Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: owKTkmgpdcWIAh4/YLj/faHCs95Rz0MGGU2fdkzpD/U=
Subject key identifier: DA:B0:0E:CF:3A:DD:75:B9:6F:2F:FF:55:ED:C9:0E:7B:F8:79:7F:72
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 019DCCAABB65EA8EBFE2A6265CD97336230C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0CF0
Signing time: Mon 27 Apr 2026 02:00:34 +0000
Manifest this update: Mon 27 Apr 2026 02:00:34 +0000
Manifest next update: Tue 28 Apr 2026 02:00:34 +0000
Files and hashes: 1: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: Rjhw1XjhUAtIpmQQhTr3EkSoXG8AoZA54yLwxtxqRug=)
2: bb1B8Fy2_C2bqbD9N4RRbHoFAbA.roa (hash: l0MLPIfI2aVoXdO47UK4RJDxoIk9MxZKupnuOkrWUdk=)
3: dcTwMDgwodHIo-S4yL4e4K41UJY.roa (hash: eMv2nsim1YJjG+0E2GpZFtw7b5BwXygPOnj8sq0+Gcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:bb:65:ea:8e:bf:e2:a6:26:5c:d9:73:36:23:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Apr 27 02:00:34 2026 GMT
Not After : Apr 28 02:00:34 2026 GMT
Subject: CN=dab00ecf3add75b96f2fff55edc90e7bf8797f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:ca:40:70:84:7e:b9:88:51:81:b6:34:ca:
17:ae:51:ea:76:b6:05:06:e1:8d:55:be:73:51:d4:
90:b3:36:bc:d1:1e:2b:d4:3b:e1:ea:f5:55:cd:37:
4e:e2:91:d2:d9:14:37:33:0b:f2:5f:2e:b6:3e:eb:
73:dd:6c:64:2f:83:6f:07:82:96:a8:07:40:9f:1f:
07:36:6e:fb:04:15:b0:76:74:8a:50:29:25:7b:dc:
38:bd:d1:34:9e:c9:35:dd:c1:7b:96:e0:43:1e:e9:
ca:7f:8e:69:e2:ea:34:b0:d5:71:d4:1e:f9:b3:94:
95:b5:28:ac:8d:27:dd:4e:bb:3b:97:6d:80:5b:1d:
c6:ea:7e:5d:95:04:d4:6c:27:4f:0b:20:18:57:6a:
fc:8e:b6:9c:8b:0d:f0:3d:bb:12:b4:7a:5a:21:8b:
61:40:a6:fa:18:ef:33:e8:fb:bd:6d:7a:29:43:0f:
42:d0:57:4b:bb:6d:dc:8d:31:23:d3:e4:48:60:be:
6d:23:76:09:ba:d5:cb:47:78:c2:99:3f:e3:ad:97:
77:af:d8:83:87:1d:c9:2b:46:c7:e0:e5:08:d5:6f:
2f:95:67:f8:82:34:49:b5:1e:3f:5d:8e:cf:97:3a:
6b:06:17:58:e0:7f:f2:09:ba:7a:36:e0:f8:5e:e2:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B0:0E:CF:3A:DD:75:B9:6F:2F:FF:55:ED:C9:0E:7B:F8:79:7F:72
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:33:36:5b:48:2c:c4:98:61:89:4f:20:69:ea:90:75:24:bb:
40:2c:e8:c8:6b:a5:92:50:2d:c3:a6:ca:de:e6:f2:dd:c6:42:
7a:6b:2f:ee:a5:7b:f8:b9:30:6a:55:d2:f3:41:c2:c1:b8:bd:
7d:82:81:1b:0e:fb:dd:4d:7a:85:ba:5d:70:83:00:90:31:10:
d6:47:41:db:d6:f5:21:ae:0e:43:dc:e3:dc:0f:48:f8:c5:44:
ed:8d:11:78:ff:f6:46:60:4d:89:af:e8:fb:4f:71:3a:f4:88:
fd:9a:6c:16:d0:75:38:e1:99:cf:71:57:4e:73:a9:c3:1a:af:
88:fa:ac:65:0c:0b:4a:a7:66:22:e0:c2:8f:38:a1:56:c9:85:
48:fc:51:23:3c:12:e8:40:2d:de:31:69:ed:68:0b:48:50:db:
4f:d3:86:80:05:9a:64:67:72:f6:58:00:4a:78:2e:09:b6:53:
75:53:92:24:9d:9a:16:3d:ab:af:55:fb:21:c0:bc:8b:5d:cf:
5b:f1:8e:f1:6e:9b:52:2e:97:0c:88:1e:01:45:47:83:5f:64:
d3:dd:ee:13:71:95:c2:b9:b9:01:8a:b6:7c:1f:04:23:39:15:
27:ad:40:4d:82:51:e5:93:a4:41:18:8e:fe:7a:ee:d3:e5:c5:
fd:57:9d:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Mqrtl6o6/4qYmXNlzNiMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NTAxMTY1NjQ1YWE4MGRjYmEzMTU4ODVjZjM3NGFjYjZk
MjEzMDUwHhcNMjYwNDI3MDIwMDM0WhcNMjYwNDI4MDIwMDM0WjAzMTEwLwYDVQQD
EyhkYWIwMGVjZjNhZGQ3NWI5NmYyZmZmNTVlZGM5MGU3YmY4Nzk3ZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgnKQHCEfrmIUYG2NMoXrlHqdrYF
BuGNVb5zUdSQsza80R4r1Dvh6vVVzTdO4pHS2RQ3MwvyXy62Putz3WxkL4NvB4KW
qAdAnx8HNm77BBWwdnSKUCkle9w4vdE0nsk13cF7luBDHunKf45p4uo0sNVx1B75
s5SVtSisjSfdTrs7l22AWx3G6n5dlQTUbCdPCyAYV2r8jraciw3wPbsStHpaIYth
QKb6GO8z6Pu9bXopQw9C0FdLu23cjTEj0+RIYL5tI3YJutXLR3jCmT/jrZd3r9iD
hx3JK0bH4OUI1W8vlWf4gjRJtR4/XY7PlzprBhdY4H/yCbp6NuD4XuJQMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqwDs863XW5by//Ve3JDnv4eX9yMB8GA1UdIwQY
MBaAFGZQEWVkWqgNy6MViFzzdKy20hMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUt
MWQwMjBlY2UwN2VhLzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUtMWQwMjBlY2UwN2Vh
LzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzM2W0gs
xJhhiU8gaeqQdSS7QCzoyGulklAtw6bK3uby3cZCemsv7qV7+LkwalXS80HCwbi9
fYKBGw773U16hbpdcIMAkDEQ1kdB29b1Ia4OQ9zj3A9I+MVE7Y0ReP/2RmBNia/o
+09xOvSI/ZpsFtB1OOGZz3FXTnOpwxqviPqsZQwLSqdmIuDCjzihVsmFSPxRIzwS
6EAt3jFp7WgLSFDbT9OGgAWaZGdy9lgASnguCbZTdVOSJJ2aFj2rr1X7IcC8i13P
W/GO8W6bUi6XDIgeAUVHg19k093uE3GVwrm5AYq2fB8EIzkVJ61ATYJR5ZOkQRiO
/nru0+XF/VedBQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 12:38:54 2026 by rpki-client