Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier: Bvhgz8CDYto2Hy/M/y4+5Ag5Q4PIKqh6CxQNras4Cpg=
Subject key identifier: 55:84:9D:0E:76:32:98:F4:16:95:7A:A7:76:BC:FE:18:67:64:8C:BF
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial: 019D3865E236DC3ECB7EF1A9150C0D103453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number: 0E8A
Signing time: Sun 29 Mar 2026 07:01:34 +0000
Manifest this update: Sun 29 Mar 2026 07:01:34 +0000
Manifest next update: Mon 30 Mar 2026 07:01:34 +0000
Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: iP6I8pXjnka4lR/Zi69a2hSQMfJWsayOZGvn8eKpH4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e2:36:dc:3e:cb:7e:f1:a9:15:0c:0d:10:34:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Validity
Not Before: Mar 29 07:01:34 2026 GMT
Not After : Mar 30 07:01:34 2026 GMT
Subject: CN=55849d0e763298f416957aa776bcfe1867648cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:1e:dd:91:51:b2:50:0d:90:4d:4d:d7:df:
2e:82:8a:c6:db:6e:c8:00:3e:8f:83:d8:f5:fd:4a:
05:10:f9:68:ec:40:8a:88:4c:17:82:a6:c6:95:98:
c8:e0:f7:11:b0:ef:8a:27:69:15:9c:1e:9e:2a:21:
49:73:b7:8c:a3:03:3a:bf:ce:42:65:af:0a:14:da:
6d:e3:17:8c:bd:65:56:24:63:71:dd:51:b6:12:fb:
f9:5c:48:68:4d:af:48:a4:ca:e3:7b:88:51:90:0c:
81:ad:12:13:4a:17:e0:c9:b7:09:81:90:d8:8a:d2:
a6:8c:90:c2:a0:fb:8f:35:e5:4c:9f:ef:6e:f3:99:
88:43:30:27:3c:39:04:5c:21:c6:10:32:46:b4:97:
a5:13:bd:34:8f:c1:39:b4:3b:f8:e5:0b:da:d8:61:
ab:e1:be:b5:58:1f:c4:0b:a2:88:07:4c:5e:99:b6:
00:25:3a:ac:3c:35:64:de:9e:a2:45:3a:02:2e:96:
3d:ef:1b:43:ee:46:7b:5c:91:ac:d1:6b:54:ee:2c:
f7:10:e7:be:cc:8f:43:d9:a6:1d:f9:16:50:58:fb:
08:67:f3:14:31:5d:10:74:5d:d3:92:4d:b7:de:9b:
17:c4:cd:2f:2f:c0:81:fb:a4:0d:08:cc:a8:14:bd:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:84:9D:0E:76:32:98:F4:16:95:7A:A7:76:BC:FE:18:67:64:8C:BF
X509v3 Authority Key Identifier:
keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:43:b7:61:d2:c7:3c:d6:3d:50:34:68:89:15:94:4a:6a:c9:
13:4c:c8:de:fa:53:7d:7b:bb:d9:fa:ff:71:11:e7:bc:04:44:
35:da:54:b3:70:ac:23:f7:80:31:67:b6:4b:80:dd:ca:1c:0a:
37:8a:c1:03:1c:eb:5e:6e:a9:aa:a6:5b:ea:15:fd:ea:5d:28:
d4:b2:87:1e:a9:3a:55:c7:22:b8:7c:1b:d5:d7:ec:07:db:05:
2a:31:5b:c6:3b:b9:e5:49:0c:50:b1:6d:7d:57:79:9c:35:92:
f3:fa:6d:8f:63:5a:48:1b:3f:a9:7b:54:e6:8e:80:ea:66:8c:
8d:b3:c4:84:e7:b4:a7:0e:a4:d8:87:e9:0c:2d:15:6f:a1:a6:
23:98:60:21:3f:5b:09:79:e4:9c:86:f3:89:c4:06:fe:80:a7:
16:55:23:f8:f7:d0:ef:73:86:52:61:38:de:a0:43:eb:96:02:
bb:f0:e7:00:d8:06:68:88:40:d9:28:61:b5:44:04:88:e4:03:
60:d3:bc:a3:e1:2f:ad:ea:c0:02:9f:24:b0:4f:5a:8c:7a:87:
4d:1f:cf:ff:9e:61:a6:9a:8a:35:f7:2f:aa:c2:67:1e:73:70:
5e:60:cb:1e:4b:86:40:d5:96:e2:d5:4d:ed:ab:0e:f6:be:6b:
3c:21:e6:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZeI23D7LfvGpFQwNEDRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTRkYjM3MzA4NWUyOGMwZDliNzRiZTdiOGU4OTc0MGI5
NWY5ZmEwHhcNMjYwMzI5MDcwMTM0WhcNMjYwMzMwMDcwMTM0WjAzMTEwLwYDVQQD
Eyg1NTg0OWQwZTc2MzI5OGY0MTY5NTdhYTc3NmJjZmUxODY3NjQ4Y2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofke3ZFRslANkE1N198ugorG227I
AD6Pg9j1/UoFEPlo7ECKiEwXgqbGlZjI4PcRsO+KJ2kVnB6eKiFJc7eMowM6v85C
Za8KFNpt4xeMvWVWJGNx3VG2Evv5XEhoTa9IpMrje4hRkAyBrRITShfgybcJgZDY
itKmjJDCoPuPNeVMn+9u85mIQzAnPDkEXCHGEDJGtJelE700j8E5tDv45Qva2GGr
4b61WB/EC6KIB0xembYAJTqsPDVk3p6iRToCLpY97xtD7kZ7XJGs0WtU7iz3EOe+
zI9D2aYd+RZQWPsIZ/MUMV0QdF3Tkk233psXxM0vL8CB+6QNCMyoFL374QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWEnQ52Mpj0FpV6p3a8/hhnZIy/MB8GA1UdIwQY
MBaAFM8U2zcwheKMDZt0vnuOiXQLlfn6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMWNhZWYtY2E2Zi00ODgxLWJjNTgt
MGExMzFmNjVjOTY4LzEvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lMWNhZWYtY2E2Zi00ODgxLWJjNTgtMGExMzFmNjVjOTY4
LzEvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0O3YdLH
PNY9UDRoiRWUSmrJE0zI3vpTfXu72fr/cRHnvARENdpUs3CsI/eAMWe2S4DdyhwK
N4rBAxzrXm6pqqZb6hX96l0o1LKHHqk6VcciuHwb1dfsB9sFKjFbxju55UkMULFt
fVd5nDWS8/ptj2NaSBs/qXtU5o6A6maMjbPEhOe0pw6k2IfpDC0Vb6GmI5hgIT9b
CXnknIbzicQG/oCnFlUj+PfQ73OGUmE43qBD65YCu/DnANgGaIhA2ShhtUQEiOQD
YNO8o+EvrerAAp8ksE9ajHqHTR/P/55hppqKNfcvqsJnHnNwXmDLHkuGQNWW4tVN
7asO9r5rPCHmKA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:23:57 2026 by rpki-client