Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
File: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft (raw, json)
Hash identifier: DY9XEIULHMz9253qbnF+fY1TslEyqpp4U75OMkB+t2c=
Subject key identifier: 13:49:1B:30:0E:20:01:45:DE:84:57:B4:21:96:C3:7C:52:01:92:69
Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
Certificate issuer: /CN=646836c9214faaa16798a93e8773e599534b29d7
Certificate serial: 019D37520F7AFDEC2A9A531930E561FE07C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
Manifest number: 09FC
Signing time: Sun 29 Mar 2026 02:00:17 +0000
Manifest this update: Sun 29 Mar 2026 02:00:17 +0000
Manifest next update: Mon 30 Mar 2026 02:00:17 +0000
Files and hashes: 1: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl (hash: 5tyTsJvYC/BqwGdLFKkGrKoMJy4fAICmUAdY9mXzNsA=)
2: xqX86PxnYUFgmbMyGq-FYjU7myI.roa (hash: LU7BTND6Kz806aRKd+CDSvMICobI0jgTkTNE1f7lbDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:0f:7a:fd:ec:2a:9a:53:19:30:e5:61:fe:07:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7
Validity
Not Before: Mar 29 02:00:17 2026 GMT
Not After : Mar 30 02:00:17 2026 GMT
Subject: CN=13491b300e200145de8457b42196c37c52019269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:11:f0:7e:4c:51:2a:d1:06:af:8f:5d:d9:
e0:85:71:7e:56:2b:ac:db:69:a7:bc:80:8c:9e:9b:
1c:f6:4e:5d:b7:8b:3c:c4:f1:3d:64:6b:b3:c8:87:
c7:ff:27:23:c1:cf:08:35:3e:e6:eb:19:a3:6e:fe:
9a:a8:4a:bd:d5:a7:c2:f3:3f:42:d4:6a:c0:48:63:
16:5d:6d:f3:30:37:23:d0:d0:9f:c8:80:0c:9a:d1:
89:1f:2c:65:fc:83:39:e6:33:4f:d2:26:dd:1d:34:
a5:31:be:e5:b4:07:84:b0:02:10:3b:da:50:57:04:
aa:93:b5:c6:84:c4:8c:68:72:7f:ad:33:cb:be:c8:
c8:94:5c:ec:bb:53:d6:4f:fa:5b:0e:cc:dc:d6:06:
7b:b7:28:af:e7:7e:75:32:99:80:6b:cd:9e:e2:5b:
4e:72:f4:ef:4c:73:ec:12:e7:7c:72:07:de:78:9c:
b0:c0:5e:86:c7:36:e7:d2:13:da:64:43:75:08:ad:
53:20:fa:6e:26:5f:5c:87:37:04:78:fb:5a:7c:9e:
a0:4d:c8:75:4e:ae:7d:f5:76:3e:8e:3e:8e:3f:e9:
88:4a:50:a1:7b:ed:a6:c2:56:b8:fb:84:90:15:f5:
be:47:17:26:73:87:d6:5f:75:c9:7b:c3:4b:1d:b7:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:49:1B:30:0E:20:01:45:DE:84:57:B4:21:96:C3:7C:52:01:92:69
X509v3 Authority Key Identifier:
keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1c:9a:9a:8e:ae:0c:6e:11:f3:00:db:71:69:87:30:0d:ee:
86:cb:9a:cb:19:b7:23:3d:4f:8c:d5:87:1c:66:36:e3:b5:5b:
53:1b:c5:72:a9:11:d5:52:65:52:ef:f9:4c:1e:8b:46:b1:b8:
16:30:8e:02:af:58:51:ce:fb:a5:2c:b3:c3:11:bb:37:9a:a8:
d8:7a:0e:ee:49:3a:bf:f1:ac:8d:d3:28:39:a0:f6:f2:45:c5:
4e:d2:c0:bd:cb:15:22:13:e2:aa:ca:e4:6c:4c:26:79:a7:9e:
75:17:6d:09:c3:52:c3:06:d7:34:dd:80:99:31:59:3c:b0:95:
80:70:20:a6:e9:15:b2:b4:b4:ee:08:aa:11:d4:10:e6:1d:0b:
d6:02:5e:d6:87:0d:39:4a:86:93:15:0c:4f:11:b7:15:71:15:
34:ba:ff:c7:6c:01:c5:1d:63:25:ae:a5:c0:48:61:51:8f:94:
3e:be:3d:4e:ca:9d:3c:da:b4:2d:c0:ff:44:da:a8:5c:7c:e3:
53:88:c4:c1:4a:49:71:bc:68:ff:12:c1:24:08:e8:c3:99:5a:
c2:e4:cc:3a:8f:12:3f:64:f5:27:9e:3c:07:4c:44:07:4a:fd:
71:c2:6f:f3:e6:ef:fd:2f:df:10:37:ed:2a:28:b4:00:84:c1:
b2:8a:fa:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Ug96/ewqmlMZMOVh/gfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjgzNmM5MjE0ZmFhYTE2Nzk4YTkzZTg3NzNlNTk5NTM0
YjI5ZDcwHhcNMjYwMzI5MDIwMDE3WhcNMjYwMzMwMDIwMDE3WjAzMTEwLwYDVQQD
EygxMzQ5MWIzMDBlMjAwMTQ1ZGU4NDU3YjQyMTk2YzM3YzUyMDE5MjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BoR8H5MUSrRBq+PXdnghXF+Vius
22mnvICMnpsc9k5dt4s8xPE9ZGuzyIfH/ycjwc8INT7m6xmjbv6aqEq91afC8z9C
1GrASGMWXW3zMDcj0NCfyIAMmtGJHyxl/IM55jNP0ibdHTSlMb7ltAeEsAIQO9pQ
VwSqk7XGhMSMaHJ/rTPLvsjIlFzsu1PWT/pbDszc1gZ7tyiv5351MpmAa82e4ltO
cvTvTHPsEud8cgfeeJywwF6Gxzbn0hPaZEN1CK1TIPpuJl9chzcEePtafJ6gTch1
Tq599XY+jj6OP+mISlChe+2mwla4+4SQFfW+Rxcmc4fWX3XJe8NLHbcNcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNJGzAOIAFF3oRXtCGWw3xSAZJpMB8GA1UdIwQY
MBaAFGRoNskhT6qhZ5ipPodz5ZlTSynXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYt
NWU4MjJmMzEwNjM4LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYtNWU4MjJmMzEwNjM4
LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhyamo6u
DG4R8wDbcWmHMA3uhsuayxm3Iz1PjNWHHGY247VbUxvFcqkR1VJlUu/5TB6LRrG4
FjCOAq9YUc77pSyzwxG7N5qo2HoO7kk6v/GsjdMoOaD28kXFTtLAvcsVIhPiqsrk
bEwmeaeedRdtCcNSwwbXNN2AmTFZPLCVgHAgpukVsrS07giqEdQQ5h0L1gJe1ocN
OUqGkxUMTxG3FXEVNLr/x2wBxR1jJa6lwEhhUY+UPr49TsqdPNq0LcD/RNqoXHzj
U4jEwUpJcbxo/xLBJAjow5lawuTMOo8SP2T1J548B0xEB0r9ccJv8+bv/S/fEDft
Kii0AITBsor69g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:48 2026 by rpki-client