
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
File: Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json)
Hash identifier: 7Lo7Yl+PM0Ysogn55i3h1o94i3ir/ff651DayvV/Dt8=
Subject key identifier: 3A:65:51:20:E9:39:10:0D:10:0D:FB:28:C5:B8:EB:39:5B:FF:3C:C2
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Certificate issuer: /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial: 019D39AF6138BB0366A58FE96704E796C854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 13:01:27 +0000
Manifest this update: Sun 29 Mar 2026 13:01:27 +0000
Manifest next update: Mon 30 Mar 2026 13:01:27 +0000
Files and hashes: 1: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: ZW1sVndFDruz4EVOrp2sit1jcmEL5sPa/f4BoKCdwxM=)
2: sWEyZCi5NDwyUie3aWYd5IPmfuw.roa (hash: TSCcBZmyzZxP3eOaeaIBX8e9nFHBHGiKk40P3OCJfbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:61:38:bb:03:66:a5:8f:e9:67:04:e7:96:c8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Validity
Not Before: Mar 29 13:01:27 2026 GMT
Not After : Mar 30 13:01:27 2026 GMT
Subject: CN=3a655120e939100d100dfb28c5b8eb395bff3cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:3b:3e:d7:43:67:41:78:fc:f8:c2:69:b8:
5d:03:20:61:fc:3f:2e:55:8f:45:67:ea:d7:42:24:
49:3c:8b:c6:e0:7f:c7:bb:8c:00:4a:27:10:83:11:
51:b1:b6:64:05:3c:a9:a7:e3:46:31:f8:b9:0a:f7:
f9:e9:51:19:2d:e3:51:2e:2e:1e:72:4d:f2:93:7a:
66:cd:e4:6b:b7:24:22:cc:ad:5a:d3:55:a7:e2:3b:
30:26:da:37:fc:0e:de:fe:27:1e:17:38:48:28:c2:
a9:65:8c:23:47:33:23:8a:c1:a9:38:5b:ee:56:f3:
1e:0a:fb:71:d2:fc:c4:1a:33:3b:bc:70:43:c8:49:
36:a3:42:cb:7c:8d:6f:3f:f0:77:3b:f4:d3:9e:df:
f3:33:9c:4d:3a:e8:e9:10:36:35:ba:45:38:3a:ef:
1c:84:c6:f4:15:a1:b0:20:3d:d4:b5:da:e0:4c:bf:
16:58:2e:8c:27:d6:b6:9a:80:27:ec:38:f5:4d:8f:
c0:23:11:6c:4a:a2:8f:b4:bb:78:ea:28:cc:b9:6f:
ce:a1:05:b0:53:c4:af:3c:7f:11:46:fb:56:ec:90:
c2:92:30:ab:75:ae:71:a2:af:36:ae:20:13:d2:d3:
c0:95:96:11:5c:aa:20:73:26:37:fe:2c:63:b4:f4:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:65:51:20:E9:39:10:0D:10:0D:FB:28:C5:B8:EB:39:5B:FF:3C:C2
X509v3 Authority Key Identifier:
keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3a:cb:29:7e:7e:bd:a7:11:8b:61:bf:f6:3f:a2:12:3a:c6:
7a:17:4b:d3:aa:1c:52:2d:d7:e3:a8:57:a1:c5:04:7c:21:75:
a6:57:62:c0:49:ba:94:8a:15:62:68:5e:78:e5:7e:dc:9e:97:
2f:01:e4:4b:5b:25:25:59:9d:35:9b:8b:bb:99:ea:08:62:3d:
4a:22:fa:97:54:81:95:6f:9b:1c:59:4a:94:11:5b:b5:71:e0:
51:25:2b:11:10:7b:64:c8:26:bf:01:03:d5:36:ff:71:46:7b:
5a:8a:1d:ba:ee:c5:89:4d:9c:54:98:f1:59:87:e6:49:f7:a8:
69:2c:59:25:5f:79:17:a2:d3:11:79:8e:ac:78:1c:86:fb:e7:
21:42:77:ef:1c:7c:5a:a2:d5:2c:f5:3a:18:90:93:2a:df:6c:
57:f5:06:41:da:7d:89:81:43:74:11:f6:dd:af:5b:fc:23:97:
f1:29:50:0d:81:38:76:ab:83:fc:e1:67:ba:ef:bc:8c:27:8a:
ca:30:54:9b:ed:a5:86:39:3a:39:cf:e5:09:1a:6e:21:c2:12:
9a:4c:ff:e9:be:7a:b7:e4:9e:31:dc:e3:5b:6e:da:7a:90:2b:
af:c2:a7:b6:2f:7d:1d:40:0a:b8:dc:55:83:aa:ca:e4:fa:c3:
da:26:be:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05r2E4uwNmpY/pZwTnlshUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2N2FlNWVkN2NhOGJkNWY4ZWZmMzBiMGU0N2FiNGRmOTM4
MjhmZjEwHhcNMjYwMzI5MTMwMTI3WhcNMjYwMzMwMTMwMTI3WjAzMTEwLwYDVQQD
EygzYTY1NTEyMGU5MzkxMDBkMTAwZGZiMjhjNWI4ZWIzOTViZmYzY2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEk7PtdDZ0F4/PjCabhdAyBh/D8u
VY9FZ+rXQiRJPIvG4H/Hu4wASicQgxFRsbZkBTypp+NGMfi5Cvf56VEZLeNRLi4e
ck3yk3pmzeRrtyQizK1a01Wn4jswJto3/A7e/iceFzhIKMKpZYwjRzMjisGpOFvu
VvMeCvtx0vzEGjM7vHBDyEk2o0LLfI1vP/B3O/TTnt/zM5xNOujpEDY1ukU4Ou8c
hMb0FaGwID3UtdrgTL8WWC6MJ9a2moAn7Dj1TY/AIxFsSqKPtLt46ijMuW/OoQWw
U8SvPH8RRvtW7JDCkjCrda5xoq82riAT0tPAlZYRXKogcyY3/ixjtPRvhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDplUSDpORANEA37KMW46zlb/zzCMB8GA1UdIwQY
MBaAFGZ65e18qL1fjv8wsOR6tN+Tgo/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YWUwYmQtZDdlNC00NGQ1LTg3N2Ut
NGE5Y2UyMTMxYjQyLzEvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80YWUwYmQtZDdlNC00NGQ1LTg3N2UtNGE5Y2UyMTMxYjQy
LzEvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAijrLKX5+
vacRi2G/9j+iEjrGehdL06ocUi3X46hXocUEfCF1pldiwEm6lIoVYmheeOV+3J6X
LwHkS1slJVmdNZuLu5nqCGI9SiL6l1SBlW+bHFlKlBFbtXHgUSUrERB7ZMgmvwED
1Tb/cUZ7Wooduu7FiU2cVJjxWYfmSfeoaSxZJV95F6LTEXmOrHgchvvnIUJ37xx8
WqLVLPU6GJCTKt9sV/UGQdp9iYFDdBH23a9b/COX8SlQDYE4dquD/OFnuu+8jCeK
yjBUm+2lhjk6Oc/lCRpuIcISmkz/6b56t+SeMdzjW27aepArr8Knti99HUAKuNxV
g6rK5PrD2ia+RQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:24 2026 by rpki-client