Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
File: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json)
Hash identifier: mke+/wT0OeueEDbWKDmTG5gN0CXMxKZOlIneR0XeczQ=
Subject key identifier: BE:AB:88:89:00:47:43:11:86:BA:25:C5:8A:28:0D:43:09:BE:8B:AE
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Certificate issuer: /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial: 019D3A1CFC7B96EE8CB20C0530DC92B9567C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
Manifest number: 0E8C
Signing time: Sun 29 Mar 2026 15:01:11 +0000
Manifest this update: Sun 29 Mar 2026 15:01:11 +0000
Manifest next update: Mon 30 Mar 2026 15:01:11 +0000
Files and hashes: 1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: Gb0e1lzvIvdiNesj30oT840Y8eTDBEfIzOb6uWffSGg=)
2: lnfrhHR0jynfR2q7TVFHy_A4Fqo.roa (hash: WwqXm5S9kqC02dQFsZ5mFoZfT2ZEKlRHGYMQ2u0hdl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:fc:7b:96:ee:8c:b2:0c:05:30:dc:92:b9:56:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
Validity
Not Before: Mar 29 15:01:11 2026 GMT
Not After : Mar 30 15:01:11 2026 GMT
Subject: CN=beab88890047431186ba25c58a280d4309be8bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:49:7e:0e:08:96:c4:c2:e7:f9:1f:1d:87:
d4:01:41:b9:45:65:86:22:2c:21:4d:13:c0:dd:a6:
ee:f7:93:12:1e:13:87:44:ad:17:3f:df:66:61:e2:
1e:7a:92:4f:11:bd:6f:cb:34:df:80:44:88:2d:ea:
06:75:5c:e6:ed:bd:47:a4:e4:b1:ac:35:b2:c5:ff:
8e:b7:3b:cc:b5:33:3e:d8:2b:91:e2:55:b0:f6:02:
f6:0a:1e:45:0e:6d:e3:ec:fb:6a:43:08:74:32:09:
f5:bc:4f:31:10:11:f8:ca:e6:e5:52:f7:2e:6b:1d:
42:48:cd:bc:a3:43:ec:30:58:e2:81:c1:c5:e2:0b:
9c:c6:9f:e8:2a:da:e6:bc:40:85:db:2d:38:fd:98:
39:06:e2:61:57:f2:65:ed:fe:53:7a:68:8c:42:41:
8b:a6:94:91:f6:9b:f7:ff:4b:f2:df:6c:a5:91:01:
9a:11:a1:d9:3f:d5:52:5e:66:7f:96:29:6c:5a:e7:
41:10:d3:f9:c8:8b:b4:7e:11:ea:64:22:13:76:51:
85:a6:03:2a:03:bc:68:f0:d3:8b:0a:6d:45:b2:a4:
62:8e:63:56:c8:8c:9b:d5:5c:c2:e0:bd:7f:05:43:
ac:ac:b0:e2:54:cf:57:65:f2:cf:07:ca:a9:48:36:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AB:88:89:00:47:43:11:86:BA:25:C5:8A:28:0D:43:09:BE:8B:AE
X509v3 Authority Key Identifier:
keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:40:24:b8:c0:86:a3:a8:eb:6c:43:85:71:e1:5d:f5:22:f8:
a7:09:02:bd:08:28:2a:ce:4d:33:d1:72:39:01:3f:f8:8c:e9:
8c:5e:60:47:13:a9:24:98:ec:ca:23:52:7e:a8:71:ec:f0:94:
ae:90:66:bd:ea:bc:f4:63:c6:70:c9:53:6f:97:d9:0d:46:b4:
f6:fb:5d:ed:4d:af:d1:42:0c:29:42:68:99:69:f2:a9:90:1b:
ab:45:6f:d7:2d:b2:37:ec:b3:33:5e:56:4f:52:0d:f6:4d:69:
9c:6a:31:d9:ca:c1:83:21:82:d4:38:a0:a9:fa:5d:02:8e:27:
ee:e6:b1:02:a7:23:e9:67:6c:6a:40:68:b3:57:a1:5b:33:da:
a9:aa:aa:60:88:63:09:a8:bc:2b:32:8b:dc:3b:37:ba:79:ab:
c2:ca:a0:ec:87:0e:21:ea:77:25:a9:7e:06:5a:f7:b9:e0:db:
37:5f:db:76:88:6b:80:53:06:c0:14:41:09:5f:86:08:4a:ef:
8b:6c:92:8e:c7:e5:f8:e3:49:2c:a9:f5:ab:a9:f4:db:a2:1c:
1e:13:30:2b:42:b8:e2:88:ea:28:9c:1e:24:a9:a7:bc:b0:ad:
a3:ac:04:77:fe:7d:d1:91:03:d4:77:d0:09:7c:96:8e:2d:15:
1e:11:b7:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HPx7lu6MsgwFMNySuVZ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTExNTEwYTA5OTc5ZTU0ZTdhMTQ5MThjMGI4MjhiODIz
N2Y4NzYwHhcNMjYwMzI5MTUwMTExWhcNMjYwMzMwMTUwMTExWjAzMTEwLwYDVQQD
EyhiZWFiODg4OTAwNDc0MzExODZiYTI1YzU4YTI4MGQ0MzA5YmU4YmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotlJfg4IlsTC5/kfHYfUAUG5RWWG
IiwhTRPA3abu95MSHhOHRK0XP99mYeIeepJPEb1vyzTfgESILeoGdVzm7b1HpOSx
rDWyxf+OtzvMtTM+2CuR4lWw9gL2Ch5FDm3j7PtqQwh0Mgn1vE8xEBH4yublUvcu
ax1CSM28o0PsMFjigcHF4gucxp/oKtrmvECF2y04/Zg5BuJhV/Jl7f5TemiMQkGL
ppSR9pv3/0vy32ylkQGaEaHZP9VSXmZ/lilsWudBENP5yIu0fhHqZCITdlGFpgMq
A7xo8NOLCm1FsqRijmNWyIyb1VzC4L1/BUOsrLDiVM9XZfLPB8qpSDa0ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6riIkAR0MRhrolxYooDUMJvouuMB8GA1UdIwQY
MBaAFNGRFRCgmXnlTnoUkYwLgouCN/h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjIt
OGY3NmJmNzZjZjQ2LzEvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjItOGY3NmJmNzZjZjQ2
LzEvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEAkuMCG
o6jrbEOFceFd9SL4pwkCvQgoKs5NM9FyOQE/+IzpjF5gRxOpJJjsyiNSfqhx7PCU
rpBmveq89GPGcMlTb5fZDUa09vtd7U2v0UIMKUJomWnyqZAbq0Vv1y2yN+yzM15W
T1IN9k1pnGox2crBgyGC1DigqfpdAo4n7uaxAqcj6WdsakBos1ehWzPaqaqqYIhj
Cai8KzKL3Ds3unmrwsqg7IcOIep3Jal+Blr3ueDbN1/bdohrgFMGwBRBCV+GCErv
i2ySjsfl+ONJLKn1q6n026IcHhMwK0K44ojqKJweJKmnvLCto6wEd/590ZED1HfQ
CXyWji0VHhG3dQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:14 2026 by rpki-client