Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
File: zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json)
Hash identifier: 1hgxx7EFlgeKZ8pR4NGe2rQZEc3wZbR4O0ut+bnaukM=
Subject key identifier: 6E:2B:D8:96:44:93:7C:C4:A7:7D:5D:9E:81:39:ED:E2:11:41:5E:45
Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
Certificate issuer: /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Certificate serial: 019CADFE6984A9EEA28F67A251826B2F6404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
Manifest number: 15E5
Signing time: Mon 02 Mar 2026 10:00:57 +0000
Manifest this update: Mon 02 Mar 2026 10:00:57 +0000
Manifest next update: Tue 03 Mar 2026 10:00:57 +0000
Files and hashes: 1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: PgFP1I2/+luIxGW12X/xphtqYa4eEEKBsCmfabq7Dw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:69:84:a9:ee:a2:8f:67:a2:51:82:6b:2f:64:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Validity
Not Before: Mar 2 10:00:57 2026 GMT
Not After : Mar 3 10:00:57 2026 GMT
Subject: CN=6e2bd89644937cc4a77d5d9e8139ede211415e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:64:af:44:a4:b2:b8:e2:5b:59:d1:45:5c:
f1:57:d3:92:d3:40:20:ca:e0:b1:cd:17:2b:fa:37:
e0:d0:62:d1:c3:c0:1b:1d:f0:0e:5e:cc:1e:f8:ff:
95:a3:0d:c9:a9:7c:6c:00:2f:6c:ff:8e:39:4d:ba:
eb:5c:c9:fc:7b:55:09:3e:6c:57:bf:03:4b:f0:14:
3b:42:40:81:5d:47:f1:46:b7:27:8e:bc:fe:b7:a0:
68:72:18:aa:44:dd:0d:57:4d:9d:ad:15:b7:6b:44:
db:c6:a5:50:42:31:84:4b:bf:9d:50:15:d9:10:7d:
aa:b6:81:ed:d0:18:6c:f2:72:3a:1f:68:1b:ea:40:
c1:77:f5:22:6d:d6:61:2c:76:dc:c9:d1:6d:4a:da:
18:6c:7e:c1:02:f8:9d:7c:1e:d4:ed:08:7e:2e:0e:
1f:86:85:b8:98:ab:57:ce:d5:e3:91:6f:64:a8:cf:
40:6d:45:51:92:68:ac:e2:94:a6:50:6e:7a:32:dc:
a5:bc:6e:17:f6:f2:17:92:9f:0a:93:59:90:a3:5d:
93:54:71:53:49:3c:f2:a7:d9:6f:bd:48:d5:a1:e1:
4e:e3:12:63:ce:74:09:18:3c:94:44:9d:e5:a2:3a:
d5:ea:8a:15:c0:9a:29:7a:ed:aa:39:54:e9:2d:d4:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2B:D8:96:44:93:7C:C4:A7:7D:5D:9E:81:39:ED:E2:11:41:5E:45
X509v3 Authority Key Identifier:
keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d3:9e:aa:c9:9d:06:a4:ce:6b:2d:8f:25:54:e9:24:01:5d:
2d:03:d9:ed:04:4b:e1:1d:93:c3:fd:52:52:d6:3b:11:65:9b:
d9:7b:de:af:6f:e8:e5:01:d8:d4:b1:02:73:94:76:4b:66:f5:
6c:ac:68:14:10:4f:d8:41:fd:a5:7a:43:6f:c3:74:8a:95:0c:
15:be:51:72:e1:a1:5e:d0:0c:79:04:80:50:f6:15:85:6f:ed:
3d:33:ea:36:33:43:87:85:34:72:38:72:6e:92:89:92:84:8e:
1a:4b:0a:0d:35:23:ca:b9:ce:f1:e0:b4:71:00:77:48:d9:ab:
ab:df:5d:eb:52:30:fc:0f:28:32:8b:2f:d1:c6:5d:c2:5a:64:
53:51:ce:3f:05:72:dd:96:e8:6e:76:85:28:a7:16:e9:6a:d7:
73:26:9e:23:67:26:b7:12:b1:b7:e7:8e:77:5b:fe:66:98:dc:
f1:7d:3e:4a:9d:a6:11:5d:18:d5:2e:3a:ca:5b:e9:17:ca:07:
16:7c:6d:27:a3:c2:2c:17:24:70:68:fc:5b:b4:6c:f3:ee:11:
52:00:b2:fe:15:01:fe:08:73:ce:f7:6d:9b:00:07:d0:0e:57:
cb:62:79:dc:a6:65:c5:0d:5b:c9:89:1f:c3:b3:68:31:13:ae:
21:90:67:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:57 2026 by rpki-client