Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
File: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft (raw, json)
Hash identifier: tVj+/kyev5rQ+BwbH6obeo7HHJeE2k57tU2GijbYhXg=
Subject key identifier: 40:C4:BC:F5:99:43:49:2D:94:70:5F:0E:01:C3:98:09:FE:D6:80:7F
Authority key identifier: 65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C
Certificate issuer: /CN=65a07d492468228aa306a66b056a0228c552ec5c
Certificate serial: 019D2703D0E97CA01560CA2499730456DB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
Manifest number: 0F9B
Signing time: Wed 25 Mar 2026 22:00:54 +0000
Manifest this update: Wed 25 Mar 2026 22:00:54 +0000
Manifest next update: Thu 26 Mar 2026 22:00:54 +0000
Files and hashes: 1: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl (hash: cB4JyW4GgOP02+DbkmSbzFCaoXDm0xQm+v6Q+FL8y6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:d0:e9:7c:a0:15:60:ca:24:99:73:04:56:db:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a07d492468228aa306a66b056a0228c552ec5c
Validity
Not Before: Mar 25 22:00:54 2026 GMT
Not After : Mar 26 22:00:54 2026 GMT
Subject: CN=40c4bcf59943492d94705f0e01c39809fed6807f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:fd:0a:64:7e:aa:20:fa:c7:16:b2:35:c2:
28:89:79:fa:f3:02:2d:38:d2:95:e1:47:70:81:be:
3d:d7:68:e1:f4:c3:20:b3:b4:0d:1d:b7:89:e5:99:
3a:86:30:cb:0e:e8:5a:5f:59:41:07:d8:19:c8:7e:
cc:5a:66:62:d5:98:3f:8b:b0:5c:4b:47:49:b9:41:
7a:f8:6e:f0:99:a0:6e:b2:db:e7:3a:30:16:5f:74:
d9:c0:a5:48:14:10:1f:c4:7f:8a:b2:8b:ef:5c:8b:
a1:b9:9c:fc:59:b3:0a:a8:f3:c4:55:f8:23:5d:81:
7e:77:1e:0d:97:78:9b:3a:c2:fa:78:db:25:8e:eb:
e7:16:d3:2a:34:16:cb:3b:41:d6:c9:85:af:54:c6:
7d:49:6a:84:4c:2d:b9:93:ef:e0:4b:3f:a3:0e:df:
f7:00:eb:a6:50:19:3d:fd:d6:47:37:b6:1c:e2:97:
79:c8:b0:27:1f:2f:34:8a:1e:ea:2f:c6:cc:28:d7:
b3:2d:c8:70:f1:23:1e:9c:54:3f:b7:02:a3:75:0c:
d5:17:c4:e2:42:b3:56:a4:13:55:1b:16:41:19:fc:
00:36:41:13:bb:13:c2:b3:11:a8:71:55:e6:39:78:
f0:d1:25:cf:49:21:68:9f:fb:fc:6f:ec:3c:37:90:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C4:BC:F5:99:43:49:2D:94:70:5F:0E:01:C3:98:09:FE:D6:80:7F
X509v3 Authority Key Identifier:
keyid:65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2b:f8:d2:02:05:14:ad:b0:4c:6d:79:0d:0e:b4:48:fc:6c:
7a:bf:53:ee:e1:7b:28:02:42:22:b5:5a:c3:01:32:b7:52:5b:
6d:a6:f2:91:a9:d6:9d:fd:f0:da:fe:cc:0c:02:6e:fe:47:6f:
a1:ad:f2:08:a0:74:c9:86:e8:b1:13:8f:75:d4:dc:f5:c7:c4:
b4:7e:6c:cc:8b:fb:ac:de:17:66:ce:d8:f3:c5:a2:fc:92:28:
b6:d3:20:55:a2:e9:88:09:1c:44:0e:1e:5e:e8:b0:25:e6:35:
e8:00:b2:d8:8a:38:ac:22:99:19:96:23:ad:e1:15:a4:6d:99:
da:27:2e:00:ff:b1:7a:e0:be:42:8d:c9:24:43:a3:50:a2:33:
d6:fd:f5:4f:5b:33:ce:73:1c:9a:66:af:5f:52:b4:f9:bc:b9:
02:cf:bb:46:b8:34:00:71:87:b7:44:c5:79:28:53:c6:21:53:
08:2e:3d:2b:bc:2e:52:1e:44:f7:50:4d:23:fd:d5:b3:9b:e1:
db:a4:fd:a9:c2:53:e1:b3:a2:fc:7b:0d:90:a6:bf:e4:c7:2c:
35:2d:ee:3a:2f:24:cd:84:ff:e9:52:b1:0f:99:d5:f3:79:bd:
cb:d0:04:6f:73:f6:c4:9d:7f:cd:ac:81:da:b7:cb:38:af:a1:
1f:73:49:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA9DpfKAVYMokmXMEVtsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTA3ZDQ5MjQ2ODIyOGFhMzA2YTY2YjA1NmEwMjI4YzU1
MmVjNWMwHhcNMjYwMzI1MjIwMDU0WhcNMjYwMzI2MjIwMDU0WjAzMTEwLwYDVQQD
Eyg0MGM0YmNmNTk5NDM0OTJkOTQ3MDVmMGUwMWMzOTgwOWZlZDY4MDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw879CmR+qiD6xxayNcIoiXn68wIt
ONKV4Udwgb4912jh9MMgs7QNHbeJ5Zk6hjDLDuhaX1lBB9gZyH7MWmZi1Zg/i7Bc
S0dJuUF6+G7wmaBustvnOjAWX3TZwKVIFBAfxH+KsovvXIuhuZz8WbMKqPPEVfgj
XYF+dx4Nl3ibOsL6eNsljuvnFtMqNBbLO0HWyYWvVMZ9SWqETC25k+/gSz+jDt/3
AOumUBk9/dZHN7Yc4pd5yLAnHy80ih7qL8bMKNezLchw8SMenFQ/twKjdQzVF8Ti
QrNWpBNVGxZBGfwANkETuxPCsxGocVXmOXjw0SXPSSFon/v8b+w8N5BulwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDEvPWZQ0ktlHBfDgHDmAn+1oB/MB8GA1UdIwQY
MBaAFGWgfUkkaCKKowamawVqAijFUuxcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xODMyOTgtZmI5OS00ZThmLTgyNjQt
ZWIwM2JiYTY1YTk2LzEvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8xODMyOTgtZmI5OS00ZThmLTgyNjQtZWIwM2JiYTY1YTk2
LzEvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCv40gIF
FK2wTG15DQ60SPxser9T7uF7KAJCIrVawwEyt1JbbabykanWnf3w2v7MDAJu/kdv
oa3yCKB0yYbosROPddTc9cfEtH5szIv7rN4XZs7Y88Wi/JIottMgVaLpiAkcRA4e
XuiwJeY16ACy2Io4rCKZGZYjreEVpG2Z2icuAP+xeuC+Qo3JJEOjUKIz1v31T1sz
znMcmmavX1K0+by5As+7Rrg0AHGHt0TFeShTxiFTCC49K7wuUh5E91BNI/3Vs5vh
26T9qcJT4bOi/HsNkKa/5McsNS3uOi8kzYT/6VKxD5nV83m9y9AEb3P2xJ1/zayB
2rfLOK+hH3NJEw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:27 2026 by rpki-client