Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.mft
File: Z9Af-mHt_1DLOPfyXzzQG8cRLwY.mft (raw, json)
Hash identifier: d2kBtVL0ipI3qbQ7JI493Ngo78ICow2Z2yH5iczy2iQ=
Subject key identifier: 64:27:AC:D7:75:D1:C6:D5:3F:95:92:BD:9D:9E:28:58:5F:57:FC:68
Authority key identifier: 67:D0:1F:FA:61:ED:FF:50:CB:38:F7:F2:5F:3C:D0:1B:C7:11:2F:06
Certificate issuer: /CN=67d01ffa61edff50cb38f7f25f3cd01bc7112f06
Certificate serial: 019D2628351055F4069934D7064B51BD3477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.mft
Manifest number: 27
Signing time: Wed 25 Mar 2026 18:01:02 +0000
Manifest this update: Wed 25 Mar 2026 18:01:02 +0000
Manifest next update: Thu 26 Mar 2026 18:01:02 +0000
Files and hashes: 1: Z9Af-mHt_1DLOPfyXzzQG8cRLwY.crl (hash: h8ktFwqkJYDUKBWgbi5ieAPPaCuRF1BTWHeJZF3UGlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:35:10:55:f4:06:99:34:d7:06:4b:51:bd:34:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d01ffa61edff50cb38f7f25f3cd01bc7112f06
Validity
Not Before: Mar 25 18:01:02 2026 GMT
Not After : Mar 26 18:01:02 2026 GMT
Subject: CN=6427acd775d1c6d53f9592bd9d9e28585f57fc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:0f:59:20:ca:37:51:17:7b:ff:a2:44:47:
82:0d:33:12:bc:1e:0a:77:43:a4:a5:64:d5:b5:d9:
38:27:21:2c:17:8f:c9:50:81:6c:6c:f3:6d:17:58:
2b:f4:20:be:a9:03:74:8d:d5:6f:14:7b:b0:39:1a:
73:33:6d:49:92:a0:fa:b3:43:8b:17:31:6a:e5:74:
24:3c:e4:73:35:5e:2e:6b:f8:22:89:f9:2d:87:4c:
9e:16:48:0e:87:b7:00:05:9e:3b:11:74:98:34:04:
f0:ca:3d:ab:11:2a:ea:39:b0:42:45:12:09:22:4a:
31:2a:2c:f8:d2:21:00:33:41:44:04:08:1f:67:ba:
36:d9:36:9d:64:76:49:68:42:53:27:e5:09:67:1e:
21:96:cf:c5:5e:47:d8:1b:97:ed:83:b2:0a:cb:5a:
95:7b:fc:a4:ae:b7:0e:f0:9b:d2:36:dc:78:6e:a0:
34:70:63:2c:62:5c:a7:fb:bd:c7:e2:d9:8d:c0:a7:
7a:ec:32:51:39:4c:be:e2:5d:75:cd:2f:57:90:fb:
f7:5c:9a:7c:db:a6:dd:53:46:3f:4d:e8:85:0d:18:
ed:2a:bf:ec:9e:b5:0c:2e:35:fd:23:d3:2c:72:bf:
c4:4b:dc:c3:ae:74:5a:c4:7b:b0:05:72:ad:d7:06:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:27:AC:D7:75:D1:C6:D5:3F:95:92:BD:9D:9E:28:58:5F:57:FC:68
X509v3 Authority Key Identifier:
keyid:67:D0:1F:FA:61:ED:FF:50:CB:38:F7:F2:5F:3C:D0:1B:C7:11:2F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f3036b-4b4a-4695-b7f0-5c7a4ebcbb7c/1/Z9Af-mHt_1DLOPfyXzzQG8cRLwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2f:58:ef:c5:06:bf:fd:66:9e:ea:18:37:e3:58:01:00:88:
