Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json)
Hash identifier: G7Vr5bl0TwCYviaje6PakiLTZVjADopc6C625fCw8hs=
Subject key identifier: D4:35:98:82:D2:C8:A3:6E:36:98:9F:55:5F:4B:45:F7:F6:31:4D:2A
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 019D3977A9F2ABAD5781C7506FDDA424E4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
Manifest number: 0B52
Signing time: Sun 29 Mar 2026 12:00:36 +0000
Manifest this update: Sun 29 Mar 2026 12:00:36 +0000
Manifest next update: Mon 30 Mar 2026 12:00:36 +0000
Files and hashes: 1: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: LNJLmEq5JuDkgJIfT/6M1KYdJYNFP/GTDdO4VNS/gAQ=)
2: YAsr4AMd-DQg17IKnmJqPsKycSA.roa (hash: g07FXjeIHQJ20whOb8MTucqM4PupENC/MFjlVryEQbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a9:f2:ab:ad:57:81:c7:50:6f:dd:a4:24:e4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: Mar 29 12:00:36 2026 GMT
Not After : Mar 30 12:00:36 2026 GMT
Subject: CN=d4359882d2c8a36e36989f555f4b45f7f6314d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:65:0a:82:47:e2:f6:db:e0:b4:90:53:56:
5b:13:13:66:77:e9:89:16:47:5c:41:f5:07:13:c0:
5d:9c:a1:f8:76:b0:bf:b5:0c:f5:f4:12:7e:50:e9:
16:07:e1:13:02:39:dc:1c:cf:ed:eb:65:f2:a2:98:
90:c3:64:2a:d0:47:fb:6c:86:8e:88:c6:60:1e:0a:
55:4f:56:e2:90:65:87:52:77:0a:5d:4d:cb:9b:2a:
fd:7a:25:20:8f:65:1d:d7:96:96:1d:06:5e:f9:00:
79:2a:1f:ca:b9:3b:55:10:60:1f:7b:52:f9:14:85:
68:15:b2:23:f2:e6:3d:4e:68:57:2f:a8:35:1b:0d:
6d:ca:9c:6c:2e:d2:84:ed:2f:9f:ae:da:c9:b5:a5:
d8:0f:e6:0f:6c:47:97:2e:06:bf:c3:1a:46:d6:25:
5e:17:90:da:5f:62:55:74:eb:72:ef:54:4f:85:52:
51:e4:6a:1d:25:a5:e0:e5:80:46:24:7e:cb:d9:5c:
2f:59:96:86:df:be:54:77:97:1c:f7:f9:0e:05:81:
9e:f4:8c:b8:52:75:23:96:12:b8:bd:1a:ab:55:06:
49:0e:26:8f:6e:ab:5e:55:2c:dd:83:73:7e:2f:9a:
ae:c5:a5:69:e0:d2:50:13:d2:f9:d6:0d:ec:e1:26:
91:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:35:98:82:D2:C8:A3:6E:36:98:9F:55:5F:4B:45:F7:F6:31:4D:2A
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f3:7f:09:8b:0a:0e:dd:d1:db:3a:29:8e:4b:f6:1d:16:e5:
0e:f6:cc:1d:4c:80:95:bd:be:cd:bd:e6:94:76:34:01:2a:f1:
03:c1:12:79:e5:48:ce:13:0a:bc:df:95:08:2e:ce:0c:bc:5c:
f3:1a:f7:3d:69:3c:46:8c:12:91:8a:27:dd:a2:c9:55:26:ac:
e1:2c:be:7d:de:dd:66:e5:fa:16:5b:e3:9d:a3:1d:d6:0a:7d:
2a:70:44:b7:17:3b:31:74:8c:1a:9a:7c:7d:5c:d9:5b:0a:0c:
db:ad:ed:f4:16:10:a4:c9:bd:86:e8:98:f6:78:81:45:3f:15:
50:d4:b0:16:3d:44:81:70:9e:94:57:34:b7:63:2c:6d:b6:ae:
21:3e:cf:84:c5:ae:aa:9d:d2:03:e0:d6:7e:69:73:b0:e7:71:
56:17:b3:db:88:07:a0:e3:ca:1a:cd:ac:c8:07:14:be:6c:7f:
88:cd:59:b7:4a:62:02:75:46:0f:f7:27:87:96:21:51:77:89:
c4:6d:b3:6c:78:a4:39:d4:3a:62:34:29:ef:24:e2:6d:a6:f0:
96:0c:a3:81:26:57:46:4c:4a:30:43:ac:aa:9c:d6:5a:59:11:
a1:d3:32:cc:8a:cf:77:48:cd:c1:68:72:6b:0d:c1:96:5a:90:
88:72:54:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d6nyq61XgcdQb92kJOT9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTllZDg0ZTRiMjExY2M4YmFhODkxNDk3NDEzNTRmODg1
MGVmMGYwHhcNMjYwMzI5MTIwMDM2WhcNMjYwMzMwMTIwMDM2WjAzMTEwLwYDVQQD
EyhkNDM1OTg4MmQyYzhhMzZlMzY5ODlmNTU1ZjRiNDVmN2Y2MzE0ZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneVlCoJH4vbb4LSQU1ZbExNmd+mJ
FkdcQfUHE8BdnKH4drC/tQz19BJ+UOkWB+ETAjncHM/t62XyopiQw2Qq0Ef7bIaO
iMZgHgpVT1bikGWHUncKXU3Lmyr9eiUgj2Ud15aWHQZe+QB5Kh/KuTtVEGAfe1L5
FIVoFbIj8uY9TmhXL6g1Gw1typxsLtKE7S+frtrJtaXYD+YPbEeXLga/wxpG1iVe
F5DaX2JVdOty71RPhVJR5GodJaXg5YBGJH7L2VwvWZaG375Ud5cc9/kOBYGe9Iy4
UnUjlhK4vRqrVQZJDiaPbqteVSzdg3N+L5quxaVp4NJQE9L51g3s4SaR2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQ1mILSyKNuNpifVV9LRff2MU0qMB8GA1UdIwQY
MBaAFEWZ7YTkshHMi6qJFJdBNU+IUO8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDkt
MTZmZmExMTQ2OTljLzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDktMTZmZmExMTQ2OTlj
LzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvN/CYsK
Dt3R2zopjkv2HRblDvbMHUyAlb2+zb3mlHY0ASrxA8ESeeVIzhMKvN+VCC7ODLxc
8xr3PWk8RowSkYon3aLJVSas4Sy+fd7dZuX6FlvjnaMd1gp9KnBEtxc7MXSMGpp8
fVzZWwoM263t9BYQpMm9huiY9niBRT8VUNSwFj1EgXCelFc0t2MsbbauIT7PhMWu
qp3SA+DWfmlzsOdxVhez24gHoOPKGs2syAcUvmx/iM1Zt0piAnVGD/cnh5YhUXeJ
xG2zbHikOdQ6YjQp7yTibabwlgyjgSZXRkxKMEOsqpzWWlkRodMyzIrPd0jNwWhy
aw3BllqQiHJUnQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:14 2026 by rpki-client