Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
File: z9LUeU5busDjTJ0BibJu8UcViiM.mft (raw, json)
Hash identifier: H0A5DRSVmPNFqXhLd8fg4zkYEwyhP/s9d092g9Czq5A=
Subject key identifier: AF:62:6E:35:B7:19:D0:07:CD:72:75:D6:56:63:FE:9F:62:19:22:31
Authority key identifier: CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
Certificate issuer: /CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Certificate serial: 019D39413618B0D4AD546FAA8CEDC277432B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
Manifest number: 60
Signing time: Sun 29 Mar 2026 11:01:08 +0000
Manifest this update: Sun 29 Mar 2026 11:01:08 +0000
Manifest next update: Mon 30 Mar 2026 11:01:08 +0000
Files and hashes: 1: z9LUeU5busDjTJ0BibJu8UcViiM.crl (hash: d5x1Ko3gHpl2VYkJweMCI8lBlNhVZi7a7b4U/P8umbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:36:18:b0:d4:ad:54:6f:aa:8c:ed:c2:77:43:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Validity
Not Before: Mar 29 11:01:08 2026 GMT
Not After : Mar 30 11:01:08 2026 GMT
Subject: CN=af626e35b719d007cd7275d65663fe9f62192231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:c5:87:74:24:91:6c:41:f1:93:62:18:18:
13:9a:7e:4d:39:8c:8a:f2:e2:f3:05:a6:7a:72:0c:
0f:5c:92:e1:cb:48:f4:60:ea:21:71:df:d3:f2:36:
ff:94:eb:96:12:1b:0a:78:ef:c7:6f:f1:06:79:34:
d8:db:8c:05:f2:4c:1e:6e:3a:03:37:41:74:e4:65:
04:7d:1d:e3:22:44:3f:bf:32:a6:1c:e2:e4:60:56:
ac:74:ed:23:43:d2:57:0f:00:4b:58:cb:53:b1:74:
47:8e:79:a9:a8:bb:51:1c:e7:bb:8e:0a:8a:fd:1f:
9a:83:10:95:f7:ee:6e:a9:ee:98:59:cd:f2:b6:7a:
46:23:e6:3e:63:16:dd:5a:b8:57:37:b6:f9:44:28:
18:72:cf:dd:8b:18:59:5a:b2:69:37:4b:23:5d:a1:
49:56:82:34:6f:fb:99:ec:33:93:0c:77:0c:fa:71:
be:d8:f6:bc:b9:7d:16:e5:31:b3:44:56:ed:64:72:
9f:83:9d:58:ba:8e:17:df:22:f7:50:63:6f:f3:90:
a1:30:b2:6e:5c:c1:d3:1f:6b:b0:b6:a0:da:34:6d:
b2:f2:ca:4b:b1:e1:32:3c:81:26:d3:a9:4f:a6:a5:
a7:a6:a2:05:bf:58:b9:42:a7:fc:e1:b0:46:7b:96:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:62:6E:35:B7:19:D0:07:CD:72:75:D6:56:63:FE:9F:62:19:22:31
X509v3 Authority Key Identifier:
keyid:CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:04:0a:7a:68:20:54:51:22:8d:e1:a2:dc:49:01:6c:cc:4c:
e4:e2:53:17:66:46:5a:d5:f2:b5:60:b7:b9:20:01:8e:ab:e6:
62:e5:e3:b2:8c:e0:cc:56:80:a7:ec:f6:5c:02:b4:fc:2a:63:
ca:1e:3e:17:c6:78:93:33:cb:af:e7:54:93:bc:8f:57:c6:2d:
f8:c7:82:3f:61:5c:04:4b:34:a9:f9:6c:5e:e1:61:f5:a4:3d:
74:53:00:ca:16:d0:a6:1b:3f:e8:10:56:10:cc:73:43:7c:d0:
8b:4a:43:ba:a5:17:f3:b5:c6:77:43:92:b2:71:1e:48:92:0a:
47:04:d7:63:3b:1b:0c:1f:74:a0:86:7a:22:7f:59:8c:fc:97:
83:00:bf:66:1f:0d:85:8f:8d:a9:f1:88:fe:3a:fa:f4:e3:9c:
78:2e:d8:15:0a:98:81:21:a4:41:5b:6b:fe:73:54:03:44:0b:
37:b2:d2:30:c0:09:30:86:8f:ab:da:ce:fe:2a:1b:d3:b7:1f:
40:a8:21:de:13:30:2e:58:51:aa:0f:5b:f0:53:c6:f0:43:bf:
f5:12:8e:0a:78:7c:65:9c:09:53:7d:a3:c7:18:81:c9:3b:12:
06:26:6a:d2:64:36:24:44:12:60:a4:39:83:f8:dd:ea:74:b2:
62:8b:5b:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QTYYsNStVG+qjO3Cd0MrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZDJkNDc5NGU1YmJhYzBlMzRjOWQwMTg5YjI2ZWYxNDcx
NThhMjMwHhcNMjYwMzI5MTEwMTA4WhcNMjYwMzMwMTEwMTA4WjAzMTEwLwYDVQQD
EyhhZjYyNmUzNWI3MTlkMDA3Y2Q3Mjc1ZDY1NjYzZmU5ZjYyMTkyMjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TbFh3QkkWxB8ZNiGBgTmn5NOYyK
8uLzBaZ6cgwPXJLhy0j0YOohcd/T8jb/lOuWEhsKeO/Hb/EGeTTY24wF8kwebjoD
N0F05GUEfR3jIkQ/vzKmHOLkYFasdO0jQ9JXDwBLWMtTsXRHjnmpqLtRHOe7jgqK
/R+agxCV9+5uqe6YWc3ytnpGI+Y+YxbdWrhXN7b5RCgYcs/dixhZWrJpN0sjXaFJ
VoI0b/uZ7DOTDHcM+nG+2Pa8uX0W5TGzRFbtZHKfg51Yuo4X3yL3UGNv85ChMLJu
XMHTH2uwtqDaNG2y8spLseEyPIEm06lPpqWnpqIFv1i5Qqf84bBGe5ZVfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9ibjW3GdAHzXJ11lZj/p9iGSIxMB8GA1UdIwQY
MBaAFM/S1HlOW7rA40ydAYmybvFHFYojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejlMVWVVNWJ1c0RqVEowQmliSnU4VWNWaWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hODIzN2QtMTMwNy00ZGZiLWFhZDYt
ZjkwYjNlNTQ5M2Q0LzEvejlMVWVVNWJ1c0RqVEowQmliSnU4VWNWaWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hODIzN2QtMTMwNy00ZGZiLWFhZDYtZjkwYjNlNTQ5M2Q0
LzEvejlMVWVVNWJ1c0RqVEowQmliSnU4VWNWaWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQQKemgg
VFEijeGi3EkBbMxM5OJTF2ZGWtXytWC3uSABjqvmYuXjsozgzFaAp+z2XAK0/Cpj
yh4+F8Z4kzPLr+dUk7yPV8Yt+MeCP2FcBEs0qflsXuFh9aQ9dFMAyhbQphs/6BBW
EMxzQ3zQi0pDuqUX87XGd0OSsnEeSJIKRwTXYzsbDB90oIZ6In9ZjPyXgwC/Zh8N
hY+NqfGI/jr69OOceC7YFQqYgSGkQVtr/nNUA0QLN7LSMMAJMIaPq9rO/iob07cf
QKgh3hMwLlhRqg9b8FPG8EO/9RKOCnh8ZZwJU32jxxiByTsSBiZq0mQ2JEQSYKQ5
g/jd6nSyYotbBg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:19 2026 by rpki-client