Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/ZY0jvF0gCXiQZBIBVZcWjrI0KZQ.mft
File: ZY0jvF0gCXiQZBIBVZcWjrI0KZQ.mft (raw, json)
Hash identifier: PJYAAN/383QcOWiU/IMl4WVOeH65vbHkEa8Z5tS1BmQ=
Subject key identifier: EB:91:79:A1:D7:67:95:E7:80:8C:3D:CA:52:C7:7F:EA:53:2A:5D:30
Authority key identifier: 65:8D:23:BC:5D:20:09:78:90:64:12:01:55:97:16:8E:B2:34:29:94
Certificate issuer: /CN=658d23bc5d200978906412015597168eb2342994
Certificate serial: 019D37531BA9A7EC3E3FB68EC54DE3C82595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZY0jvF0gCXiQZBIBVZcWjrI0KZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/ZY0jvF0gCXiQZBIBVZcWjrI0KZQ.mft
Manifest number: 05
Signing time: Sun 29 Mar 2026 02:01:26 +0000
Manifest this update: Sun 29 Mar 2026 02:01:26 +0000
Manifest next update: Mon 30 Mar 2026 02:01:26 +0000
Files and hashes: 1: ZY0jvF0gCXiQZBIBVZcWjrI0KZQ.crl (hash: Zhm4Zw/2YvZc7APoW9CiG9bJ5i547lkujFTVmualufI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/ZY0jvF0gCXiQZBIBVZcWjrI0KZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/ZY0jvF0gCXiQZBIBVZcWjrI0KZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZY0jvF0gCXiQZBIBVZcWjrI0KZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:1b:a9:a7:ec:3e:3f:b6:8e:c5:4d:e3:c8:25:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658d23bc5d200978906412015597168eb2342994
Validity
Not Before: Mar 29 02:01:26 2026 GMT
Not After : Mar 30 02:01:26 2026 GMT
Subject: CN=eb9179a1d76795e7808c3dca52c77fea532a5d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:ad:7a:2a:04:22:87:2a:f2:15:10:2a:57:
b0:a3:56:52:4a:b0:47:42:43:29:21:c7:fe:75:76:
68:a2:f4:87:d0:8a:93:f7:0a:82:17:a0:6a:0e:bf:
df:53:2e:42:d9:80:64:9d:a7:35:8e:a1:cb:6c:1f:
2d:40:cd:64:ef:83:14:01:51:f0:22:b4:ba:12:f0:
32:b9:be:45:22:e2:29:fb:bb:33:8b:51:0f:06:2f:
a9:ba:fd:52:ad:15:c3:41:85:07:5a:8f:bb:4e:60:
40:27:3c:f5:b5:14:19:0b:33:cd:c2:e5:2e:25:c0:
7d:b4:ee:66:26:57:d6:ba:bf:8f:77:06:73:e9:cf:
35:3e:57:a1:36:3d:88:33:87:62:0e:82:de:51:04:
56:7e:8a:cc:00:74:b7:ba:74:00:6d:95:67:90:07:
ac:50:12:c4:bb:0e:4a:24:71:2f:30:29:d4:fd:5b:
6f:b8:b1:65:a2:c3:6e:07:0b:90:e5:f7:94:97:7a:
cf:c8:67:d2:8b:e9:75:a1:ef:d8:61:96:f6:71:ec:
9b:0e:27:ee:f7:30:fd:00:65:7e:b1:7d:40:9b:74:
bc:4d:5e:6a:8f:4a:cb:b4:db:73:9a:4a:d8:63:87:
e1:e4:5a:d2:65:b5:0d:b1:09:fa:ac:3d:fe:00:06:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:91:79:A1:D7:67:95:E7:80:8C:3D:CA:52:C7:7F:EA:53:2A:5D:30
X509v3 Authority Key Identifier:
