Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
File: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft (raw, json)
Hash identifier: fzVxw3MSvKkkk6g90TAKvEKPCcIrkZ6S7XecxqN2wjA=
Subject key identifier: 22:3E:56:BC:69:39:B0:08:EC:46:A4:D4:72:AE:44:10:72:02:B1:F3
Authority key identifier: 66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
Certificate issuer: /CN=6683a96cf511a67919d900f3fc934099341f87d8
Certificate serial: 019D38655B4610C132F1F5A50A179479DE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
Manifest number: 106E
Signing time: Sun 29 Mar 2026 07:00:59 +0000
Manifest this update: Sun 29 Mar 2026 07:00:59 +0000
Manifest next update: Mon 30 Mar 2026 07:00:59 +0000
Files and hashes: 1: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl (hash: wuRQO3MJ8loyo8608oaflqkVPQwITebDwew8tXCVwkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5b:46:10:c1:32:f1:f5:a5:0a:17:94:79:de:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6683a96cf511a67919d900f3fc934099341f87d8
Validity
Not Before: Mar 29 07:00:59 2026 GMT
Not After : Mar 30 07:00:59 2026 GMT
Subject: CN=223e56bc6939b008ec46a4d472ae44107202b1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cf:f0:aa:76:e8:82:cc:11:29:b6:4e:63:ac:
31:e7:e9:0b:46:54:f5:05:07:73:e3:4e:96:cf:d0:
e7:bc:4b:a2:40:32:ae:5d:b5:0c:e8:49:ba:e9:5c:
48:51:26:ef:d6:b7:39:dc:81:35:c7:c9:9f:9e:33:
5a:1f:7c:9e:4d:9c:40:85:62:f4:4e:f8:45:ab:22:
78:a4:c2:c5:3d:23:e3:50:51:b0:de:85:0f:42:ac:
93:ca:12:45:a3:cf:1e:05:76:8c:38:a1:c2:be:7d:
50:25:61:43:22:45:fd:c9:9d:f5:3a:fa:d6:88:5d:
60:55:71:9b:26:66:62:67:10:89:09:7f:c7:ed:79:
8f:cd:53:0a:66:98:c4:57:77:ef:9e:30:13:4f:5e:
be:c9:8e:f5:c9:41:c3:42:6f:e6:f1:9b:b4:84:5e:
ef:75:bc:e8:7c:a4:8a:d5:c1:e0:a3:6d:43:39:20:
48:2d:5a:ab:fc:48:89:4b:d9:de:7b:e7:10:70:39:
da:a4:24:1c:06:3d:65:9e:16:6b:f1:5b:03:f5:e1:
0b:98:7e:02:76:ec:de:b4:43:06:7d:2d:06:41:12:
f2:df:4c:3e:5e:ca:1f:60:e4:36:33:72:23:67:85:
c0:3c:4b:19:1d:1e:0c:fa:da:94:e6:de:f5:78:ed:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3E:56:BC:69:39:B0:08:EC:46:A4:D4:72:AE:44:10:72:02:B1:F3
X509v3 Authority Key Identifier:
keyid:66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e7:63:91:3c:b4:4e:26:97:c7:cb:cd:da:16:f6:a2:2c:a5:
63:c9:7a:01:6f:22:52:ef:b8:91:00:d7:f5:24:69:21:c2:7e:
fd:9e:93:45:d2:9e:97:ac:68:a7:ed:59:45:25:26:a0:0e:cb:
04:0b:8c:3e:ad:80:23:42:3f:33:a2:4c:b8:75:8a:69:89:4b:
17:0b:67:38:07:92:02:19:93:1e:62:ee:6d:37:39:c8:e5:f1:
9a:b3:4e:b6:91:06:70:9b:d0:45:b5:97:ee:64:51:71:8d:b8:
4a:75:d5:43:73:c8:91:fe:a3:09:80:45:1c:fc:d3:be:29:8e:
38:d5:bc:08:d5:92:47:93:85:6e:f1:9a:3a:3f:a4:f4:e1:0f:
dd:b5:53:bc:25:c5:d6:38:4b:ca:86:99:bc:f0:05:36:b2:b1:
8d:d5:2a:31:46:25:e9:08:22:6d:b6:52:67:6c:c8:73:6c:2a:
62:a3:09:bf:cd:ec:27:0d:c0:2a:a1:68:a9:73:b7:63:eb:a7:
91:1b:1a:49:c4:90:6f:fa:58:a2:96:fa:c1:d6:81:ce:a2:ae:
ef:15:5b:47:78:ae:de:db:f0:e8:4e:64:42:56:b1:7d:7f:88:
ea:02:50:10:de:81:ff:ed:78:1c:7d:34:62:bf:42:e7:27:6b:
d3:7f:db:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZVtGEMEy8fWlCheUed45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ODNhOTZjZjUxMWE2NzkxOWQ5MDBmM2ZjOTM0MDk5MzQx
Zjg3ZDgwHhcNMjYwMzI5MDcwMDU5WhcNMjYwMzMwMDcwMDU5WjAzMTEwLwYDVQQD
EygyMjNlNTZiYzY5MzliMDA4ZWM0NmE0ZDQ3MmFlNDQxMDcyMDJiMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis/wqnbogswRKbZOY6wx5+kLRlT1
BQdz406Wz9DnvEuiQDKuXbUM6Em66VxIUSbv1rc53IE1x8mfnjNaH3yeTZxAhWL0
TvhFqyJ4pMLFPSPjUFGw3oUPQqyTyhJFo88eBXaMOKHCvn1QJWFDIkX9yZ31OvrW
iF1gVXGbJmZiZxCJCX/H7XmPzVMKZpjEV3fvnjATT16+yY71yUHDQm/m8Zu0hF7v
dbzofKSK1cHgo21DOSBILVqr/EiJS9nee+cQcDnapCQcBj1lnhZr8VsD9eELmH4C
duzetEMGfS0GQRLy30w+XsofYOQ2M3IjZ4XAPEsZHR4M+tqU5t71eO24RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCI+VrxpObAI7Eak1HKuRBByArHzMB8GA1UdIwQY
MBaAFGaDqWz1EaZ5GdkA8/yTQJk0H4fYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNTQwZTMtZDJjNy00ZjA4LTkxNzgt
YWUzMDY4NmM4NTg5LzEvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9jNTQwZTMtZDJjNy00ZjA4LTkxNzgtYWUzMDY4NmM4NTg5
LzEvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABedjkTy0
TiaXx8vN2hb2oiylY8l6AW8iUu+4kQDX9SRpIcJ+/Z6TRdKel6xop+1ZRSUmoA7L
BAuMPq2AI0I/M6JMuHWKaYlLFwtnOAeSAhmTHmLubTc5yOXxmrNOtpEGcJvQRbWX
7mRRcY24SnXVQ3PIkf6jCYBFHPzTvimOONW8CNWSR5OFbvGaOj+k9OEP3bVTvCXF
1jhLyoaZvPAFNrKxjdUqMUYl6QgibbZSZ2zIc2wqYqMJv83sJw3AKqFoqXO3Y+un
kRsaScSQb/pYopb6wdaBzqKu7xVbR3iu3tvw6E5kQlaxfX+I6gJQEN6B/+14HH00
Yr9C5ydr03/bFw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:48 2026 by rpki-client