Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json)
Hash identifier: 9h7DwMdj6rWeeTGzA1LGPLHWqqYXEoha76ZfgPu/cYw=
Subject key identifier: F1:C5:57:18:0B:DE:A8:83:72:5E:A9:D5:8C:48:A1:00:3B:19:9B:78
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial: 019D3940DF9CA4CAC9439CBA6A0A46A1230B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 11:00:45 +0000
Manifest this update: Sun 29 Mar 2026 11:00:45 +0000
Manifest next update: Mon 30 Mar 2026 11:00:45 +0000
Files and hashes: 1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: A3Bt1CnRmecbyUjTBnFap+AA19MNxYHpnlxHuaF8my0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:df:9c:a4:ca:c9:43:9c:ba:6a:0a:46:a1:23:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Validity
Not Before: Mar 29 11:00:45 2026 GMT
Not After : Mar 30 11:00:45 2026 GMT
Subject: CN=f1c557180bdea883725ea9d58c48a1003b199b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:81:b2:a8:c5:66:73:47:35:ac:12:d8:ba:
ed:2f:5f:73:e6:f8:fd:99:b6:c7:aa:48:ac:8f:19:
2d:27:8e:5d:11:d6:bf:9d:1b:21:da:21:90:06:2f:
d0:99:db:69:d8:32:02:39:f6:4c:e0:d4:3a:e3:a0:
b5:e3:dc:72:1d:50:48:ca:cd:f0:da:df:cc:6c:7e:
80:2a:c3:1b:0e:aa:43:5f:25:1e:8d:c5:57:bc:cf:
3b:59:e5:87:dc:7f:10:10:7d:98:5d:4a:d4:07:b3:
4b:f2:60:3c:f8:83:12:ea:76:4f:86:6c:4d:81:52:
e8:70:24:11:44:2a:b8:ac:ec:a2:67:fa:c4:d8:30:
7b:c9:54:c2:7d:b6:2e:8f:2e:7e:5e:53:fa:a0:01:
d9:26:6e:b7:67:33:1e:68:b8:a4:aa:13:e6:46:7e:
fd:28:c9:df:ad:d6:d5:d6:f6:68:47:5f:07:fe:7b:
20:9a:e7:e6:e5:84:89:f6:27:3a:f6:27:f5:2e:89:
8e:af:ff:4f:ee:5f:4a:0f:ed:0e:11:9e:55:23:56:
70:1b:5b:72:b6:7c:bb:33:1f:03:c2:82:42:be:69:
74:04:d0:ea:6e:cb:90:8b:a6:c0:33:3d:42:b0:8c:
c3:d4:e8:61:c7:c9:52:0e:ad:af:a3:86:a0:6a:ec:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C5:57:18:0B:DE:A8:83:72:5E:A9:D5:8C:48:A1:00:3B:19:9B:78
X509v3 Authority Key Identifier:
keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c0:ba:6b:a7:19:91:bb:55:0b:09:1f:01:6a:48:ed:15:47:
c1:86:67:ad:ea:ea:16:ae:7d:f0:6f:36:4c:65:c6:25:64:63:
4a:f2:a0:4b:6a:c5:4c:63:b6:43:59:91:2c:8a:ca:6d:95:6b:
82:53:e1:28:15:84:98:85:73:4f:3d:d4:3e:06:d9:0d:0f:54:
10:e5:13:9e:b0:da:78:0a:99:77:10:21:7a:34:18:24:a7:46:
ba:51:c6:c6:a6:90:c9:40:d9:47:e9:07:85:52:98:eb:de:15:
1d:5d:f9:da:55:d9:65:5a:9d:53:bd:22:1b:47:7d:f1:1c:7b:
4e:a0:3d:5e:23:d9:09:5b:58:dc:c9:36:e8:76:24:a7:3b:2e:
fc:2a:1a:b4:1d:a5:77:ad:78:eb:cd:10:9d:a3:76:8e:36:c2:
2d:19:c6:4f:ed:48:32:4f:af:3e:e8:45:50:9f:f8:f1:e9:29:
97:90:e1:1b:b7:07:f6:76:6e:1b:e9:6a:1d:97:22:b0:af:eb:
8d:e3:82:ed:62:e2:0d:b8:b0:6b:24:a6:96:b5:46:ca:53:de:
2a:a3:d2:07:1d:6c:86:2b:ab:6c:00:66:9e:f4:c5:85:14:53:
92:c8:cd:4d:4a:74:c4:64:47:f5:32:d0:04:69:19:a2:de:f5:
73:0c:57:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QN+cpMrJQ5y6agpGoSMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYzg0MDgyYmU5NmU2MDlkOWRlOTgwOGZiYzM3ODY2ZmVi
NGM1NGIwHhcNMjYwMzI5MTEwMDQ1WhcNMjYwMzMwMTEwMDQ1WjAzMTEwLwYDVQQD
EyhmMWM1NTcxODBiZGVhODgzNzI1ZWE5ZDU4YzQ4YTEwMDNiMTk5Yjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutqBsqjFZnNHNawS2LrtL19z5vj9
mbbHqkisjxktJ45dEda/nRsh2iGQBi/Qmdtp2DICOfZM4NQ646C149xyHVBIys3w
2t/MbH6AKsMbDqpDXyUejcVXvM87WeWH3H8QEH2YXUrUB7NL8mA8+IMS6nZPhmxN
gVLocCQRRCq4rOyiZ/rE2DB7yVTCfbYujy5+XlP6oAHZJm63ZzMeaLikqhPmRn79
KMnfrdbV1vZoR18H/nsgmufm5YSJ9ic69if1LomOr/9P7l9KD+0OEZ5VI1ZwG1ty
tny7Mx8DwoJCvml0BNDqbsuQi6bAMz1CsIzD1Ohhx8lSDq2vo4agauwbAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHFVxgL3qiDcl6p1YxIoQA7GZt4MB8GA1UdIwQY
MBaAFM3IQIK+luYJ2d6YCPvDeGb+tMVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iN2JmOTQtMzc3Yi00NDAwLThiOWMt
Y2JmMTY0ZThiZTAxLzEvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iN2JmOTQtMzc3Yi00NDAwLThiOWMtY2JmMTY0ZThiZTAx
LzEvemNoQWdyNlc1Z25aM3BnSS04TjRadjYweFVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8C6a6cZ
kbtVCwkfAWpI7RVHwYZnrerqFq598G82TGXGJWRjSvKgS2rFTGO2Q1mRLIrKbZVr
glPhKBWEmIVzTz3UPgbZDQ9UEOUTnrDaeAqZdxAhejQYJKdGulHGxqaQyUDZR+kH
hVKY694VHV352lXZZVqdU70iG0d98Rx7TqA9XiPZCVtY3Mk26HYkpzsu/CoatB2l
d614680QnaN2jjbCLRnGT+1IMk+vPuhFUJ/48ekpl5DhG7cH9nZuG+lqHZcisK/r
jeOC7WLiDbiwaySmlrVGylPeKqPSBx1shiurbABmnvTFhRRTksjNTUp0xGRH9TLQ
BGkZot71cwxXnA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:09 2026 by rpki-client