Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
File: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft (raw, json)
Hash identifier: RSMpHLQGe98dxm0vlDbL3bM61w80bukmpDY48jQKxY0=
Subject key identifier: B5:FF:C3:71:18:93:53:4A:34:77:3C:0A:27:8A:CE:8D:8C:61:26:85
Authority key identifier: 67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
Certificate issuer: /CN=67864477fe948bf47b9179718c3698eeff58111d
Certificate serial: 019D37C01BC443693C839B8B5E9A7515B20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 04:00:30 +0000
Manifest this update: Sun 29 Mar 2026 04:00:30 +0000
Manifest next update: Mon 30 Mar 2026 04:00:30 +0000
Files and hashes: 1: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl (hash: r/D7KvMBry1G+wRbkAiVvX2xraJ8vDJQpUM1rgNXF8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1b:c4:43:69:3c:83:9b:8b:5e:9a:75:15:b2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67864477fe948bf47b9179718c3698eeff58111d
Validity
Not Before: Mar 29 04:00:30 2026 GMT
Not After : Mar 30 04:00:30 2026 GMT
Subject: CN=b5ffc3711893534a34773c0a278ace8d8c612685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:37:03:56:2f:4e:01:1e:49:33:3b:29:12:
8a:96:fb:ec:62:27:b6:5c:a6:52:17:38:5e:92:a4:
2d:13:cb:89:5f:e7:be:10:fe:a9:52:67:d9:32:63:
5a:35:85:c6:13:91:2e:49:d7:fe:5f:81:eb:fd:6b:
e7:7b:ca:b7:7f:3e:6d:f9:32:5a:17:73:d9:94:3c:
eb:65:36:58:8a:a2:00:ce:e0:ca:cb:06:e5:b4:27:
45:cb:99:0c:cc:cb:ba:e8:09:63:2c:65:a3:5d:2d:
42:98:62:7f:3a:13:f9:61:cc:ba:b4:97:21:d5:d0:
5f:8b:58:63:5d:05:01:01:f2:a1:56:fe:16:39:e2:
eb:6a:f1:f8:98:fd:60:b3:dd:ba:bf:32:0d:42:2a:
f8:4c:ad:3f:a8:9d:aa:56:d6:88:a0:2a:fd:16:1e:
7d:cf:eb:33:73:88:64:47:d8:d0:b5:35:ad:73:88:
31:51:e5:6d:69:b0:58:2b:78:d0:c4:fc:2f:f1:3e:
23:d1:3e:27:33:da:f7:48:23:3d:43:9a:3e:4d:b5:
a0:4e:f0:0d:b1:2d:6d:3f:66:25:09:5a:b6:9c:08:
ac:97:d7:83:db:49:31:8d:00:5b:e3:dd:7c:32:7b:
7b:f3:65:6b:f6:76:ab:f7:15:7d:a5:25:bf:fb:8c:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FF:C3:71:18:93:53:4A:34:77:3C:0A:27:8A:CE:8D:8C:61:26:85
X509v3 Authority Key Identifier:
keyid:67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:73:8d:de:39:f3:bd:27:4c:25:d6:4d:58:f3:9a:5d:3c:45:
a2:ae:d0:9f:35:3e:27:be:ba:40:58:95:f9:8f:7b:30:a1:57:
87:db:98:91:2b:af:cf:cd:7d:0a:14:13:62:d8:59:29:18:ac:
56:b5:ac:bd:77:ec:78:f4:99:fa:55:fa:cc:62:b9:70:5a:33:
37:e0:82:82:85:1a:ae:b6:0e:fd:6d:1c:5a:28:39:b2:dd:45:
e0:a0:52:de:08:a4:96:07:ea:05:68:0b:5c:81:73:ff:66:14:
a9:4a:2d:b9:1d:33:99:77:4d:eb:2c:9b:26:5b:d4:87:a5:b1:
da:31:17:0a:70:71:94:40:da:00:62:5c:ba:a5:64:70:ef:2d:
d3:45:44:ef:63:d6:94:72:99:76:71:08:25:42:a4:54:97:54:
1d:08:84:58:ee:3f:ca:aa:99:57:53:c8:21:4c:f2:6b:ad:0e:
78:55:92:4d:0c:7f:dd:c7:00:b1:e4:eb:e8:e5:60:6e:bf:65:
90:a4:bf:c2:43:17:6f:02:90:37:2d:40:4a:af:c2:ea:61:39:
93:6e:fd:7b:1b:dc:b7:7c:61:84:e6:da:8f:70:d1:31:91:d5:
62:0b:a6:5b:4d:0f:99:a7:c9:21:9c:97:e1:7a:26:69:ec:a5:
c9:82:5f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wBvEQ2k8g5uLXpp1FbILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ODY0NDc3ZmU5NDhiZjQ3YjkxNzk3MThjMzY5OGVlZmY1
ODExMWQwHhcNMjYwMzI5MDQwMDMwWhcNMjYwMzMwMDQwMDMwWjAzMTEwLwYDVQQD
EyhiNWZmYzM3MTE4OTM1MzRhMzQ3NzNjMGEyNzhhY2U4ZDhjNjEyNjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2c3A1YvTgEeSTM7KRKKlvvsYie2
XKZSFzhekqQtE8uJX+e+EP6pUmfZMmNaNYXGE5EuSdf+X4Hr/Wvne8q3fz5t+TJa
F3PZlDzrZTZYiqIAzuDKywbltCdFy5kMzMu66AljLGWjXS1CmGJ/OhP5Ycy6tJch
1dBfi1hjXQUBAfKhVv4WOeLravH4mP1gs926vzINQir4TK0/qJ2qVtaIoCr9Fh59
z+szc4hkR9jQtTWtc4gxUeVtabBYK3jQxPwv8T4j0T4nM9r3SCM9Q5o+TbWgTvAN
sS1tP2YlCVq2nAisl9eD20kxjQBb4918Mnt782Vr9nar9xV9pSW/+4ykYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX/w3EYk1NKNHc8CieKzo2MYSaFMB8GA1UdIwQY
MBaAFGeGRHf+lIv0e5F5cYw2mO7/WBEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81Yjk2MWItYmMyNS00OTNjLWFmMzgt
ODM0YWU0N2FkNDdiLzEvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81Yjk2MWItYmMyNS00OTNjLWFmMzgtODM0YWU0N2FkNDdi
LzEvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenON3jnz
vSdMJdZNWPOaXTxFoq7QnzU+J766QFiV+Y97MKFXh9uYkSuvz819ChQTYthZKRis
VrWsvXfsePSZ+lX6zGK5cFozN+CCgoUarrYO/W0cWig5st1F4KBS3giklgfqBWgL
XIFz/2YUqUotuR0zmXdN6yybJlvUh6Wx2jEXCnBxlEDaAGJcuqVkcO8t00VE72PW
lHKZdnEIJUKkVJdUHQiEWO4/yqqZV1PIIUzya60OeFWSTQx/3ccAseTr6OVgbr9l
kKS/wkMXbwKQNy1ASq/C6mE5k279exvct3xhhObaj3DRMZHVYgumW00PmafJIZyX
4XomaeylyYJfMQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:25 2026 by rpki-client