Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/Z7xlI-d4s702dMb5intsaL8Kju4.mft
File: Z7xlI-d4s702dMb5intsaL8Kju4.mft (raw, json)
Hash identifier: r7TjNZHdLCGeZZDxIDCe+VdxUv2GwYMaVO2M3zJxrZQ=
Subject key identifier: A7:01:B0:55:B9:30:36:2F:71:EB:E2:45:E0:40:30:51:D4:12:E5:3D
Authority key identifier: 67:BC:65:23:E7:78:B3:BD:36:74:C6:F9:8A:7B:6C:68:BF:0A:8E:EE
Certificate issuer: /CN=67bc6523e778b3bd3674c6f98a7b6c68bf0a8eee
Certificate serial: 019D38D3545C746678D85792A9F14E2ACC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7xlI-d4s702dMb5intsaL8Kju4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/Z7xlI-d4s702dMb5intsaL8Kju4.mft
Manifest number: A6
Signing time: Sun 29 Mar 2026 09:01:06 +0000
Manifest this update: Sun 29 Mar 2026 09:01:06 +0000
Manifest next update: Mon 30 Mar 2026 09:01:06 +0000
Files and hashes: 1: Z7xlI-d4s702dMb5intsaL8Kju4.crl (hash: G7KM0Yvp0hQt/NpstmJxhReEO28dvEtfWGOUJLnq1g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/Z7xlI-d4s702dMb5intsaL8Kju4.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/Z7xlI-d4s702dMb5intsaL8Kju4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7xlI-d4s702dMb5intsaL8Kju4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:54:5c:74:66:78:d8:57:92:a9:f1:4e:2a:cc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bc6523e778b3bd3674c6f98a7b6c68bf0a8eee
Validity
Not Before: Mar 29 09:01:06 2026 GMT
Not After : Mar 30 09:01:06 2026 GMT
Subject: CN=a701b055b930362f71ebe245e0403051d412e53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:f9:df:f8:d7:a8:7a:88:ee:a9:60:70:0c:
6c:f3:48:0b:72:f5:61:71:53:36:4a:d5:65:d3:f3:
f8:d3:20:3e:3f:c5:22:9f:df:0b:8e:86:c5:b8:c9:
28:f2:79:f3:7d:7a:b5:24:62:36:ae:e9:3a:c3:85:
e5:bb:9c:98:23:88:0c:2d:36:71:6f:a6:40:a6:b8:
25:39:d1:34:27:77:37:ae:d2:24:49:fd:60:4b:36:
d2:30:96:7a:47:6a:92:4d:3d:8c:b9:e5:9d:38:60:
b8:46:0e:57:11:9b:7d:aa:a5:d8:a8:30:06:cd:4d:
75:ed:f6:57:f3:e7:1c:9d:34:27:bf:48:63:2e:2e:
c3:52:5d:3a:95:87:c6:85:a5:a7:c3:fe:d3:8a:d6:
8b:43:7d:0f:0f:74:19:20:65:ab:93:7d:e1:0b:8a:
44:d9:ce:f4:9b:58:11:84:5b:7b:78:37:0e:f0:69:
b7:96:a2:e5:6b:b3:c4:a2:09:27:ed:d8:f1:df:89:
97:a5:a2:f7:6b:cc:fe:cf:f8:e2:ab:7c:82:67:66:
83:5e:78:b8:2d:4f:d9:fb:e7:13:a7:b3:02:41:a4:
5e:63:08:1e:bc:b3:77:1c:99:15:5d:22:ef:ae:cf:
eb:31:54:4b:07:bb:5e:04:52:20:49:21:ee:bb:91:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:01:B0:55:B9:30:36:2F:71:EB:E2:45:E0:40:30:51:D4:12:E5:3D
X509v3 Authority Key Identifier:
keyid:67:BC:65:23:E7:78:B3:BD:36:74:C6:F9:8A:7B:6C:68:BF:0A:8E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7xlI-d4s702dMb5intsaL8Kju4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/Z7xlI-d4s702dMb5intsaL8Kju4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/Z7xlI-d4s702dMb5intsaL8Kju4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4c:23:6c:bc:2a:73:67:86:ef:a8:fc:31:1b:3c:62:33:53:
91:19:a6:24:53:6b:27:fa:5c:98:64:ef:12:cf:16:dd:de:54:
e7:24:ce:72:54:74:e4:71:83:9d:31:ac:33:24:ff:fe:74:8c:
46:26:18:41:98:1a:d1:81:38:bd:89:60:38:4a:d4:48:9f:58:
b1:37:8f:e5:59:c4:f7:25:35:7f:c3:3e:bd:18:6f:d5:69:cc:
bd:fc:21:ee:81:1d:18:61:fd:e0:6c:65:1c:36:65:9b:e4:90:
51:11:59:ad:c5:5c:c0:8b:df:79:a7:1c:84:80:35:1d:b9:f7:
63:63:b2:27:cb:1d:8b:cc:86:e5:6b:be:d0:27:42:fb:c6:44:
49:2c:ec:48:ce:97:5b:6b:6f:49:49:cd:e4:9f:1c:39:2e:e3:
00:57:75:74:49:85:45:5c:5f:2c:bb:39:bd:44:ff:d0:6c:fa:
7d:81:7c:95:53:7a:68:35:2e:fb:4b:a7:2d:ae:ab:11:04:7b:
d0:e8:aa:c4:f2:9c:54:f0:59:d9:e8:4a:ab:e4:b7:cf:eb:91:
73:59:6e:f6:a2:e0:3b:8a:b2:65:81:29:65:2c:1d:74:8f:3b:
d0:87:cd:64:29:e6:d6:d3:89:fc:93:4a:da:92:95:bf:af:ca:
68:17:67:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0401RcdGZ42FeSqfFOKswQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmM2NTIzZTc3OGIzYmQzNjc0YzZmOThhN2I2YzY4YmYw
YThlZWUwHhcNMjYwMzI5MDkwMTA2WhcNMjYwMzMwMDkwMTA2WjAzMTEwLwYDVQQD
EyhhNzAxYjA1NWI5MzAzNjJmNzFlYmUyNDVlMDQwMzA1MWQ0MTJlNTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CH53/jXqHqI7qlgcAxs80gLcvVh
cVM2StVl0/P40yA+P8Uin98LjobFuMko8nnzfXq1JGI2ruk6w4Xlu5yYI4gMLTZx
b6ZAprglOdE0J3c3rtIkSf1gSzbSMJZ6R2qSTT2MueWdOGC4Rg5XEZt9qqXYqDAG
zU117fZX8+ccnTQnv0hjLi7DUl06lYfGhaWnw/7TitaLQ30PD3QZIGWrk33hC4pE
2c70m1gRhFt7eDcO8Gm3lqLla7PEogkn7djx34mXpaL3a8z+z/jiq3yCZ2aDXni4
LU/Z++cTp7MCQaReYwgevLN3HJkVXSLvrs/rMVRLB7teBFIgSSHuu5HcXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcBsFW5MDYvceviReBAMFHUEuU9MB8GA1UdIwQY
MBaAFGe8ZSPneLO9NnTG+Yp7bGi/Co7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjd4bEktZDRzNzAyZE1iNWludHNhTDhLanU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kOGM4NjgtOTYwZi00MzM0LWExNDYt
MmI4NzU2YTA5OGVjLzEvWjd4bEktZDRzNzAyZE1iNWludHNhTDhLanU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kOGM4NjgtOTYwZi00MzM0LWExNDYtMmI4NzU2YTA5OGVj
LzEvWjd4bEktZDRzNzAyZE1iNWludHNhTDhLanU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkwjbLwq
c2eG76j8MRs8YjNTkRmmJFNrJ/pcmGTvEs8W3d5U5yTOclR05HGDnTGsMyT//nSM
RiYYQZga0YE4vYlgOErUSJ9YsTeP5VnE9yU1f8M+vRhv1WnMvfwh7oEdGGH94Gxl
HDZlm+SQURFZrcVcwIvfeacchIA1Hbn3Y2OyJ8sdi8yG5Wu+0CdC+8ZESSzsSM6X
W2tvSUnN5J8cOS7jAFd1dEmFRVxfLLs5vUT/0Gz6fYF8lVN6aDUu+0unLa6rEQR7
0OiqxPKcVPBZ2ehKq+S3z+uRc1lu9qLgO4qyZYEpZSwddI870IfNZCnm1tOJ/JNK
2pKVv6/KaBdndg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:12 2026 by rpki-client