Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
File: ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json)
Hash identifier: c1jcmRINi2MbpeOlb4Kuls4r8Rd72xauLCs7dcxHkV4=
Subject key identifier: E6:34:4D:F0:9D:73:05:25:4D:85:E8:CC:AA:24:2E:64:9F:F1:15:D3
Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
Certificate issuer: /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Certificate serial: 019D386670066142D940134B471BC29AE9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
Manifest number: 13DE
Signing time: Sun 29 Mar 2026 07:02:10 +0000
Manifest this update: Sun 29 Mar 2026 07:02:10 +0000
Manifest next update: Mon 30 Mar 2026 07:02:10 +0000
Files and hashes: 1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: HS3Gy4BhmhQBoZ42N4DXgYn6yY1QEnyr+YxD5zddKcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:70:06:61:42:d9:40:13:4b:47:1b:c2:9a:e9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Validity
Not Before: Mar 29 07:02:10 2026 GMT
Not After : Mar 30 07:02:10 2026 GMT
Subject: CN=e6344df09d7305254d85e8ccaa242e649ff115d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f0:a0:29:74:bb:7e:8c:f6:b4:3b:d9:b4:b9:
c4:86:a8:f7:1d:6c:e0:fb:5e:a9:5e:aa:d8:7d:35:
0e:c2:c7:73:eb:94:48:05:98:1a:fc:9d:82:41:58:
6f:c2:6b:b8:36:de:ec:b3:b8:4b:fc:fd:32:bd:84:
45:cc:d3:fa:aa:28:8e:36:59:f4:ac:51:07:70:3d:
61:a0:f8:90:2a:a9:2d:cd:96:8e:e1:73:c4:47:5c:
d2:44:1c:c8:01:66:80:1c:45:c1:b3:0f:e1:51:a0:
cf:82:81:7d:04:4a:fa:1b:a3:40:33:e3:1d:fd:50:
1d:bc:cd:50:c0:02:27:ee:ed:7e:c9:f9:71:29:8f:
2d:65:e7:5d:7d:01:39:6f:1e:8b:fc:79:2d:01:59:
86:d3:9a:56:2c:9c:23:38:11:da:e1:90:79:e3:a9:
6d:2a:05:ed:c2:0e:6f:9d:14:b6:89:60:fc:9e:e7:
6e:3c:c4:7c:f2:a7:5c:5e:59:50:a9:84:d6:db:cb:
4a:b4:3b:02:bd:ca:4b:44:9b:44:d1:d0:5e:63:45:
dd:50:1c:53:c3:ad:3b:96:ce:bc:f2:df:7d:27:b7:
c2:13:53:fd:71:17:6d:3e:e8:90:47:79:05:1c:aa:
6a:d1:fe:b2:16:48:57:07:d6:58:73:99:93:f3:d1:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:34:4D:F0:9D:73:05:25:4D:85:E8:CC:AA:24:2E:64:9F:F1:15:D3
X509v3 Authority Key Identifier:
keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:59:bf:23:c1:a8:e3:e1:d1:2f:67:98:e2:4e:f9:6e:8b:ef:
0b:d4:0c:93:37:46:6c:fb:4c:8d:bc:8b:7a:c1:48:ff:7c:02:
e4:90:33:75:80:6e:b4:e4:57:84:a6:99:8c:37:72:5d:98:b3:
e5:5f:0d:47:19:70:5d:30:35:1c:d9:e3:79:46:ae:8f:76:4f:
77:62:cd:89:7b:fb:04:31:8e:dc:ab:7f:93:82:88:42:a5:84:
e7:22:8a:e2:e3:16:be:19:75:40:89:29:12:70:b8:b9:79:1b:
2e:eb:bc:e0:04:76:56:9d:8d:fb:ad:8e:f7:bf:50:23:fc:df:
63:cf:9b:23:f4:da:82:37:06:cd:50:f7:17:4a:4d:81:e5:b6:
39:46:ba:d5:74:6a:1f:be:ef:c8:cf:d2:5b:a6:3d:da:c7:de:
12:b4:2f:b6:9c:fd:af:fb:54:b2:e0:06:7a:b2:98:45:ae:4c:
38:3b:97:49:93:a0:40:91:8f:8f:63:91:fa:30:a0:0c:0d:24:
77:a1:0a:b5:1d:56:f3:72:3d:fc:07:ae:af:15:75:c2:da:92:
51:3d:fc:17:e0:3c:f5:16:81:d2:e5:fe:84:ed:f3:d9:bf:c4:
64:b0:57:86:db:3c:78:53:c6:95:69:69:3a:11:a2:9b:4a:fe:
08:1b:39:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZnAGYULZQBNLRxvCmunNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ODNkNjhjNDBiM2RiYzI5YTdkNDc3Mjc5MWE1MzhjM2Vl
ZTIwMzIwHhcNMjYwMzI5MDcwMjEwWhcNMjYwMzMwMDcwMjEwWjAzMTEwLwYDVQQD
EyhlNjM0NGRmMDlkNzMwNTI1NGQ4NWU4Y2NhYTI0MmU2NDlmZjExNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvCgKXS7foz2tDvZtLnEhqj3HWzg
+16pXqrYfTUOwsdz65RIBZga/J2CQVhvwmu4Nt7ss7hL/P0yvYRFzNP6qiiONln0
rFEHcD1hoPiQKqktzZaO4XPER1zSRBzIAWaAHEXBsw/hUaDPgoF9BEr6G6NAM+Md
/VAdvM1QwAIn7u1+yflxKY8tZeddfQE5bx6L/HktAVmG05pWLJwjOBHa4ZB546lt
KgXtwg5vnRS2iWD8nuduPMR88qdcXllQqYTW28tKtDsCvcpLRJtE0dBeY0XdUBxT
w607ls688t99J7fCE1P9cRdtPuiQR3kFHKpq0f6yFkhXB9ZYc5mT89F0MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOY0TfCdcwUlTYXozKokLmSf8RXTMB8GA1UdIwQY
MBaAFGSD1oxAs9vCmn1HcnkaU4w+7iAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEt
ZGQ0YWZmMzYwYTExLzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEtZGQ0YWZmMzYwYTEx
LzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFm/I8Go
4+HRL2eY4k75bovvC9QMkzdGbPtMjbyLesFI/3wC5JAzdYButORXhKaZjDdyXZiz
5V8NRxlwXTA1HNnjeUauj3ZPd2LNiXv7BDGO3Kt/k4KIQqWE5yKK4uMWvhl1QIkp
EnC4uXkbLuu84AR2Vp2N+62O979QI/zfY8+bI/TagjcGzVD3F0pNgeW2OUa61XRq
H77vyM/SW6Y92sfeErQvtpz9r/tUsuAGerKYRa5MODuXSZOgQJGPj2OR+jCgDA0k
d6EKtR1W83I9/AeurxV1wtqSUT38F+A89RaB0uX+hO3z2b/EZLBXhts8eFPGlWlp
OhGim0r+CBs5vg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:35 2026 by rpki-client