Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
File: ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft (raw, json)
Hash identifier: 6MIp0FY0KTv1Jz5rk/6/HrofBdqxCjCrutEsOIO0N/g=
Subject key identifier: CC:3D:C7:7F:FA:08:D4:4D:7C:D6:16:BE:A3:6A:DE:27:B4:14:02:FE
Authority key identifier: 64:DA:EA:E2:8A:41:FC:74:01:0D:0B:FB:83:FD:80:CA:34:5C:57:F9
Certificate issuer: /CN=64daeae28a41fc74010d0bfb83fd80ca345c57f9
Certificate serial: 019D3A54016431B735BBC3274297B04B74B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
Manifest number: 181E
Signing time: Sun 29 Mar 2026 16:01:16 +0000
Manifest this update: Sun 29 Mar 2026 16:01:16 +0000
Manifest next update: Mon 30 Mar 2026 16:01:16 +0000
Files and hashes: 1: ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl (hash: vsMrF9PdZfEtJTDX2bPd3iTanjaaPm6w3B747lutqO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:01:64:31:b7:35:bb:c3:27:42:97:b0:4b:74:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64daeae28a41fc74010d0bfb83fd80ca345c57f9
Validity
Not Before: Mar 29 16:01:16 2026 GMT
Not After : Mar 30 16:01:16 2026 GMT
Subject: CN=cc3dc77ffa08d44d7cd616bea36ade27b41402fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:92:dd:90:aa:3c:f7:18:54:a4:12:20:93:
cd:9b:49:d4:4b:0b:c3:ea:ac:f0:28:96:7c:77:55:
e2:6c:6b:02:31:06:9d:15:d9:88:ba:37:00:5c:91:
b7:62:ad:98:19:38:24:da:95:79:9d:98:16:32:af:
b5:bb:56:8c:7e:5f:74:ea:c8:30:e0:36:6c:38:9b:
12:b4:8b:70:f7:6e:3a:1b:1c:b9:55:fa:c1:d4:9a:
d9:a7:b0:dc:59:f4:9c:79:07:1e:b1:3f:ca:c7:83:
0f:71:bd:99:71:7e:f9:61:1e:a4:98:60:79:4f:08:
5f:49:1d:5c:7f:b4:8c:df:7d:97:e9:6c:cd:70:ca:
e4:d7:8a:b8:77:49:37:c0:56:db:2a:e3:4e:e6:fc:
49:40:79:ef:ad:6b:ef:62:ff:f8:ed:ff:da:aa:22:
f5:50:1b:85:a5:48:b6:ea:b1:23:d4:10:cf:3b:b3:
a6:e8:d9:08:c3:aa:98:a6:d5:0e:bf:23:64:0a:94:
1a:51:ee:66:8b:40:84:02:60:4c:c3:07:4f:92:c5:
4c:f0:78:64:5e:5f:3e:cd:ab:11:d6:a1:33:36:09:
68:b9:cb:b0:92:8d:3b:ec:cc:c0:15:8f:30:e0:eb:
a5:ce:d3:00:ae:55:35:e7:f4:14:c9:9b:67:75:a5:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3D:C7:7F:FA:08:D4:4D:7C:D6:16:BE:A3:6A:DE:27:B4:14:02:FE
X509v3 Authority Key Identifier:
keyid:64:DA:EA:E2:8A:41:FC:74:01:0D:0B:FB:83:FD:80:CA:34:5C:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1f:a3:4d:05:b2:a7:b4:ed:e0:dc:36:a5:a8:6c:d0:be:8b:
51:a2:fb:fc:71:3a:ae:8c:ef:e1:7a:4f:c5:05:ff:7e:ca:23:
