Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json)
Hash identifier: NKub+KjxObbHzLvqcE8ovqEJsLwUGN3ItRzqht56qBg=
Subject key identifier: C4:8E:19:A3:42:1C:1C:D2:62:F3:95:8F:D1:4A:FD:D1:17:2E:64:8F
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial: 019D28BB6DE2E2458773AB40D94B9E31DA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:04 +0000
Manifest this update: Thu 26 Mar 2026 06:01:04 +0000
Manifest next update: Fri 27 Mar 2026 06:01:04 +0000
Files and hashes: 1: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: h9c8DP3yJe53RA/QvYLm5Ig257GBsuAKaHa/SYjWbXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:6d:e2:e2:45:87:73:ab:40:d9:4b:9e:31:da:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Validity
Not Before: Mar 26 06:01:04 2026 GMT
Not After : Mar 27 06:01:04 2026 GMT
Subject: CN=c48e19a3421c1cd262f3958fd14afdd1172e648f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:7d:ca:5d:1e:32:23:aa:15:01:7a:79:3b:
07:26:d7:1d:8f:c4:b9:cd:2d:91:49:e3:88:33:7c:
4d:2f:60:ea:93:5b:62:a8:9a:e4:d9:25:4c:5e:30:
0c:57:40:57:ad:55:22:9b:1d:15:81:ca:d5:2a:db:
7a:f3:bc:2b:3e:52:ef:31:96:39:be:27:a9:24:f5:
df:6d:da:8b:b0:1b:2b:ad:ac:dd:39:03:27:5d:95:
c7:f0:04:65:b3:8e:97:ca:88:25:40:83:f7:e9:de:
02:5f:5a:91:68:a2:c9:c0:09:cf:b4:c3:cf:48:69:
e5:6c:3f:0e:99:3a:7d:8b:63:b9:d7:09:c7:74:ee:
3e:9c:1c:de:b2:a8:30:7c:00:23:0c:20:05:64:af:
3b:d4:6c:e0:ac:01:01:12:fa:de:a8:92:c4:ff:52:
3b:b5:45:e9:2b:48:ec:79:87:54:6e:88:21:e3:d2:
e9:c0:d3:35:8a:af:95:ff:86:c6:aa:47:49:49:15:
7f:97:76:b7:65:86:40:8c:82:38:75:86:7a:9c:70:
b1:a7:d2:a9:b7:84:24:ec:d2:5f:68:85:4b:d9:b8:
55:b4:44:95:fa:e4:b8:78:b6:29:89:8c:a5:23:3f:
17:d7:7d:a2:27:29:9f:c2:6b:f0:b6:fb:09:ce:c0:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8E:19:A3:42:1C:1C:D2:62:F3:95:8F:D1:4A:FD:D1:17:2E:64:8F
X509v3 Authority Key Identifier:
keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b2:66:43:e7:0f:ab:c5:d8:82:9d:03:5d:29:13:2a:b1:8f:
bc:db:a3:15:79:38:92:24:9e:31:4a:38:eb:0e:9b:17:65:d1:
86:4f:2a:77:c4:99:85:4e:18:26:bc:d0:73:72:91:04:86:40:
59:11:6e:99:b5:e3:08:b3:06:8d:20:b3:6f:3f:86:bb:f7:fd:
f2:52:c4:7b:d0:fa:a9:87:fe:72:18:2c:ca:5a:80:1d:a8:6a:
0b:d9:8e:24:5f:29:63:3c:e9:1a:5e:a6:da:0b:be:02:d8:6b:
34:ab:8d:21:17:e8:ae:08:d5:8a:56:1d:8a:c0:24:9c:91:fb:
14:4f:dc:96:92:ae:d5:d3:fc:9b:f4:bd:2c:13:30:81:7b:e6:
09:e4:35:29:21:ef:a6:fa:44:dc:09:1c:67:94:b5:01:c5:f9:
54:0d:3a:88:c5:70:5e:20:ac:d9:1b:24:19:94:bf:8c:ce:75:
e0:3f:95:b2:de:6a:64:7f:cf:07:25:23:e6:2d:05:cc:51:2f:
51:3b:5a:c0:2b:af:56:de:ab:69:9b:2b:cc:77:ff:1b:e8:3e:
51:cb:5e:a0:3e:bd:73:28:9e:b1:7d:96:18:a8:56:01:e1:c4:
7b:36:5b:21:77:50:db:4f:9a:7c:f9:16:1f:ee:49:c8:3d:95:
53:21:ad:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou23i4kWHc6tA2UueMdpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNGIxZTRiNWI5YTUwMDMxYjU5ZDQxOTczMjFhMDk5YTg1
NzA1NDAwHhcNMjYwMzI2MDYwMTA0WhcNMjYwMzI3MDYwMTA0WjAzMTEwLwYDVQQD
EyhjNDhlMTlhMzQyMWMxY2QyNjJmMzk1OGZkMTRhZmRkMTE3MmU2NDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsN9yl0eMiOqFQF6eTsHJtcdj8S5
zS2RSeOIM3xNL2Dqk1tiqJrk2SVMXjAMV0BXrVUimx0VgcrVKtt687wrPlLvMZY5
viepJPXfbdqLsBsrrazdOQMnXZXH8ARls46XyoglQIP36d4CX1qRaKLJwAnPtMPP
SGnlbD8OmTp9i2O51wnHdO4+nBzesqgwfAAjDCAFZK871GzgrAEBEvreqJLE/1I7
tUXpK0jseYdUbogh49LpwNM1iq+V/4bGqkdJSRV/l3a3ZYZAjII4dYZ6nHCxp9Kp
t4Qk7NJfaIVL2bhVtESV+uS4eLYpiYylIz8X132iJymfwmvwtvsJzsCmhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSOGaNCHBzSYvOVj9FK/dEXLmSPMB8GA1UdIwQY
MBaAFMxLHktbmlADG1nUGXMhoJmoVwVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjIt
NzM1YTNmYWU2MjE2LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjItNzM1YTNmYWU2MjE2
LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7JmQ+cP
q8XYgp0DXSkTKrGPvNujFXk4kiSeMUo46w6bF2XRhk8qd8SZhU4YJrzQc3KRBIZA
WRFumbXjCLMGjSCzbz+Gu/f98lLEe9D6qYf+chgsylqAHahqC9mOJF8pYzzpGl6m
2gu+AthrNKuNIRforgjVilYdisAknJH7FE/clpKu1dP8m/S9LBMwgXvmCeQ1KSHv
pvpE3AkcZ5S1AcX5VA06iMVwXiCs2RskGZS/jM514D+Vst5qZH/PByUj5i0FzFEv
UTtawCuvVt6raZsrzHf/G+g+UcteoD69cyiesX2WGKhWAeHEezZbIXdQ20+afPkW
H+5JyD2VUyGtvw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:41 2026 by rpki-client