Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier: NIaXbOZtqh8qFMQ7vtthDryzZ5Ea38tDVcONXo/Dm9U=
Subject key identifier: 5C:22:BE:9D:D4:90:88:D8:48:36:C6:44:21:D0:74:A7:DD:59:5C:F4
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 019D38D3489E5BF989657F21D3DC12249F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:03 +0000
Manifest this update: Sun 29 Mar 2026 09:01:03 +0000
Manifest next update: Mon 30 Mar 2026 09:01:03 +0000
Files and hashes: 1: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: Tz11bG08Pz26b0klNgGVMSzqhpztvwVE2bVsWDO+QKc=)
2: lBanohcXuTk3tPGpdRVlhFgo50k.roa (hash: QRKqk4kvpnYuyI5Tk2E7RWYUVWf78BdUbT/Cbi1GnI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:48:9e:5b:f9:89:65:7f:21:d3:dc:12:24:9f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Mar 29 09:01:03 2026 GMT
Not After : Mar 30 09:01:03 2026 GMT
Subject: CN=5c22be9dd49088d84836c64421d074a7dd595cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:12:86:f0:a1:ac:80:a3:b0:15:67:c4:78:
cd:c5:3c:56:34:bf:70:d9:f4:5a:15:b7:93:77:dd:
a9:a0:08:ab:ef:8b:44:48:84:2e:17:a0:2f:a8:ac:
36:bd:76:fe:44:cd:7b:e0:5b:cc:35:38:a2:3f:31:
ac:d4:91:47:e6:ed:44:78:9a:d1:e0:83:fd:e1:c7:
15:d3:05:0e:3d:f8:af:dc:1d:a3:46:60:b7:5d:68:
30:b7:ac:22:a4:26:13:88:31:00:81:c6:b3:b0:17:
51:7d:e5:c3:0c:02:72:2b:68:ae:fd:28:d1:c0:1e:
f3:76:41:29:94:13:3a:8a:36:60:2e:1b:4b:d1:21:
50:8d:77:06:10:92:39:57:1f:40:6a:71:6c:4e:54:
a6:07:f7:48:6e:32:bc:49:2d:08:6b:a4:da:24:98:
37:30:ef:94:e5:e2:7b:09:ed:90:1e:d3:0b:28:84:
41:d5:c4:0c:5a:b8:e3:71:3c:a8:3b:33:2f:47:5c:
e6:ac:cc:79:4c:65:8d:e5:74:34:32:7d:ca:0f:c7:
b8:d6:34:39:be:d0:d9:39:18:46:0d:78:73:65:5d:
d0:f4:b1:01:d4:c8:dd:5f:43:7c:b3:2d:7c:c5:fe:
95:53:d5:6b:d8:75:21:8a:ea:6f:15:81:95:9f:ba:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:22:BE:9D:D4:90:88:D8:48:36:C6:44:21:D0:74:A7:DD:59:5C:F4
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c8:57:5d:27:35:fe:2b:2a:24:4f:74:53:77:0b:ff:c2:56:
50:a0:e1:a4:03:0d:b7:aa:ff:53:d9:38:0d:8f:18:69:5f:b0:
29:a1:1d:f3:47:b0:07:3f:5a:ed:10:64:b3:2f:83:58:2a:de:
84:fe:26:b3:d6:9d:d4:35:34:5b:1f:d7:c1:94:f3:d0:39:29:
68:d2:3f:86:c4:14:be:73:0c:5e:5f:10:ed:9c:50:53:e1:a8:
87:b6:90:85:63:22:28:0a:0c:58:74:3f:69:cb:6e:dd:5c:a1:
d0:7e:db:2f:21:2a:66:8c:4d:f6:fb:c1:27:f1:63:7d:34:04:
30:2d:9d:6d:1e:51:f1:a2:c9:ff:27:e4:11:3c:bd:cb:89:3f:
e3:f3:4a:76:d4:9c:5b:03:35:ef:98:96:a3:b8:b5:4b:63:e0:
3c:cc:1c:a5:ea:a8:54:a8:64:18:2a:22:32:fb:71:0f:90:2a:
e4:dc:f9:33:06:51:0b:83:af:e2:59:33:a0:79:33:2b:ec:30:
44:d7:9e:6f:b7:9c:3d:8d:b4:4e:52:b5:eb:d1:39:c9:da:3d:
9d:2a:0e:06:d4:11:b3:f6:67:27:46:7e:6a:0a:cb:6e:30:7d:
5d:d2:94:38:ed:ce:d1:33:c1:01:c7:71:62:e5:a5:24:74:14:
38:2e:1f:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0400ieW/mJZX8h09wSJJ8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NzA4ZTA1Y2RhODZiYmRlNzRlZGJhODVkMWRiZWI3M2Zl
N2Y3NTcwHhcNMjYwMzI5MDkwMTAzWhcNMjYwMzMwMDkwMTAzWjAzMTEwLwYDVQQD
Eyg1YzIyYmU5ZGQ0OTA4OGQ4NDgzNmM2NDQyMWQwNzRhN2RkNTk1Y2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBoShvChrICjsBVnxHjNxTxWNL9w
2fRaFbeTd92poAir74tESIQuF6AvqKw2vXb+RM174FvMNTiiPzGs1JFH5u1EeJrR
4IP94ccV0wUOPfiv3B2jRmC3XWgwt6wipCYTiDEAgcazsBdRfeXDDAJyK2iu/SjR
wB7zdkEplBM6ijZgLhtL0SFQjXcGEJI5Vx9AanFsTlSmB/dIbjK8SS0Ia6TaJJg3
MO+U5eJ7Ce2QHtMLKIRB1cQMWrjjcTyoOzMvR1zmrMx5TGWN5XQ0Mn3KD8e41jQ5
vtDZORhGDXhzZV3Q9LEB1MjdX0N8sy18xf6VU9Vr2HUhiupvFYGVn7qSYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwivp3UkIjYSDbGRCHQdKfdWVz0MB8GA1UdIwQY
MBaAFGdwjgXNqGu9507bqF0dvrc/5/dXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQt
MDAzOTVhMzhjMzdkLzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQtMDAzOTVhMzhjMzdk
LzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALchXXSc1
/isqJE90U3cL/8JWUKDhpAMNt6r/U9k4DY8YaV+wKaEd80ewBz9a7RBksy+DWCre
hP4ms9ad1DU0Wx/XwZTz0DkpaNI/hsQUvnMMXl8Q7ZxQU+Goh7aQhWMiKAoMWHQ/
actu3Vyh0H7bLyEqZoxN9vvBJ/FjfTQEMC2dbR5R8aLJ/yfkETy9y4k/4/NKdtSc
WwM175iWo7i1S2PgPMwcpeqoVKhkGCoiMvtxD5Aq5Nz5MwZRC4Ov4lkzoHkzK+ww
RNeeb7ecPY20TlK169E5ydo9nSoOBtQRs/ZnJ0Z+agrLbjB9XdKUOO3O0TPBAcdx
YuWlJHQUOC4fPQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:18 2026 by rpki-client