Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
File: zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json)
Hash identifier: hawl1YjCFTnCUlR6rbkxhUuKz3ErH/3bu+cZp+3zm4Q=
Subject key identifier: A9:58:2D:09:B5:75:C6:EE:49:5B:FE:25:B1:79:F8:D6:4E:BD:DD:31
Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Certificate issuer: /CN=cefe18ac971c82a777f7db19ffab334a32537703
Certificate serial: 019D39AF4072A9371FB094A3ADC9AE8BC294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
Manifest number: 1342
Signing time: Sun 29 Mar 2026 13:01:19 +0000
Manifest this update: Sun 29 Mar 2026 13:01:19 +0000
Manifest next update: Mon 30 Mar 2026 13:01:19 +0000
Files and hashes: 1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: QqscGw/PQr7LPTuAFifsP0H1BG48m3AS/EYY4vTJUs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:40:72:a9:37:1f:b0:94:a3:ad:c9:ae:8b:c2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703
Validity
Not Before: Mar 29 13:01:19 2026 GMT
Not After : Mar 30 13:01:19 2026 GMT
Subject: CN=a9582d09b575c6ee495bfe25b179f8d64ebddd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:18:86:fe:88:59:b0:05:62:76:cc:62:7f:
5e:b8:87:8a:b4:88:05:29:ca:b7:43:f1:a1:f8:cf:
4b:f7:75:b0:ed:8f:34:d0:9d:12:8c:55:0f:df:71:
93:f3:67:9d:87:86:4c:87:60:87:04:1d:32:db:8a:
6e:a6:2e:75:9f:a6:a7:6a:e1:81:11:ff:10:d0:35:
3e:d2:c6:db:c5:ee:b9:1b:06:80:35:14:74:a0:b0:
d2:b8:fe:bf:4a:72:36:bc:eb:5a:9f:94:63:fa:29:
21:d3:61:61:20:c0:93:d0:3c:80:15:53:d5:8b:f4:
85:9c:31:8c:22:d5:b7:7a:38:85:20:b2:0d:42:83:
e7:c1:20:06:6c:c8:06:e0:09:42:9f:d5:e3:8b:12:
4d:1f:15:86:de:11:2e:8e:9b:e9:63:6d:36:fa:de:
4f:67:f5:3c:d1:f4:b1:ae:78:2a:25:e5:e7:79:a3:
9e:14:46:94:f2:6e:fc:74:42:4b:4e:c9:9e:5c:88:
78:52:f4:b9:fb:87:5b:0a:b5:9b:6b:f5:58:c7:08:
52:b1:1a:fa:df:ba:aa:78:b4:84:36:79:27:99:c8:
9c:2a:fa:88:14:4d:75:29:26:c6:61:91:12:00:f4:
d6:6f:4c:cb:c8:12:a7:9e:75:6d:48:59:7e:0e:7d:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:58:2D:09:B5:75:C6:EE:49:5B:FE:25:B1:79:F8:D6:4E:BD:DD:31
X509v3 Authority Key Identifier:
keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8d:22:10:db:51:b9:5a:57:52:aa:16:85:c0:c9:f4:a0:fc:
29:6c:9a:56:e3:03:35:c9:b6:db:19:05:bb:9e:0d:6b:4b:74:
a7:83:3d:f3:2d:2f:70:29:11:55:c1:c1:60:a4:2b:74:49:61:
f3:fa:cb:99:01:4f:3a:0a:9b:4a:ab:71:19:81:51:99:99:fe:
5a:b7:f5:60:d6:44:94:b4:32:1f:80:e5:8e:d5:1c:14:10:4b:
b0:28:6f:91:12:1f:b7:3c:6b:c9:31:4d:f1:cb:5b:f1:e6:b2:
4b:71:97:61:6b:dc:86:d3:92:5d:f7:27:c9:c5:5c:d8:a8:20:
8e:60:d9:3d:a0:a7:a9:79:36:56:aa:df:4f:a7:d1:fc:b6:cc:
91:c8:b5:c5:55:8c:85:6d:a3:eb:e2:e3:53:ea:b9:4b:7c:76:
31:76:f0:00:1a:7d:92:a5:95:53:28:55:80:16:c1:22:ea:f2:
97:df:ce:75:18:1a:0e:e3:97:70:c6:83:9c:4c:c5:70:f0:94:
0f:55:25:92:c6:cf:36:79:ad:8d:85:03:22:46:04:71:79:73:
cd:ac:c9:e9:c1:c7:37:01:d7:ad:1c:32:64:85:df:9c:ac:8a:
fe:bd:af:40:76:de:f7:50:76:29:9b:f3:02:b1:59:2b:bd:e9:
2a:08:91:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05r0ByqTcfsJSjrcmui8KUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZmUxOGFjOTcxYzgyYTc3N2Y3ZGIxOWZmYWIzMzRhMzI1
Mzc3MDMwHhcNMjYwMzI5MTMwMTE5WhcNMjYwMzMwMTMwMTE5WjAzMTEwLwYDVQQD
EyhhOTU4MmQwOWI1NzVjNmVlNDk1YmZlMjViMTc5ZjhkNjRlYmRkZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpsYhv6IWbAFYnbMYn9euIeKtIgF
Kcq3Q/Gh+M9L93Ww7Y800J0SjFUP33GT82edh4ZMh2CHBB0y24pupi51n6anauGB
Ef8Q0DU+0sbbxe65GwaANRR0oLDSuP6/SnI2vOtan5Rj+ikh02FhIMCT0DyAFVPV
i/SFnDGMItW3ejiFILINQoPnwSAGbMgG4AlCn9XjixJNHxWG3hEujpvpY202+t5P
Z/U80fSxrngqJeXneaOeFEaU8m78dEJLTsmeXIh4UvS5+4dbCrWba/VYxwhSsRr6
37qqeLSENnknmcicKvqIFE11KSbGYZESAPTWb0zLyBKnnnVtSFl+Dn0vBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlYLQm1dcbuSVv+JbF5+NZOvd0xMB8GA1UdIwQY
MBaAFM7+GKyXHIKnd/fbGf+rM0oyU3cDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenY0WXJKY2NncWQzOTlzWl82c3pTakpUZHdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83Yzc5YTktNjFiMC00ODRjLTg3ZTUt
ODE2MTExMzQ0ZmJmLzEvenY0WXJKY2NncWQzOTlzWl82c3pTakpUZHdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83Yzc5YTktNjFiMC00ODRjLTg3ZTUtODE2MTExMzQ0ZmJm
LzEvenY0WXJKY2NncWQzOTlzWl82c3pTakpUZHdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALo0iENtR
uVpXUqoWhcDJ9KD8KWyaVuMDNcm22xkFu54Na0t0p4M98y0vcCkRVcHBYKQrdElh
8/rLmQFPOgqbSqtxGYFRmZn+Wrf1YNZElLQyH4DljtUcFBBLsChvkRIftzxryTFN
8ctb8eayS3GXYWvchtOSXfcnycVc2KggjmDZPaCnqXk2VqrfT6fR/LbMkci1xVWM
hW2j6+LjU+q5S3x2MXbwABp9kqWVUyhVgBbBIuryl9/OdRgaDuOXcMaDnEzFcPCU
D1UlksbPNnmtjYUDIkYEcXlzzazJ6cHHNwHXrRwyZIXfnKyK/r2vQHbe91B2KZvz
ArFZK73pKgiRwA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:39 2026 by rpki-client