Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
File: z32kMRhYgiWjduwhScczbEYzZEA.mft (raw, json)
Hash identifier: A0npJT0F6KDJQ6gtdbTqUgORmRg8BiGCp7G2mA0ovdE=
Subject key identifier: 5F:B7:26:1E:DA:20:FC:2A:13:E6:20:60:EA:3E:43:6A:48:11:5F:4B
Authority key identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
Certificate issuer: /CN=cf7da43118588225a376ec2149c7336c46336440
Certificate serial: 019D26CCC7C88AC4EB2161B102631E0DEF2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
Manifest number: 10A4
Signing time: Wed 25 Mar 2026 21:00:47 +0000
Manifest this update: Wed 25 Mar 2026 21:00:47 +0000
Manifest next update: Thu 26 Mar 2026 21:00:47 +0000
Files and hashes: 1: z32kMRhYgiWjduwhScczbEYzZEA.crl (hash: 0Rsff3WkebpTCwjR96q2LfZy6KmonbMev+67Fc1DnYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c7:c8:8a:c4:eb:21:61:b1:02:63:1e:0d:ef:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7da43118588225a376ec2149c7336c46336440
Validity
Not Before: Mar 25 21:00:47 2026 GMT
Not After : Mar 26 21:00:47 2026 GMT
Subject: CN=5fb7261eda20fc2a13e62060ea3e436a48115f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:d3:80:0f:89:c5:95:25:ba:f2:e3:be:d2:
65:de:65:83:70:99:90:a4:8f:af:9c:8f:8b:9c:59:
27:35:3e:54:be:ae:79:6c:07:c3:c4:bf:d2:f5:d9:
c9:d2:fc:7f:76:91:86:27:d2:cd:54:f9:4a:42:b1:
e9:d5:3b:47:2d:9e:80:15:ef:37:6a:64:ee:45:7f:
da:fd:94:a7:99:9c:7d:95:fb:71:e4:dd:1c:24:eb:
f9:bf:38:19:f1:1c:bc:f8:c1:68:f2:ac:86:9a:5a:
6c:18:4a:af:d9:9a:f1:58:5c:1c:8e:d3:4b:75:29:
09:7a:9e:72:e3:ce:7e:93:b6:b2:cc:51:0c:82:69:
f8:fb:4e:42:ca:82:01:e8:30:b7:ff:df:42:3e:7c:
d7:36:63:b3:2b:c5:f0:fe:b5:89:d8:bf:87:da:22:
63:3b:35:25:d7:64:b7:1c:49:6a:b6:00:c7:46:75:
b7:ab:35:63:cb:a6:48:9a:dc:a6:fd:38:79:5b:96:
7f:c9:cc:29:21:85:f7:60:fa:77:b3:79:6e:78:2e:
ea:5a:55:fa:40:40:08:04:cd:c1:eb:6b:32:df:6d:
9f:88:6e:8d:f7:ea:15:00:12:22:76:19:62:09:b0:
a4:72:67:56:71:fd:3c:2b:b5:2f:7d:16:c4:06:dd:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B7:26:1E:DA:20:FC:2A:13:E6:20:60:EA:3E:43:6A:48:11:5F:4B
X509v3 Authority Key Identifier:
keyid:CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:09:1d:0c:d5:41:80:05:8c:d9:02:ed:ab:53:ee:4e:14:46:
d3:6a:c1:6a:86:59:9a:f1:df:b6:86:e5:71:e8:55:ee:ef:89:
39:9a:a5:99:07:70:7a:94:47:9c:87:13:b4:4c:12:86:65:9c:
f8:02:c9:7b:13:f0:86:c8:bb:82:b3:25:ad:cc:c1:ad:3c:8b:
fe:49:ed:88:b1:8d:fd:48:33:d5:d8:25:47:52:ac:5e:b6:4c:
73:56:94:33:b6:c9:d2:24:5e:76:db:db:e2:7b:4b:c5:1a:4b:
b9:a6:1b:d8:c4:f4:04:a2:09:80:d1:54:24:95:b6:26:0a:82:
38:60:39:9c:b9:fc:5b:0b:f2:67:3f:50:f7:3c:7a:1a:ee:38:
14:44:22:77:50:b5:7f:94:6e:41:fc:93:bf:ae:8e:47:a0:19:
24:86:fb:31:5f:c9:88:22:7e:56:46:01:da:02:9f:dd:2a:3c:
75:14:f2:c7:18:7b:bd:ba:b5:0a:f9:f0:4d:69:3a:f4:e0:e9:
59:ce:30:cb:3b:c8:83:cd:db:02:68:ff:29:59:ef:c2:6e:18:
73:fb:30:2f:61:cd:41:5a:f9:04:13:2a:15:b2:8b:69:74:7a:
63:e8:54:b6:90:59:f5:6f:a4:1a:cc:e0:ce:20:16:15:b1:ed:
6e:99:41:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzMfIisTrIWGxAmMeDe8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmN2RhNDMxMTg1ODgyMjVhMzc2ZWMyMTQ5YzczMzZjNDYz
MzY0NDAwHhcNMjYwMzI1MjEwMDQ3WhcNMjYwMzI2MjEwMDQ3WjAzMTEwLwYDVQQD
Eyg1ZmI3MjYxZWRhMjBmYzJhMTNlNjIwNjBlYTNlNDM2YTQ4MTE1ZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7PTgA+JxZUluvLjvtJl3mWDcJmQ
pI+vnI+LnFknNT5Uvq55bAfDxL/S9dnJ0vx/dpGGJ9LNVPlKQrHp1TtHLZ6AFe83
amTuRX/a/ZSnmZx9lftx5N0cJOv5vzgZ8Ry8+MFo8qyGmlpsGEqv2ZrxWFwcjtNL
dSkJep5y485+k7ayzFEMgmn4+05CyoIB6DC3/99CPnzXNmOzK8Xw/rWJ2L+H2iJj
OzUl12S3HElqtgDHRnW3qzVjy6ZImtym/Th5W5Z/ycwpIYX3YPp3s3lueC7qWlX6
QEAIBM3B62sy322fiG6N9+oVABIidhliCbCkcmdWcf08K7UvfRbEBt3WWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+3Jh7aIPwqE+YgYOo+Q2pIEV9LMB8GA1UdIwQY
MBaAFM99pDEYWIIlo3bsIUnHM2xGM2RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wZTRhNzUtY2I1OC00NGFhLTlkZDUt
YzVmMTdlYWI0MWQ1LzEvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wZTRhNzUtY2I1OC00NGFhLTlkZDUtYzVmMTdlYWI0MWQ1
LzEvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgkdDNVB
gAWM2QLtq1PuThRG02rBaoZZmvHftoblcehV7u+JOZqlmQdwepRHnIcTtEwShmWc
+ALJexPwhsi7grMlrczBrTyL/kntiLGN/Ugz1dglR1KsXrZMc1aUM7bJ0iRedtvb
4ntLxRpLuaYb2MT0BKIJgNFUJJW2JgqCOGA5nLn8WwvyZz9Q9zx6Gu44FEQid1C1
f5RuQfyTv66OR6AZJIb7MV/JiCJ+VkYB2gKf3So8dRTyxxh7vbq1CvnwTWk69ODp
Wc4wyzvIg83bAmj/KVnvwm4Yc/swL2HNQVr5BBMqFbKLaXR6Y+hUtpBZ9W+kGszg
ziAWFbHtbplB+g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:30 2026 by rpki-client