4c:f9:ee:d9:5c:cd:9e:06:cc:74:78:77:c3:2c:80:a4:f0:3d:
30:0f:40:a1:73:10:f8:e7:80:28:48:12:75:2c:fe:6f:a4:2f:
97:8b:ef:d0:21:0f:6c:a6:41:51:84:82:7a:5a:e1:24:3d:7e:
be:0d:60:37:49:71:22:17:42:24:a3:27:7b:5d:3f:c0:9b:4c:
d8:5d:d3:88:4b:ec:77:40:02:98:73:c9:71:0f:4d:29:c1:63:
0d:6c:b9:e2:12:5b:9c:e5:a2:05:0b:97:e2:11:7d:ca:52:11:
e9:0d:fe:62:56:a4:53:e0:d8:79:e5:13:8b:96:1e:30:e2:9a:
cd:a4:15:2e:fc:6e:82:ed:d5:ba:3c:0a:1e:13:39:c5:bf:87:
19:7b:aa:f4:9e:dd:b4:06:f0:de:d9:c4:f8:58:ee:ce:8c:37:
7d:88:b1:85:d2:a5:93:2b:6c:0a:1f:de:76:7e:5f:94:83:fd:
70:e2:2c:10:61:fd:04:71:54:48:95:47:0a:ae:90:60:b1:af:
43:1e:4e:2d:e7:09:60:53:22:c4:e0:e9:8b:0f:05:e3:7e:d4:
ab:97:2e:1a:79:8e:04:cb:b0:f6:52:c5:76:d9:9a:ea:18:f4:
c9:f0:58:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKDUQVfQGmTTXBktRvTR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDAxZmZhNjFlZGZmNTBjYjM4ZjdmMjVmM2NkMDFiYzcx
MTJmMDYwHhcNMjYwMzI1MTgwMTAyWhcNMjYwMzI2MTgwMTAyWjAzMTEwLwYDVQQD
Eyg2NDI3YWNkNzc1ZDFjNmQ1M2Y5NTkyYmQ5ZDllMjg1ODVmNTdmYzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhwPWSDKN1EXe/+iREeCDTMSvB4K
d0OkpWTVtdk4JyEsF4/JUIFsbPNtF1gr9CC+qQN0jdVvFHuwORpzM21JkqD6s0OL
FzFq5XQkPORzNV4ua/giifkth0yeFkgOh7cABZ47EXSYNATwyj2rESrqObBCRRIJ
IkoxKiz40iEAM0FEBAgfZ7o22TadZHZJaEJTJ+UJZx4hls/FXkfYG5ftg7IKy1qV
e/ykrrcO8JvSNtx4bqA0cGMsYlyn+73H4tmNwKd67DJROUy+4l11zS9XkPv3XJp8
26bdU0Y/TeiFDRjtKr/snrUMLjX9I9Mscr/ES9zDrnRaxHuwBXKt1wY0hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQnrNd10cbVP5WSvZ2eKFhfV/xoMB8GA1UdIwQY
MBaAFGfQH/ph7f9Qyzj38l880BvHES8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjlBZi1tSHRfMURMT1BmeVh6elFHOGNSTHdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMzAzNmItNGI0YS00Njk1LWI3ZjAt
NWM3YTRlYmNiYjdjLzEvWjlBZi1tSHRfMURMT1BmeVh6elFHOGNSTHdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mMzAzNmItNGI0YS00Njk1LWI3ZjAtNWM3YTRlYmNiYjdj
LzEvWjlBZi1tSHRfMURMT1BmeVh6elFHOGNSTHdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVC9Y78UG
v/1mnuoYN+NYAQCITPnu2VzNngbMdHh3wyyApPA9MA9AoXMQ+OeAKEgSdSz+b6Qv
l4vv0CEPbKZBUYSCelrhJD1+vg1gN0lxIhdCJKMne10/wJtM2F3TiEvsd0ACmHPJ
cQ9NKcFjDWy54hJbnOWiBQuX4hF9ylIR6Q3+YlakU+DYeeUTi5YeMOKazaQVLvxu
gu3VujwKHhM5xb+HGXuq9J7dtAbw3tnE+Fjuzow3fYixhdKlkytsCh/edn5flIP9
cOIsEGH9BHFUSJVHCq6QYLGvQx5OLecJYFMixODpiw8F437Uq5cuGnmOBMuw9lLF
dtma6hj0yfBYpA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:15 2026 by rpki-client