Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier: oyO1po76wwEHGrNw8BH/miX5U5yCr9kTkcPifJpI6xo=
Subject key identifier: E0:88:C7:C0:C1:2A:67:61:45:75:B2:A7:CF:7D:AA:5D:20:BC:EE:65
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial: 019D389BC34BDFC4B722FAF6A9E16639D083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number: 0B72
Signing time: Sun 29 Mar 2026 08:00:25 +0000
Manifest this update: Sun 29 Mar 2026 08:00:25 +0000
Manifest next update: Mon 30 Mar 2026 08:00:25 +0000
Files and hashes: 1: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: z2KnTwWYlGL4MOwk7v0Jr+ba7RnO49W52/ieRXqwgEM=)
2: wqM2HbHUAexqGRCIytvhP-Jzu4U.roa (hash: HC7KYLDVfK5o/bx0neagw4IbqR4rFwFVqDH+H7VDweY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c3:4b:df:c4:b7:22:fa:f6:a9:e1:66:39:d0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Validity
Not Before: Mar 29 08:00:25 2026 GMT
Not After : Mar 30 08:00:25 2026 GMT
Subject: CN=e088c7c0c12a67614575b2a7cf7daa5d20bcee65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:04:72:2e:9f:cb:81:e9:fa:60:d9:7e:c0:
b2:65:28:20:c0:fb:20:c1:0d:9f:a4:96:c8:87:5e:
16:2e:21:05:ba:1c:52:c6:a5:45:65:69:b9:a8:7b:
48:f0:57:64:dc:75:ce:3b:7c:c5:c8:3b:51:40:d4:
58:41:93:45:0b:91:27:0f:27:8a:d1:85:98:ae:34:
63:c6:fc:85:7c:db:59:58:d1:67:43:e0:ea:87:40:
7d:90:fc:70:ef:76:d9:df:10:57:16:62:82:c4:e7:
89:91:28:6d:50:08:13:3c:da:57:c2:0f:6e:8b:a9:
55:53:5a:f4:4a:85:08:95:8c:51:1e:c6:6a:87:ed:
a1:b5:37:fc:5e:e5:71:0c:9a:e8:02:ed:94:2e:58:
04:4b:91:26:06:1a:21:a7:5f:ac:7a:ec:2d:61:9a:
fb:65:8f:68:87:a4:86:cb:79:6b:d9:3d:fc:2f:43:
5c:8c:ce:14:3f:5a:83:d2:c5:ad:f5:7d:8b:0e:4b:
06:17:36:7b:ae:9e:bd:be:cc:d9:38:86:c0:38:b2:
e8:ab:20:83:19:65:8c:01:50:25:f3:0c:ce:5a:a5:
52:b6:48:69:32:44:91:ba:cb:3b:8d:32:af:b2:50:
ac:95:fa:2e:ec:01:3c:1b:d4:6d:f7:d4:c7:6f:53:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:88:C7:C0:C1:2A:67:61:45:75:B2:A7:CF:7D:AA:5D:20:BC:EE:65
X509v3 Authority Key Identifier:
keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:71:b6:c7:8f:04:89:87:e5:e6:fd:01:54:31:f9:41:69:7d:
0e:4a:86:d3:22:b5:72:71:0f:9f:c7:2b:09:a4:0d:16:b1:35:
7a:59:b0:9d:cc:6e:5c:b1:f3:84:8f:9d:89:aa:8b:54:37:61:
8f:ee:66:22:dd:10:af:80:9b:a5:26:c9:ac:e1:e6:60:8c:a3:
fa:3f:93:4e:ff:c7:75:de:b3:48:6d:56:8e:6a:1d:2c:5e:91:
f7:75:f7:c0:24:7d:74:7f:03:8e:ab:17:01:c4:e4:10:62:16:
98:b5:e5:f0:25:b2:7e:7a:6a:04:1f:55:5c:19:7f:1e:71:3b:
2e:da:57:93:4f:a7:4b:8d:29:f4:80:0c:e3:68:dc:75:8d:7c:
46:26:57:9c:db:07:12:2b:68:6d:2b:fa:e8:66:81:7c:2f:ab:
ac:dd:6c:28:1e:eb:c2:05:7c:4e:2b:9a:d5:46:43:47:5f:2a:
3c:ee:6c:03:2d:48:a2:5b:a6:27:01:60:a5:4e:fc:24:65:27:
b1:9b:7c:0b:71:3d:a1:33:f9:b7:e5:51:fd:67:d7:b8:0d:1d:
9b:62:84:e2:f7:1b:4e:87:ee:b1:68:a4:19:03:a3:f4:b0:5a:
36:4e:75:6f:85:b1:93:af:7c:ae:31:df:e6:91:8d:86:91:5e:
a7:c6:4d:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m8NL38S3Ivr2qeFmOdCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWRhNGE4NjM4ZGJkZDZmYTQzYzI3ZDNhYzZlYzhkOWFj
Yzg3OGEwHhcNMjYwMzI5MDgwMDI1WhcNMjYwMzMwMDgwMDI1WjAzMTEwLwYDVQQD
EyhlMDg4YzdjMGMxMmE2NzYxNDU3NWIyYTdjZjdkYWE1ZDIwYmNlZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokkEci6fy4Hp+mDZfsCyZSggwPsg
wQ2fpJbIh14WLiEFuhxSxqVFZWm5qHtI8Fdk3HXOO3zFyDtRQNRYQZNFC5EnDyeK
0YWYrjRjxvyFfNtZWNFnQ+Dqh0B9kPxw73bZ3xBXFmKCxOeJkShtUAgTPNpXwg9u
i6lVU1r0SoUIlYxRHsZqh+2htTf8XuVxDJroAu2ULlgES5EmBhohp1+seuwtYZr7
ZY9oh6SGy3lr2T38L0NcjM4UP1qD0sWt9X2LDksGFzZ7rp69vszZOIbAOLLoqyCD
GWWMAVAl8wzOWqVStkhpMkSRuss7jTKvslCslfou7AE8G9Rt99THb1OaYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCIx8DBKmdhRXWyp899ql0gvO5lMB8GA1UdIwQY
MBaAFKWdpKhjjb3W+kPCfTrG7I2azIeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzIt
MGY2OGU1YmZmYzdkLzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzItMGY2OGU1YmZmYzdk
LzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXG2x48E
iYfl5v0BVDH5QWl9DkqG0yK1cnEPn8crCaQNFrE1elmwncxuXLHzhI+diaqLVDdh
j+5mIt0Qr4CbpSbJrOHmYIyj+j+TTv/Hdd6zSG1WjmodLF6R93X3wCR9dH8DjqsX
AcTkEGIWmLXl8CWyfnpqBB9VXBl/HnE7LtpXk0+nS40p9IAM42jcdY18RiZXnNsH
EitobSv66GaBfC+rrN1sKB7rwgV8Tiua1UZDR18qPO5sAy1IolumJwFgpU78JGUn
sZt8C3E9oTP5t+VR/WfXuA0dm2KE4vcbTofusWikGQOj9LBaNk51b4Wxk698rjHf
5pGNhpFep8ZN6w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:18 2026 by rpki-client