda20cf3511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:ec:7e:91:10:24:1a:59:e5:2f:4f:84:e1:
61:1c:62:33:92:d2:ae:08:db:60:25:6f:b4:57:f6:
fd:00:0e:e1:5f:37:c2:4e:22:59:1b:3a:a8:4d:cd:
14:75:d6:cf:03:cf:bd:2b:6c:e3:61:82:f6:2d:c8:
42:5e:2c:bb:ed:4f:1b:c9:8a:6e:30:9b:1a:8a:c9:
b5:f9:e6:61:3b:24:c5:64:4e:40:9d:29:f0:db:d2:
7f:83:19:84:ef:85:6b:24:89:d6:e4:9e:3a:98:7e:
a4:95:e6:36:ab:93:9c:cf:43:77:7f:15:ed:f6:8b:
7b:c4:9b:7e:50:65:f6:1a:ea:0a:5c:02:59:d5:79:
52:84:8b:2b:08:43:d4:4e:5d:5a:24:1e:62:52:5a:
a4:e5:4a:81:8b:4b:99:f1:4c:80:d3:00:10:00:d9:
89:0b:3d:a4:8b:a3:8f:42:b9:ba:c8:09:91:12:92:
01:6c:fa:de:f6:ec:00:f2:70:45:72:e9:93:c0:d5:
f6:7c:65:4e:e1:23:0c:c2:71:5a:c9:73:23:88:46:
17:e2:e7:fd:ad:11:15:5d:73:72:7d:ad:33:d7:7d:
94:54:f5:ad:79:96:2c:ec:31:35:d0:d5:82:22:d6:
fc:95:54:34:21:d8:eb:c1:1a:f2:8a:37:a7:d3:33:
c8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:07:24:83:9D:78:7A:9E:7A:17:21:DC:28:4C:AC:DA:20:CF:35:11
X509v3 Authority Key Identifier:
keyid:71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3c:00:17:45:1e:8c:5e:32:e1:7b:93:d2:ae:f0:75:cb:9a:
e8:59:6f:9b:6f:33:a6:3a:85:a0:3f:04:bb:ce:ba:67:60:d9:
08:73:f7:17:ab:db:a6:0b:cd:a9:e0:d1:4c:38:2c:37:12:06:
ad:87:fb:e0:0c:51:45:a0:59:9d:ee:a1:57:7f:ce:18:13:94:
41:83:3b:3b:45:e4:36:07:84:29:a4:15:71:76:8a:a3:44:72:
b2:04:0f:e5:0e:c7:d6:48:3e:fe:0b:a1:89:1f:2b:d2:b3:97:
d7:3c:e7:73:19:32:f7:c6:bd:64:2f:44:44:c8:8a:3e:24:ec:
fd:90:de:88:d7:83:25:f1:7f:e8:1f:b9:ae:8a:73:1d:15:e4:
a0:3f:8f:fe:d7:a1:69:28:10:80:89:6e:35:13:cd:ef:2a:e8:
92:bb:1b:8c:2e:e7:c3:ee:00:ef:33:d8:c9:d8:41:25:7f:33:
40:e3:62:a6:6f:7f:92:c0:4b:12:3e:a6:96:26:f4:8d:b1:ab:
0e:9a:63:fd:7f:86:bc:a9:db:1e:85:0c:7f:11:24:11:be:23:
e5:c4:85:0d:9f:50:3a:bd:e6:f7:6f:4e:1e:dd:9f:fa:bc:b3:
e5:8b:ac:3b:af:31:b4:98:ec:2a:50:65:5d:08:05:d7:65:3e:
3b:6c:e5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:55 2026 by rpki-client