Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier: fbvo5TnqeYU69wHk7dYTVDiawe4kXCs2rqNME/bk64g=
Subject key identifier: 55:EB:EE:0F:75:66:07:86:02:06:42:82:80:2E:F0:5E:8B:D4:A5:BA
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 019D284D9B8B8F8E943DB72B737E5F7F2CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number: 0613
Signing time: Thu 26 Mar 2026 04:01:07 +0000
Manifest this update: Thu 26 Mar 2026 04:01:07 +0000
Manifest next update: Fri 27 Mar 2026 04:01:07 +0000
Files and hashes: 1: JeHtS9ixybUtWgHJC3lED1Xlc4E.roa (hash: ddx2wHgY9/unmcGfDoucGgaOd7BG1ivN8l1QA0QmEIc=)
2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: kDnow57Y7ZXHOez0i81c2w1sZgaIr9ev54O4wVgt3lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:9b:8b:8f:8e:94:3d:b7:2b:73:7e:5f:7f:2c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Mar 26 04:01:07 2026 GMT
Not After : Mar 27 04:01:07 2026 GMT
Subject: CN=55ebee0f7566078602064282802ef05e8bd4a5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:17:99:8c:46:6d:a7:37:9c:66:88:16:c5:
83:0c:0e:09:25:56:c9:ba:ac:49:1d:12:2d:1d:37:
fe:a4:7c:8f:aa:6d:b7:fc:c7:38:65:91:2b:42:b1:
5e:8a:38:a9:fb:88:52:2d:a3:a7:75:7d:e2:2c:40:
9b:0a:39:ce:f2:4e:24:f3:bd:7d:00:c5:66:96:0a:
73:6c:3a:6d:32:d3:79:a7:fb:f2:65:28:1b:5c:7a:
91:a5:c6:25:80:3a:41:2a:6b:8c:97:ca:97:40:8a:
55:51:5f:04:f0:58:66:43:cb:9b:4a:3c:d4:72:bd:
c6:e3:00:3b:42:d2:03:6a:22:1f:06:34:c2:34:dd:
1b:8b:4c:fe:ef:42:01:f8:1a:0e:80:96:0a:29:b3:
6c:52:5e:13:0a:9d:df:47:78:59:7b:d5:fb:5e:42:
e0:10:3f:8d:cb:c2:2f:bb:e6:0c:0b:ae:07:f5:27:
54:a9:17:38:71:6c:c0:77:6a:ac:15:e9:8e:d9:1c:
b3:0d:f1:b5:99:9a:5d:d8:31:68:b6:fe:e2:1f:07:
77:73:6a:46:92:b0:f6:90:c4:e9:35:37:52:ac:82:
fe:57:5d:ec:f5:33:87:61:04:6f:f3:60:69:00:f5:
87:f3:c3:3f:b2:68:59:51:a0:8e:c7:9d:e5:e2:fa:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EB:EE:0F:75:66:07:86:02:06:42:82:80:2E:F0:5E:8B:D4:A5:BA
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0a:2c:34:a0:ab:06:37:dc:72:6c:9c:56:9b:e8:46:a3:89:
26:e6:b9:a0:d1:96:41:8d:27:20:8e:90:e2:63:86:20:60:89:
ff:55:b4:7e:91:f0:3d:07:72:11:ad:a8:21:94:95:9b:f4:6c:
4c:9f:16:58:ac:60:60:16:bb:e4:68:01:d5:9e:27:44:48:24:
a3:42:95:5b:02:8b:40:ed:60:d6:c1:ab:49:8e:c4:f0:3f:41:
24:08:db:16:e5:78:84:44:3c:1d:58:f3:ee:4a:0f:2e:9f:b9:
3b:53:99:7b:63:98:32:d0:58:67:ce:f1:eb:1a:ff:70:2c:6b:
fe:45:74:04:ad:76:a2:2b:eb:6e:63:6d:45:50:4c:4e:62:32:
ee:63:b8:c1:28:e7:f1:39:2a:9e:db:36:63:54:8b:75:73:e0:
c0:fc:86:13:f8:c5:24:1e:a0:85:28:21:b9:5d:3b:d4:93:2d:
2e:95:3b:39:07:b4:8d:aa:1e:11:09:fe:2a:fe:62:c0:ab:8b:
55:44:6d:83:3a:f8:33:b5:20:c6:6f:5f:14:fe:c8:71:58:69:
f1:f9:7a:2b:fc:f1:de:d5:5c:2b:e5:e4:c5:11:69:2f:7f:da:
ef:f1:92:97:a1:64:10:f4:31:2a:b0:e2:34:e1:24:49:47:b7:
0c:63:5c:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTZuLj46UPbcrc35ffyzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOWRlMDhiMzA1M2JhYzYxNzEzYzQ2YjQzZDQwOTM4MThj
MjA0NmYwHhcNMjYwMzI2MDQwMTA3WhcNMjYwMzI3MDQwMTA3WjAzMTEwLwYDVQQD
Eyg1NWViZWUwZjc1NjYwNzg2MDIwNjQyODI4MDJlZjA1ZThiZDRhNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtikXmYxGbac3nGaIFsWDDA4JJVbJ
uqxJHRItHTf+pHyPqm23/Mc4ZZErQrFeijip+4hSLaOndX3iLECbCjnO8k4k8719
AMVmlgpzbDptMtN5p/vyZSgbXHqRpcYlgDpBKmuMl8qXQIpVUV8E8FhmQ8ubSjzU
cr3G4wA7QtIDaiIfBjTCNN0bi0z+70IB+BoOgJYKKbNsUl4TCp3fR3hZe9X7XkLg
ED+Ny8Ivu+YMC64H9SdUqRc4cWzAd2qsFemO2RyzDfG1mZpd2DFotv7iHwd3c2pG
krD2kMTpNTdSrIL+V13s9TOHYQRv82BpAPWH88M/smhZUaCOx53l4voEyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXr7g91ZgeGAgZCgoAu8F6L1KW6MB8GA1UdIwQY
MBaAFM2d4IswU7rGFxPEa0PUCTgYwgRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zNGJmZjMtMzlkYS00ODc3LWI3NWMt
NTAxNmNlOTJmMTIyLzEvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zNGJmZjMtMzlkYS00ODc3LWI3NWMtNTAxNmNlOTJmMTIy
LzEvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgosNKCr
BjfccmycVpvoRqOJJua5oNGWQY0nII6Q4mOGIGCJ/1W0fpHwPQdyEa2oIZSVm/Rs
TJ8WWKxgYBa75GgB1Z4nREgko0KVWwKLQO1g1sGrSY7E8D9BJAjbFuV4hEQ8HVjz
7koPLp+5O1OZe2OYMtBYZ87x6xr/cCxr/kV0BK12oivrbmNtRVBMTmIy7mO4wSjn
8Tkqnts2Y1SLdXPgwPyGE/jFJB6ghSghuV071JMtLpU7OQe0jaoeEQn+Kv5iwKuL
VURtgzr4M7Ugxm9fFP7IcVhp8fl6K/zx3tVcK+XkxRFpL3/a7/GSl6FkEPQxKrDi
NOEkSUe3DGNc3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:29:29 2026 by rpki-client