Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: yPSquRILBXFp+hnGc8xmkhYkLP893qi9YE0yfcJhPaU=
Subject key identifier: 0F:63:1B:99:2C:04:08:5E:4D:CC:E3:D5:06:A3:E5:8A:A8:04:F1:39
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 019D39781BFD529C5B812FA012880DC6C228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 05E4
Signing time: Sun 29 Mar 2026 12:01:05 +0000
Manifest this update: Sun 29 Mar 2026 12:01:05 +0000
Manifest next update: Mon 30 Mar 2026 12:01:05 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: tLSLtY4wt7qTqT9eZpyRNhZ2E+q8kvLfMby5MSEEnw0=)
2: qo4K2MxKuprqgn2JH-P6sbefGGQ.roa (hash: 5nQ7RiiW8bFTZTK/XJeOeCamYJvNUIxvBcEODwO0sgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:1b:fd:52:9c:5b:81:2f:a0:12:88:0d:c6:c2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Mar 29 12:01:05 2026 GMT
Not After : Mar 30 12:01:05 2026 GMT
Subject: CN=0f631b992c04085e4dcce3d506a3e58aa804f139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:3b:88:8c:d7:57:50:59:7e:46:ad:77:88:
73:35:72:3a:04:11:17:8d:21:e7:3a:56:df:60:6f:
97:ff:44:ef:8a:9d:c0:c3:64:4f:ce:4a:94:86:f4:
3b:e8:2c:7b:21:8b:98:7f:68:cc:b1:4c:a2:c1:13:
0b:8b:fa:7b:23:18:62:b5:ec:89:35:af:bb:be:4f:
af:67:ba:64:b6:bd:de:e1:74:8d:1c:ac:3b:2f:a8:
c8:5f:08:e7:0f:e3:cd:4e:5f:be:91:2c:88:bc:56:
02:fa:28:a2:cc:25:1b:81:34:41:2c:49:22:82:e6:
d6:ad:bc:1a:9c:9f:be:f7:c2:ce:2f:3e:b5:55:68:
21:d2:1f:0b:71:f4:53:64:10:22:9c:92:5d:f5:6b:
d7:ef:16:a4:70:76:34:6e:b2:e7:4e:18:23:8a:82:
57:0e:de:f4:c7:81:a5:3a:30:b9:e2:ca:4f:0e:02:
ae:b3:5a:47:4b:3c:a6:38:2f:32:1d:3e:fe:c4:51:
00:e7:a2:17:da:ff:8f:be:cf:52:c2:8e:f7:f6:17:
2f:d0:c4:04:1d:1f:52:95:9c:6e:e1:b6:81:87:85:
32:77:f6:c3:05:9d:5e:51:29:9d:de:d1:83:26:94:
82:49:7b:f6:bf:16:49:24:4b:b9:95:0c:19:09:2f:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:63:1B:99:2C:04:08:5E:4D:CC:E3:D5:06:A3:E5:8A:A8:04:F1:39
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d3:fd:f4:d8:84:3c:a6:1a:49:05:fb:88:b1:f0:dc:b5:b4:
e5:86:d2:ac:6b:d4:f0:31:c8:27:34:59:41:39:b8:a0:69:db:
87:d3:59:1e:11:a8:f0:ef:f1:02:69:e7:c4:2c:fd:a6:32:5c:
f3:f9:ab:04:a2:96:2b:1f:e2:be:12:40:7a:1c:df:d5:fe:33:
3b:56:be:c0:2d:b1:26:58:77:dd:da:cd:86:69:41:a5:be:86:
7c:f5:f1:ba:a5:8e:09:e0:8c:b2:f4:9d:74:3d:d9:2d:0e:47:
0b:77:49:a6:72:53:54:d0:40:7e:69:71:7a:4a:4f:85:a9:69:
fa:25:2e:28:e9:19:8e:2f:a4:7e:e5:4a:24:8c:9c:3c:1f:52:
97:60:cc:6f:92:6d:23:e5:71:d7:29:99:64:b1:72:5b:e7:33:
ab:2d:c5:a2:97:1f:49:94:82:25:3a:b4:70:fd:b1:e4:41:9b:
19:95:53:33:cd:eb:6f:1a:d6:f9:1d:c6:ad:a8:6c:0f:b4:53:
a1:80:3a:7d:76:4d:59:a2:23:0d:aa:77:08:79:1c:90:a4:c3:
f4:ed:dd:32:2d:a1:27:fc:8e:d1:48:af:48:3f:e8:dc:94:c0:
8e:b5:e5:67:f3:b7:f1:cc:48:e0:41:16:a6:30:d5:6f:99:36:
69:db:cb:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eBv9UpxbgS+gEogNxsIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTkzZjc4Y2FlNDQ1OWE5YjllMjY4OWFkMzBmMGJjNDRj
YzY3MjQwHhcNMjYwMzI5MTIwMTA1WhcNMjYwMzMwMTIwMTA1WjAzMTEwLwYDVQQD
EygwZjYzMWI5OTJjMDQwODVlNGRjY2UzZDUwNmEzZTU4YWE4MDRmMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpY7iIzXV1BZfkatd4hzNXI6BBEX
jSHnOlbfYG+X/0Tvip3Aw2RPzkqUhvQ76Cx7IYuYf2jMsUyiwRMLi/p7IxhiteyJ
Na+7vk+vZ7pktr3e4XSNHKw7L6jIXwjnD+PNTl++kSyIvFYC+iiizCUbgTRBLEki
gubWrbwanJ++98LOLz61VWgh0h8LcfRTZBAinJJd9WvX7xakcHY0brLnThgjioJX
Dt70x4GlOjC54spPDgKus1pHSzymOC8yHT7+xFEA56IX2v+Pvs9Swo739hcv0MQE
HR9SlZxu4baBh4Uyd/bDBZ1eUSmd3tGDJpSCSXv2vxZJJEu5lQwZCS/mewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9jG5ksBAheTczj1Qaj5YqoBPE5MB8GA1UdIwQY
MBaAFNGZP3jK5EWam54mia0w8LxEzGckMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMt
NGIwNTc3NGRlMzcxLzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMtNGIwNTc3NGRlMzcx
LzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdP99NiE
PKYaSQX7iLHw3LW05YbSrGvU8DHIJzRZQTm4oGnbh9NZHhGo8O/xAmnnxCz9pjJc
8/mrBKKWKx/ivhJAehzf1f4zO1a+wC2xJlh33drNhmlBpb6GfPXxuqWOCeCMsvSd
dD3ZLQ5HC3dJpnJTVNBAfmlxekpPhalp+iUuKOkZji+kfuVKJIycPB9Sl2DMb5Jt
I+Vx1ymZZLFyW+czqy3FopcfSZSCJTq0cP2x5EGbGZVTM83rbxrW+R3GrahsD7RT
oYA6fXZNWaIjDap3CHkckKTD9O3dMi2hJ/yO0UivSD/o3JTAjrXlZ/O38cxI4EEW
pjDVb5k2advLww==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:29 2026 by rpki-client