Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
File: zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft (raw, json)
Hash identifier: kGT1lpod6v+cX98R1u6ID8RYOLVbGyypytHlaZPn5tI=
Subject key identifier: 82:84:EE:68:4C:A0:36:16:73:9B:75:A0:D2:76:5B:65:DF:B8:DC:CC
Authority key identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
Certificate issuer: /CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Certificate serial: 019D390A02338D4FF0261A687BA791EB5BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
Manifest number: 0424
Signing time: Sun 29 Mar 2026 10:00:50 +0000
Manifest this update: Sun 29 Mar 2026 10:00:50 +0000
Manifest next update: Mon 30 Mar 2026 10:00:50 +0000
Files and hashes: 1: zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl (hash: ycKj7c566l5+iDDCpaOfDbvm/hocfiqMyeGt9Oqfsr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:02:33:8d:4f:f0:26:1a:68:7b:a7:91:eb:5b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Validity
Not Before: Mar 29 10:00:50 2026 GMT
Not After : Mar 30 10:00:50 2026 GMT
Subject: CN=8284ee684ca03616739b75a0d2765b65dfb8dccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:3f:2d:c7:78:d5:87:96:37:80:66:16:3b:
01:4b:ac:6e:bf:33:6b:66:c5:2f:5b:93:e1:0a:63:
2d:39:58:24:76:75:2a:d0:05:cd:eb:29:4d:c5:d9:
4b:a8:58:6a:7a:b9:7d:3b:4f:75:6e:0c:73:ef:08:
36:67:b6:9d:4a:03:5e:9a:bc:de:2b:5f:88:1b:77:
3d:23:40:cc:88:37:ec:47:fe:04:87:a7:19:29:66:
6f:01:9f:3b:08:33:ab:aa:79:d5:bb:6f:b0:17:66:
e0:e8:92:d0:a6:78:8d:97:c4:a5:65:ae:27:cd:10:
82:de:48:44:a6:89:d9:45:43:64:d9:4d:c7:ef:ea:
6c:6d:53:3f:72:6e:15:de:23:b1:ee:6a:30:cd:c5:
e4:3e:09:07:a3:c0:54:0a:18:b5:1a:01:40:65:17:
f6:42:97:a0:18:75:e1:8d:70:22:58:92:8d:10:10:
e9:24:66:33:59:86:ff:8c:ef:1a:1a:38:0e:fe:2b:
78:32:a8:a4:8b:7c:e2:b4:43:ca:fa:ed:33:9c:5a:
00:94:80:32:39:d7:96:ed:86:f2:50:42:20:b3:16:
68:79:16:5f:49:20:5b:2e:e0:fc:c4:01:43:5b:aa:
a8:86:57:76:72:ad:a4:2b:4a:8d:0a:c3:24:c2:7c:
94:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:84:EE:68:4C:A0:36:16:73:9B:75:A0:D2:76:5B:65:DF:B8:DC:CC
X509v3 Authority Key Identifier:
keyid:CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6a:48:0f:e7:dc:c9:ec:5c:35:99:8d:ec:81:08:63:0e:a0:
7c:8e:86:7f:b2:d0:f7:cd:96:00:62:0c:dc:4d:be:37:2f:0d:
f7:22:51:ab:8c:00:92:a8:88:b5:82:c6:99:d6:77:17:0d:b4:
98:fd:53:f8:e2:19:aa:f5:ca:9b:1f:51:3e:83:0d:39:61:02:
ce:44:22:8c:d4:46:14:13:0e:b7:94:1e:8c:65:9c:27:0f:da:
0d:a6:a9:b4:7c:b3:d9:d0:25:f1:5b:17:73:60:0e:6a:40:47:
92:49:0b:7f:7d:0d:f0:d4:cb:c4:c7:92:3e:a5:41:af:4a:9b:
ac:38:65:b9:25:37:f8:41:81:48:28:d0:08:6b:9c:d7:53:f1:
b9:ae:23:cd:de:1b:fc:ca:c9:ca:06:3f:d7:8f:17:05:74:c0:
01:93:8d:6f:21:1f:9b:bf:84:37:f8:10:91:37:a1:3b:d8:fb:
75:1b:a2:54:80:eb:98:9b:35:be:74:05:04:bf:9b:ec:e3:1c:
58:cc:60:7e:d7:2e:5d:5f:89:85:9a:f6:7c:73:81:31:1b:09:
d9:61:32:e4:69:4d:f5:ed:1f:5e:63:4e:94:d3:44:83:21:ff:
91:06:62:49:7b:37:5e:cb:d7:83:71:02:14:20:b5:3e:11:e3:
a4:85:4d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CgIzjU/wJhpoe6eR61vyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTdjY2QyYWVjMGJiZWZjNjM1MDg1NjUxMmE5NWZlMDIy
NTk5NTkwHhcNMjYwMzI5MTAwMDUwWhcNMjYwMzMwMTAwMDUwWjAzMTEwLwYDVQQD
Eyg4Mjg0ZWU2ODRjYTAzNjE2NzM5Yjc1YTBkMjc2NWI2NWRmYjhkY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe4/Lcd41YeWN4BmFjsBS6xuvzNr
ZsUvW5PhCmMtOVgkdnUq0AXN6ylNxdlLqFhqerl9O091bgxz7wg2Z7adSgNemrze
K1+IG3c9I0DMiDfsR/4Eh6cZKWZvAZ87CDOrqnnVu2+wF2bg6JLQpniNl8SlZa4n
zRCC3khEponZRUNk2U3H7+psbVM/cm4V3iOx7mowzcXkPgkHo8BUChi1GgFAZRf2
QpegGHXhjXAiWJKNEBDpJGYzWYb/jO8aGjgO/it4Mqiki3zitEPK+u0znFoAlIAy
OdeW7YbyUEIgsxZoeRZfSSBbLuD8xAFDW6qohld2cq2kK0qNCsMkwnyUFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKE7mhMoDYWc5t1oNJ2W2XfuNzMMB8GA1UdIwQY
MBaAFM6nzNKuwLvvxjUIVlEqlf4CJZlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFmTTBxN0F1LV9HTlFoV1VTcVZfZ0lsbVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hNzlhM2QtN2YyOS00OTdiLWFlMmMt
MzdmNTQ0NzZhOWQ3LzEvenFmTTBxN0F1LV9HTlFoV1VTcVZfZ0lsbVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hNzlhM2QtN2YyOS00OTdiLWFlMmMtMzdmNTQ0NzZhOWQ3
LzEvenFmTTBxN0F1LV9HTlFoV1VTcVZfZ0lsbVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2pID+fc
yexcNZmN7IEIYw6gfI6Gf7LQ982WAGIM3E2+Ny8N9yJRq4wAkqiItYLGmdZ3Fw20
mP1T+OIZqvXKmx9RPoMNOWECzkQijNRGFBMOt5QejGWcJw/aDaaptHyz2dAl8VsX
c2AOakBHkkkLf30N8NTLxMeSPqVBr0qbrDhluSU3+EGBSCjQCGuc11Pxua4jzd4b
/MrJygY/148XBXTAAZONbyEfm7+EN/gQkTehO9j7dRuiVIDrmJs1vnQFBL+b7OMc
WMxgftcuXV+JhZr2fHOBMRsJ2WEy5GlN9e0fXmNOlNNEgyH/kQZiSXs3XsvXg3EC
FCC1PhHjpIVNWg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:31 2026 by rpki-client