Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
File: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft (raw, json)
Hash identifier: fjzTBI+hVPwWM2JusDaleze1dpR5eKZGxadFEauiNnE=
Subject key identifier: FC:91:17:3F:F4:AE:83:AC:B0:E4:DC:C4:F4:2D:59:2A:41:7E:72:57
Authority key identifier: 65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
Certificate issuer: /CN=654364d0c6c93df28027488afcbfcf329726392b
Certificate serial: 019D386605F4CB1B27E96D10D368F246EA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
Manifest number: 0C22
Signing time: Sun 29 Mar 2026 07:01:43 +0000
Manifest this update: Sun 29 Mar 2026 07:01:43 +0000
Manifest next update: Mon 30 Mar 2026 07:01:43 +0000
Files and hashes: 1: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl (hash: kpa3HVwUVLXNzYnCwLdp4a3fLkaLcWFS6RAccRyR9CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:05:f4:cb:1b:27:e9:6d:10:d3:68:f2:46:ea:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654364d0c6c93df28027488afcbfcf329726392b
Validity
Not Before: Mar 29 07:01:43 2026 GMT
Not After : Mar 30 07:01:43 2026 GMT
Subject: CN=fc91173ff4ae83acb0e4dcc4f42d592a417e7257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:59:02:77:57:6d:55:0e:d1:6d:3a:a6:82:13:
19:e2:c2:c1:55:ed:03:81:dc:70:13:5a:da:a6:ef:
66:4c:c8:08:06:b0:98:75:87:52:a1:03:af:1d:9d:
5d:66:59:38:e6:af:a9:de:03:31:29:a7:43:c7:cf:
69:d9:7d:eb:3f:69:87:14:45:ab:a7:a7:e2:d4:db:
f2:02:31:4b:08:f5:e0:56:24:dc:fe:a1:ae:47:b3:
80:c6:13:b4:2d:f6:4d:16:f2:5b:d7:04:52:d1:c2:
67:c8:0d:6f:bb:2c:f7:c0:d1:9a:15:00:1d:9d:ee:
96:a4:83:28:2f:d4:7f:7a:c8:8f:66:7c:3d:c9:47:
15:1e:11:10:0a:37:42:b0:70:5c:c6:51:6b:7d:8a:
f0:e0:52:d3:ac:cf:a9:27:e9:24:0a:62:e2:53:4b:
35:97:b3:df:f4:54:7b:ac:8d:a2:31:45:11:02:61:
5c:9a:90:82:a0:2e:88:aa:d0:bb:bc:f2:ec:bf:b9:
f5:c6:b9:85:eb:b8:b0:54:6b:19:d1:f1:5f:44:78:
f6:c0:ba:74:1b:b3:11:2c:40:f4:f6:ce:ad:9e:f0:
d8:58:2a:97:95:3a:00:a3:81:7f:6b:be:13:d3:d2:
08:45:a9:9a:a8:ac:f3:26:b3:34:e6:35:da:60:14:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:17:3F:F4:AE:83:AC:B0:E4:DC:C4:F4:2D:59:2A:41:7E:72:57
X509v3 Authority Key Identifier:
keyid:65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6f:97:6c:6d:2e:5f:55:58:13:53:b3:66:31:32:ba:cb:6c:
62:24:2f:37:3d:fb:0c:13:cd:47:d3:63:3f:eb:54:e7:8b:ce:
1c:48:99:8a:de:43:6e:31:36:cb:a7:40:df:fe:95:98:b1:11:
79:da:9e:7d:9f:a1:14:82:6e:b9:b7:54:db:0b:25:41:5e:cb:
7d:b0:d9:2a:05:75:69:59:f1:6e:1e:0a:9f:ba:5a:5a:52:84:
72:78:a0:99:83:47:89:bb:09:7e:a6:8c:42:d8:3f:fc:c2:8c:
da:cc:71:ff:76:c7:fc:66:84:66:c5:5a:5f:47:6a:7a:95:20:
51:26:a6:dd:28:58:d1:45:ad:a5:5f:52:6d:23:7e:9e:d5:1a:
db:f8:2a:e3:d2:00:4d:62:6e:7a:2b:61:9f:73:52:de:9c:d3:
92:34:14:8c:10:9b:4f:1f:5a:00:b5:5b:2d:49:5d:d5:3b:a4:
c6:a1:9c:a5:1b:8f:70:af:f7:16:79:d5:12:d0:87:f6:b4:00:
99:c8:ef:66:cc:38:df:52:3c:de:31:81:64:d1:54:72:e9:ad:
c4:7c:e8:a5:69:10:4f:f3:4e:e4:52:64:fa:02:c1:4c:b4:db:
b1:a7:90:36:61:be:2e:ed:8b:be:3b:0e:8f:14:55:07:37:a6:
2b:04:7b:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZgX0yxsn6W0Q02jyRup5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NDM2NGQwYzZjOTNkZjI4MDI3NDg4YWZjYmZjZjMyOTcy
NjM5MmIwHhcNMjYwMzI5MDcwMTQzWhcNMjYwMzMwMDcwMTQzWjAzMTEwLwYDVQQD
EyhmYzkxMTczZmY0YWU4M2FjYjBlNGRjYzRmNDJkNTkyYTQxN2U3MjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFkCd1dtVQ7RbTqmghMZ4sLBVe0D
gdxwE1rapu9mTMgIBrCYdYdSoQOvHZ1dZlk45q+p3gMxKadDx89p2X3rP2mHFEWr
p6fi1NvyAjFLCPXgViTc/qGuR7OAxhO0LfZNFvJb1wRS0cJnyA1vuyz3wNGaFQAd
ne6WpIMoL9R/esiPZnw9yUcVHhEQCjdCsHBcxlFrfYrw4FLTrM+pJ+kkCmLiU0s1
l7Pf9FR7rI2iMUURAmFcmpCCoC6IqtC7vPLsv7n1xrmF67iwVGsZ0fFfRHj2wLp0
G7MRLED09s6tnvDYWCqXlToAo4F/a74T09IIRamaqKzzJrM05jXaYBRjxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyRFz/0roOssOTcxPQtWSpBfnJXMB8GA1UdIwQY
MBaAFGVDZNDGyT3ygCdIivy/zzKXJjkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZjlhYjEtZWFiMS00NmNjLTg4ZTct
YjZlOGVhOTEyNDgwLzEvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zZjlhYjEtZWFiMS00NmNjLTg4ZTctYjZlOGVhOTEyNDgw
LzEvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdG+XbG0u
X1VYE1OzZjEyustsYiQvNz37DBPNR9NjP+tU54vOHEiZit5DbjE2y6dA3/6VmLER
edqefZ+hFIJuubdU2wslQV7LfbDZKgV1aVnxbh4Kn7paWlKEcnigmYNHibsJfqaM
Qtg//MKM2sxx/3bH/GaEZsVaX0dqepUgUSam3ShY0UWtpV9SbSN+ntUa2/gq49IA
TWJueithn3NS3pzTkjQUjBCbTx9aALVbLUld1TukxqGcpRuPcK/3FnnVEtCH9rQA
mcjvZsw431I83jGBZNFUcumtxHzopWkQT/NO5FJk+gLBTLTbsaeQNmG+Lu2LvjsO
jxRVBzemKwR7Eg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:40 2026 by rpki-client