keyid:65:8D:23:BC:5D:20:09:78:90:64:12:01:55:97:16:8E:B2:34:29:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZY0jvF0gCXiQZBIBVZcWjrI0KZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/ZY0jvF0gCXiQZBIBVZcWjrI0KZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dd4cc6-0c25-4488-8c8f-77902d9613ea/1/ZY0jvF0gCXiQZBIBVZcWjrI0KZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:20:24:24:92:19:91:6a:59:fc:a5:71:72:b5:7b:59:c7:af:
93:a8:00:5d:d1:ff:18:14:f0:48:ae:d2:b1:5b:b5:c9:3c:1a:
a1:e9:7a:27:3c:a8:73:2d:1a:9c:09:e8:5c:96:2c:25:3d:29:
de:7a:ec:04:3f:fb:f8:23:c7:38:fa:89:0c:b3:b4:ca:88:fe:
4e:4d:b1:a1:f1:4a:34:fd:68:7a:92:b8:2d:4c:e0:93:aa:1a:
35:82:bf:99:79:57:a3:74:02:b8:8f:b8:80:49:05:fb:22:27:
22:03:25:96:86:35:8f:27:a4:91:72:08:55:d4:ab:92:ce:ae:
ed:be:76:79:8a:f9:57:a0:77:f1:7f:4f:f4:27:1f:ce:93:db:
7d:d9:81:0c:e2:1d:f3:cc:a7:ed:e2:c2:16:63:13:a5:57:31:
de:ce:23:44:5c:2e:c6:c8:86:c7:72:8b:cf:b5:f1:7e:7f:30:
0f:36:7a:f7:d0:6a:d8:c6:da:23:e3:3d:9e:f2:fc:0c:19:af:
f8:2c:66:ee:e1:00:96:01:20:73:d5:a0:75:6e:fd:55:2c:32:
ba:ab:85:f9:fe:e1:4d:12:3b:a8:df:7f:6a:64:1c:26:80:35:
be:51:fc:ce:8d:81:b9:c6:c1:e3:78:c5:6b:be:8d:11:c1:72:
da:43:65:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uxupp+w+P7aOxU3jyCWVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OGQyM2JjNWQyMDA5Nzg5MDY0MTIwMTU1OTcxNjhlYjIz
NDI5OTQwHhcNMjYwMzI5MDIwMTI2WhcNMjYwMzMwMDIwMTI2WjAzMTEwLwYDVQQD
EyhlYjkxNzlhMWQ3Njc5NWU3ODA4YzNkY2E1MmM3N2ZlYTUzMmE1ZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUSteioEIocq8hUQKlewo1ZSSrBH
QkMpIcf+dXZoovSH0IqT9wqCF6BqDr/fUy5C2YBknac1jqHLbB8tQM1k74MUAVHw
IrS6EvAyub5FIuIp+7szi1EPBi+puv1SrRXDQYUHWo+7TmBAJzz1tRQZCzPNwuUu
JcB9tO5mJlfWur+PdwZz6c81PlehNj2IM4diDoLeUQRWforMAHS3unQAbZVnkAes
UBLEuw5KJHEvMCnU/VtvuLFlosNuBwuQ5feUl3rPyGfSi+l1oe/YYZb2ceybDifu
9zD9AGV+sX1Am3S8TV5qj0rLtNtzmkrYY4fh5FrSZbUNsQn6rD3+AAYgBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuReaHXZ5XngIw9ylLHf+pTKl0wMB8GA1UdIwQY
MBaAFGWNI7xdIAl4kGQSAVWXFo6yNCmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlkwanZGMGdDWGlRWkJJQlZaY1dqckkwS1pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9kZDRjYzYtMGMyNS00NDg4LThjOGYt
Nzc5MDJkOTYxM2VhLzEvWlkwanZGMGdDWGlRWkJJQlZaY1dqckkwS1pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9kZDRjYzYtMGMyNS00NDg4LThjOGYtNzc5MDJkOTYxM2Vh
LzEvWlkwanZGMGdDWGlRWkJJQlZaY1dqckkwS1pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiAkJJIZ
kWpZ/KVxcrV7Wcevk6gAXdH/GBTwSK7SsVu1yTwaoel6Jzyocy0anAnoXJYsJT0p
3nrsBD/7+CPHOPqJDLO0yoj+Tk2xofFKNP1oepK4LUzgk6oaNYK/mXlXo3QCuI+4
gEkF+yInIgMlloY1jyekkXIIVdSrks6u7b52eYr5V6B38X9P9CcfzpPbfdmBDOId
88yn7eLCFmMTpVcx3s4jRFwuxsiGx3KLz7Xxfn8wDzZ699Bq2MbaI+M9nvL8DBmv
+Cxm7uEAlgEgc9WgdW79VSwyuquF+f7hTRI7qN9/amQcJoA1vlH8zo2BucbB43jF
a76NEcFy2kNlpw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:05 2026 by rpki-client