Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier: HkdylHpZjF2OHr7pVGgXNwrH+UkHsHmA06P/f49M+6k=
Subject key identifier: 28:9D:79:38:1F:F2:E2:1B:26:56:88:E0:16:D2:C6:F9:BF:F4:CB:A8
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial: 019D38662F984DDD4E075187FD3B39E20583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number: 14DE
Signing time: Sun 29 Mar 2026 07:01:54 +0000
Manifest this update: Sun 29 Mar 2026 07:01:54 +0000
Manifest next update: Mon 30 Mar 2026 07:01:54 +0000
Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: XP7DVibIEDfCfXx57Az2XOeDZdG3Wrg5CTqSoCaPdcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2f:98:4d:dd:4e:07:51:87:fd:3b:39:e2:05:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Validity
Not Before: Mar 29 07:01:54 2026 GMT
Not After : Mar 30 07:01:54 2026 GMT
Subject: CN=289d79381ff2e21b265688e016d2c6f9bff4cba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:14:09:57:90:88:63:e1:4c:69:9e:2b:39:
81:4f:66:f9:5e:9f:d9:60:d4:52:18:a9:12:c0:1c:
54:68:7f:84:b4:3c:38:2e:88:2f:28:fe:ef:36:b2:
85:16:31:4b:4a:2a:69:ec:cd:0f:ba:2b:7d:37:bc:
4f:e9:d6:12:51:fa:12:8c:f1:ea:a4:f5:98:ea:62:
f5:03:e1:32:af:ef:f6:1d:6c:7a:fb:d4:49:15:ff:
e1:e7:3e:00:17:70:ec:33:c1:d6:71:18:4f:dd:e5:
34:94:45:70:5a:cb:5b:6d:a2:e0:2d:23:6b:ec:04:
f6:ec:a3:37:77:43:97:44:e0:0e:2b:14:58:68:27:
08:97:01:29:5c:d2:a7:81:e6:71:9b:f3:02:82:e2:
3f:4a:bd:e5:fb:86:80:55:e2:1d:ca:93:13:1d:2c:
02:a0:b4:50:51:93:29:f5:34:57:f1:53:89:e0:95:
db:91:25:7a:9f:00:77:33:8a:cf:1b:67:e0:95:5c:
9b:69:fa:a7:3e:e0:4f:e0:13:07:4f:99:ac:1d:c6:
3f:4f:72:29:97:53:15:66:95:4c:c7:f4:c7:40:2d:
d9:bc:bf:cd:de:4b:47:ed:b2:60:a9:b0:fd:9f:16:
1a:58:00:56:0d:f5:94:ff:81:c7:c8:a2:e3:f8:5e:
c4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9D:79:38:1F:F2:E2:1B:26:56:88:E0:16:D2:C6:F9:BF:F4:CB:A8
X509v3 Authority Key Identifier:
keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a8:fe:58:49:52:5c:a3:eb:32:b4:06:87:b9:25:f7:c0:92:
c7:51:9d:e8:5a:d3:c5:21:98:d3:1b:57:40:f6:5e:26:b5:84:
b9:c4:2d:c9:75:9e:16:89:23:38:0f:27:17:89:bf:f0:ff:db:
ff:1b:56:50:9e:bc:ef:39:3b:41:d3:98:c8:f7:6f:e2:54:25:
27:3b:37:d5:81:97:8b:2e:87:65:b4:ed:c5:47:cb:75:51:2c:
67:8d:0f:6c:be:e9:d6:8f:c9:cf:a2:ac:91:d3:2b:ec:fc:a3:
2a:97:99:99:0a:d7:52:71:f7:4c:50:dc:a2:6b:71:82:ef:60:
da:e9:61:03:53:d9:38:ed:2d:f0:6a:68:c9:5b:f1:2d:e9:9d:
3b:be:86:eb:4f:c5:8d:d8:4a:b4:19:30:13:8e:d1:05:ea:37:
f5:ad:9d:86:cd:f3:27:7a:72:d6:a0:cf:3a:bd:26:b8:6b:4e:
ec:a4:7e:7d:15:43:34:89:46:d6:e9:de:e6:73:4f:c1:ec:a1:
f7:2e:57:e7:48:77:b8:49:11:00:4c:2d:b6:77:c2:07:44:40:
27:bf:64:69:54:80:48:5e:29:8c:e9:c9:16:84:db:df:d1:90:
ad:92:33:88:1f:2c:99:94:69:1b:b1:6a:e2:37:46:d7:cd:64:
8a:b7:06:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zi+YTd1OB1GH/Ts54gWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczM2RhNmE2YzRlOGIxYzRjZTNmMjA0YmI0YmZkOWQ4NmEw
ZjU2MWUwHhcNMjYwMzI5MDcwMTU0WhcNMjYwMzMwMDcwMTU0WjAzMTEwLwYDVQQD
EygyODlkNzkzODFmZjJlMjFiMjY1Njg4ZTAxNmQyYzZmOWJmZjRjYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i8UCVeQiGPhTGmeKzmBT2b5Xp/Z
YNRSGKkSwBxUaH+EtDw4LogvKP7vNrKFFjFLSipp7M0Puit9N7xP6dYSUfoSjPHq
pPWY6mL1A+Eyr+/2HWx6+9RJFf/h5z4AF3DsM8HWcRhP3eU0lEVwWstbbaLgLSNr
7AT27KM3d0OXROAOKxRYaCcIlwEpXNKngeZxm/MCguI/Sr3l+4aAVeIdypMTHSwC
oLRQUZMp9TRX8VOJ4JXbkSV6nwB3M4rPG2fglVybafqnPuBP4BMHT5msHcY/T3Ip
l1MVZpVMx/THQC3ZvL/N3ktH7bJgqbD9nxYaWABWDfWU/4HHyKLj+F7E7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCideTgf8uIbJlaI4BbSxvm/9MuoMB8GA1UdIwQY
MBaAFHM9pqbE6LHEzj8gS7S/2dhqD1YeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZDEyYjgtZDBlOC00ZTQ2LTg0OGEt
MDE3ZTJiMjVkODg2LzEvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zZDEyYjgtZDBlOC00ZTQ2LTg0OGEtMDE3ZTJiMjVkODg2
LzEvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqj+WElS
XKPrMrQGh7kl98CSx1Gd6FrTxSGY0xtXQPZeJrWEucQtyXWeFokjOA8nF4m/8P/b
/xtWUJ687zk7QdOYyPdv4lQlJzs31YGXiy6HZbTtxUfLdVEsZ40PbL7p1o/Jz6Ks
kdMr7PyjKpeZmQrXUnH3TFDcomtxgu9g2ulhA1PZOO0t8GpoyVvxLemdO76G60/F
jdhKtBkwE47RBeo39a2dhs3zJ3py1qDPOr0muGtO7KR+fRVDNIlG1une5nNPweyh
9y5X50h3uEkRAEwttnfCB0RAJ79kaVSASF4pjOnJFoTb39GQrZIziB8smZRpG7Fq
4jdG181kircG1g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:45 2026 by rpki-client