6e:ba:e1:ed:ec:4e:eb:e6:9e:95:84:5b:e0:cc:f7:ec:fa:fb:
66:2b:8b:a9:c9:0a:22:0f:2f:a7:6c:a7:97:56:bc:bb:a6:6f:
b7:92:01:eb:8c:8e:6f:ad:b8:ac:7d:79:02:fc:9e:03:c2:b5:
0a:2f:ff:46:8f:33:de:d6:6f:2a:e3:87:91:d2:54:71:8c:6c:
24:f1:ca:96:7e:47:f1:31:71:21:2d:b7:0c:eb:ed:55:ea:33:
c1:0e:87:cd:2a:dd:89:32:f7:e8:05:7c:cc:d0:df:c2:af:29:
77:bb:f5:39:1d:bd:d2:6a:bf:d7:c5:b2:17:88:fe:32:40:f6:
d1:4b:0b:1e:ba:87:27:3e:ad:54:22:73:35:9e:db:6b:7e:36:
c3:55:39:21:db:f3:df:a4:46:58:4b:bc:fe:96:ca:fd:db:7c:
38:55:45:6a:05:ca:3d:9b:05:2b:d6:e1:b3:97:5e:03:1e:85:
f2:1e:4a:bf:ce:b3:f0:54:bd:01:ea:f1:7a:90:95:cc:2a:8b:
f1:37:78:4b:f0:e7:df:21:39:95:7d:b3:23:d4:17:ba:fb:b3:
39:c3:6b:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VAFkMbc1u8MnQpewS3S4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZGFlYWUyOGE0MWZjNzQwMTBkMGJmYjgzZmQ4MGNhMzQ1
YzU3ZjkwHhcNMjYwMzI5MTYwMTE2WhcNMjYwMzMwMTYwMTE2WjAzMTEwLwYDVQQD
EyhjYzNkYzc3ZmZhMDhkNDRkN2NkNjE2YmVhMzZhZGUyN2I0MTQwMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3CS3ZCqPPcYVKQSIJPNm0nUSwvD
6qzwKJZ8d1XibGsCMQadFdmIujcAXJG3Yq2YGTgk2pV5nZgWMq+1u1aMfl906sgw
4DZsOJsStItw9246Gxy5VfrB1JrZp7DcWfSceQcesT/Kx4MPcb2ZcX75YR6kmGB5
TwhfSR1cf7SM332X6WzNcMrk14q4d0k3wFbbKuNO5vxJQHnvrWvvYv/47f/aqiL1
UBuFpUi26rEj1BDPO7Om6NkIw6qYptUOvyNkCpQaUe5mi0CEAmBMwwdPksVM8Hhk
Xl8+zasR1qEzNgloucuwko077MzAFY8w4OulztMArlU15/QUyZtndaWACQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMw9x3/6CNRNfNYWvqNq3ie0FAL+MB8GA1UdIwQY
MBaAFGTa6uKKQfx0AQ0L+4P9gMo0XFf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5ycTRvcEJfSFFCRFF2N2dfMkF5alJjVl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZWUyZmEtNjEzMS00N2ZhLWIxZTYt
NjVhMjQyMDAyMjcwLzEvWk5ycTRvcEJfSFFCRFF2N2dfMkF5alJjVl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hZWUyZmEtNjEzMS00N2ZhLWIxZTYtNjVhMjQyMDAyMjcw
LzEvWk5ycTRvcEJfSFFCRFF2N2dfMkF5alJjVl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArB+jTQWy
p7Tt4Nw2pahs0L6LUaL7/HE6rozv4XpPxQX/fsojbrrh7exO6+aelYRb4Mz37Pr7
ZiuLqckKIg8vp2ynl1a8u6Zvt5IB64yOb624rH15AvyeA8K1Ci//Ro8z3tZvKuOH
kdJUcYxsJPHKln5H8TFxIS23DOvtVeozwQ6HzSrdiTL36AV8zNDfwq8pd7v1OR29
0mq/18WyF4j+MkD20UsLHrqHJz6tVCJzNZ7ba342w1U5Idvz36RGWEu8/pbK/dt8
OFVFagXKPZsFK9bhs5deAx6F8h5Kv86z8FS9AerxepCVzCqL8Td4S/Dn3yE5lX2z
I9QXuvuzOcNr3Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:21:00 2026 by rpki-client