Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: tnv7/4gzz9l3zWOblHL9toMZmLrOFW/aep7KgDO0wR8=
Subject key identifier: 5A:64:88:15:21:B7:4D:56:C3:E0:A0:02:BB:F4:22:2D:42:AA:00:44
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 019D37C0CE4DD6ADB8E3C779CE9FBE9744EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0EFE
Signing time: Sun 29 Mar 2026 04:01:15 +0000
Manifest this update: Sun 29 Mar 2026 04:01:15 +0000
Manifest next update: Mon 30 Mar 2026 04:01:15 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: uaV29M2ejO1HUituvthCmyHNAka2/t1FdDG5XCypgCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ce:4d:d6:ad:b8:e3:c7:79:ce:9f:be:97:44:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: Mar 29 04:01:15 2026 GMT
Not After : Mar 30 04:01:15 2026 GMT
Subject: CN=5a64881521b74d56c3e0a002bbf4222d42aa0044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:91:f1:b8:a8:ad:1a:8d:2d:7f:5a:06:81:
ed:c4:02:53:d5:20:bf:36:68:9e:ea:d3:46:2e:b5:
8d:32:23:8e:1f:88:b6:11:0e:72:49:f6:42:6e:bf:
5a:8f:01:2b:3d:53:6e:80:ca:6b:89:7a:7b:93:8f:
a1:6b:8a:4d:ce:50:d1:f9:16:a9:7e:0c:f4:be:d8:
14:9e:69:66:1b:7f:59:5b:59:2e:0d:1d:05:56:c0:
d4:5a:26:f9:e2:c6:c5:13:5d:89:6d:ce:d3:92:a9:
8e:c2:4c:f2:4a:7a:10:66:02:00:cd:84:7a:b2:fa:
e6:16:fa:47:0d:31:ec:51:0d:72:f3:11:ee:af:eb:
7c:27:12:a6:29:cb:5e:9f:03:78:01:fb:44:75:1e:
97:45:64:21:6e:13:ad:c7:cf:cd:fd:2f:0b:18:d9:
25:2e:65:87:de:63:42:1a:06:b6:38:9e:a9:1b:ea:
fa:9f:91:be:62:0d:6d:5c:04:c9:79:bf:bd:9b:eb:
4d:90:76:cd:8f:c3:ab:01:87:04:6e:6d:be:f3:c0:
c1:7a:78:7a:60:a7:4a:5e:c1:f5:29:1c:bc:ae:e1:
5d:c8:d7:4a:a0:2b:b3:72:8a:ee:79:63:2d:5c:ef:
52:d7:62:02:f3:fa:ec:9a:9e:90:fa:bc:9f:0d:de:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:64:88:15:21:B7:4D:56:C3:E0:A0:02:BB:F4:22:2D:42:AA:00:44
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a7:5d:18:25:1e:e3:f6:68:3e:d9:ec:48:07:50:74:43:4a:
50:50:62:05:95:e8:59:4d:86:89:cb:d0:78:bc:7f:e4:bc:df:
c1:94:3e:51:47:fd:aa:df:f3:e9:5a:5a:b4:98:09:ef:16:e6:
f1:90:81:9a:fa:60:ee:eb:5a:ec:ae:0e:18:aa:53:7a:05:56:
36:6e:96:be:ed:1f:73:38:58:03:43:3d:9f:e0:14:ca:f7:ef:
6a:e5:61:9c:2d:9f:b9:eb:02:61:68:d7:02:80:94:dd:f6:a7:
69:e2:74:32:64:f8:58:9d:84:0b:28:20:34:67:d1:ee:1b:77:
9f:55:e7:c6:e7:e8:db:e5:8d:35:0b:20:59:2a:22:3a:cb:49:
9d:dd:6b:5b:2d:8a:c9:61:9c:7b:93:9f:b5:ec:5a:37:2e:4e:
0f:b7:40:53:c6:77:15:9d:9f:96:81:cc:70:40:10:5e:c0:e4:
14:c9:ce:9c:9f:90:ab:ce:80:46:80:92:6b:a8:16:ed:df:5a:
71:0f:7c:36:f2:7b:dc:90:c0:4b:9a:6c:a1:75:1b:dd:73:2d:
08:fe:3d:7d:ad:f8:e9:32:99:39:b5:9d:97:55:fb:da:7e:97:
ed:73:c5:2d:ac:54:0f:62:cc:86:a6:06:15:06:62:43:c9:77:
92:9d:e5:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wM5N1q2448d5zp++l0TqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MjE0NzBkNTkyMjI5OGVkMDQ2ODVlMWRmMGVmZGZkZDJh
NjY2MDcwHhcNMjYwMzI5MDQwMTE1WhcNMjYwMzMwMDQwMTE1WjAzMTEwLwYDVQQD
Eyg1YTY0ODgxNTIxYjc0ZDU2YzNlMGEwMDJiYmY0MjIyZDQyYWEwMDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnduR8biorRqNLX9aBoHtxAJT1SC/
Nmie6tNGLrWNMiOOH4i2EQ5ySfZCbr9ajwErPVNugMpriXp7k4+ha4pNzlDR+Rap
fgz0vtgUnmlmG39ZW1kuDR0FVsDUWib54sbFE12Jbc7TkqmOwkzySnoQZgIAzYR6
svrmFvpHDTHsUQ1y8xHur+t8JxKmKctenwN4AftEdR6XRWQhbhOtx8/N/S8LGNkl
LmWH3mNCGga2OJ6pG+r6n5G+Yg1tXATJeb+9m+tNkHbNj8OrAYcEbm2+88DBenh6
YKdKXsH1KRy8ruFdyNdKoCuzcorueWMtXO9S12IC8/rsmp6Q+ryfDd5A6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpkiBUht01Ww+CgArv0Ii1CqgBEMB8GA1UdIwQY
MBaAFGQhRw1ZIimO0EaF4d8O/f3SpmYHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkNGSERWa2lLWTdRUm9YaDN3NzlfZEttWmdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zYTUwY2QtM2U2YS00ZmQ0LTkzOTct
NThkNTdjZDM2MGE5LzEvWkNGSERWa2lLWTdRUm9YaDN3NzlfZEttWmdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zYTUwY2QtM2U2YS00ZmQ0LTkzOTctNThkNTdjZDM2MGE5
LzEvWkNGSERWa2lLWTdRUm9YaDN3NzlfZEttWmdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6ddGCUe
4/ZoPtnsSAdQdENKUFBiBZXoWU2GicvQeLx/5LzfwZQ+UUf9qt/z6VpatJgJ7xbm
8ZCBmvpg7uta7K4OGKpTegVWNm6Wvu0fczhYA0M9n+AUyvfvauVhnC2fuesCYWjX
AoCU3fanaeJ0MmT4WJ2ECyggNGfR7ht3n1Xnxufo2+WNNQsgWSoiOstJnd1rWy2K
yWGce5OftexaNy5OD7dAU8Z3FZ2floHMcEAQXsDkFMnOnJ+Qq86ARoCSa6gW7d9a
cQ98NvJ73JDAS5psoXUb3XMtCP49fa346TKZObWdl1X72n6X7XPFLaxUD2LMhqYG
FQZiQ8l3kp3loQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:19 2026 by rpki-client