Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File: zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier: 2dLlhs8TTICo1PwxtqTJh6XGgnrs9DGevx9whUWKK7E=
Subject key identifier: DA:B0:ED:E0:B8:B6:6C:FC:98:BD:38:9B:F4:52:85:7C:73:AD:57:2D
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer: /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial: 019D2AE1385DBDAE12BD76D8AFBAEFA9F637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number: 1519
Signing time: Thu 26 Mar 2026 16:01:36 +0000
Manifest this update: Thu 26 Mar 2026 16:01:36 +0000
Manifest next update: Fri 27 Mar 2026 16:01:36 +0000
Files and hashes: 1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: 7froJtnCo1AuMdGeOE4CYXpNLLvpGZfA5IBMae8ULKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:38:5d:bd:ae:12:bd:76:d8:af:ba:ef:a9:f6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Validity
Not Before: Mar 26 16:01:36 2026 GMT
Not After : Mar 27 16:01:36 2026 GMT
Subject: CN=dab0ede0b8b66cfc98bd389bf452857c73ad572d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:5b:1c:7a:51:a9:af:28:2d:7b:35:c1:b9:
0a:ba:13:b2:b3:0a:e9:6f:71:51:05:10:a7:c4:d2:
df:4a:01:cd:61:b5:f7:8c:7e:d7:63:91:db:0c:08:
31:5d:0b:b0:81:3c:be:c2:e5:7e:93:9b:56:f0:8c:
26:78:15:a9:be:cd:2b:e0:95:de:ec:1e:77:52:e1:
32:fb:76:2a:8c:08:dd:3a:d3:d8:cd:d5:3d:bd:d5:
00:29:98:fd:0b:47:ea:23:b1:06:03:b7:bf:2c:60:
17:46:b0:9a:15:6c:b6:c6:6f:ae:1e:ba:9f:5b:4d:
33:94:6e:14:76:7f:76:7e:01:7e:43:61:94:03:b3:
09:2d:f1:93:27:6f:eb:29:b8:64:eb:30:ef:58:1c:
86:fa:4c:98:43:4c:61:3e:1b:fc:b7:f3:e5:8e:10:
19:ae:c1:f5:31:4d:34:6e:74:4d:e0:88:8d:2c:6c:
6f:38:aa:bf:0e:32:10:6f:2b:7b:86:95:87:a3:3b:
c8:27:94:58:a0:2a:6e:97:b3:4b:8e:98:a0:d1:f4:
b5:1a:ad:80:df:e0:c3:64:df:4d:73:8f:56:c8:f2:
8c:6d:53:b8:e8:ce:77:ef:cb:b2:8c:b3:12:c5:ce:
72:00:09:e0:38:79:2d:ac:19:f7:ab:69:76:a5:0a:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B0:ED:E0:B8:B6:6C:FC:98:BD:38:9B:F4:52:85:7C:73:AD:57:2D
X509v3 Authority Key Identifier:
keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:54:56:15:d8:ad:2a:62:6f:8a:af:31:aa:8b:d0:be:0a:38:
d6:df:95:39:f1:4b:9c:4a:5e:1f:6d:7b:5a:f3:41:99:e0:5e:
87:13:0e:e5:b0:60:bc:ee:91:a8:db:9f:f6:19:67:a4:7e:6f:
c8:c9:3d:4f:fc:10:08:c6:b7:47:e9:35:3e:54:2c:4c:c0:41:
88:48:72:49:b7:71:21:0a:6c:18:21:d0:4c:96:32:95:aa:ab:
27:7e:fe:7b:8e:d3:38:af:aa:4f:e8:b0:70:67:92:31:64:86:
27:5f:52:d0:2a:2b:bf:fc:6a:1d:22:2c:1c:8d:25:ef:a1:ee:
5c:c6:fd:5c:8e:64:84:cb:23:1a:07:f6:e6:0a:b9:9c:63:92:
79:a7:98:f8:20:34:2e:61:ef:47:8a:78:15:f8:3a:b7:93:d7:
f1:48:26:24:75:f5:93:c1:87:5f:84:5a:68:5a:dc:49:90:ce:
06:9d:c8:d6:89:80:39:e3:15:d3:c7:88:88:d7:15:8a:e3:74:
11:60:a2:bd:9f:86:e6:09:2f:05:5b:e5:06:c2:85:dd:88:33:
72:4d:ab:2f:9b:c4:4b:78:28:2b:37:7a:4f:e8:77:ad:70:5e:
63:51:99:95:f7:40:25:e3:1d:21:40:94:8e:79:ec:aa:32:c5:
05:fa:f4:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4Thdva4SvXbYr7rvqfY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDFjM2FmMmNkNTk4NjU3NWQxYmNmNjVlYzllODc3NjY2
ZWRlMzYwHhcNMjYwMzI2MTYwMTM2WhcNMjYwMzI3MTYwMTM2WjAzMTEwLwYDVQQD
EyhkYWIwZWRlMGI4YjY2Y2ZjOThiZDM4OWJmNDUyODU3YzczYWQ1NzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK5bHHpRqa8oLXs1wbkKuhOyswrp
b3FRBRCnxNLfSgHNYbX3jH7XY5HbDAgxXQuwgTy+wuV+k5tW8IwmeBWpvs0r4JXe
7B53UuEy+3YqjAjdOtPYzdU9vdUAKZj9C0fqI7EGA7e/LGAXRrCaFWy2xm+uHrqf
W00zlG4Udn92fgF+Q2GUA7MJLfGTJ2/rKbhk6zDvWByG+kyYQ0xhPhv8t/PljhAZ
rsH1MU00bnRN4IiNLGxvOKq/DjIQbyt7hpWHozvIJ5RYoCpul7NLjpig0fS1Gq2A
3+DDZN9Nc49WyPKMbVO46M5378uyjLMSxc5yAAngOHktrBn3q2l2pQqgHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqw7eC4tmz8mL04m/RShXxzrVctMB8GA1UdIwQY
MBaAFMxBw68s1ZhlddG89l7J6Hdmbt42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YTZlNTEtNGE4Zi00MGQzLWIwZmEt
NGM2NTIyNDUzYzlhLzEvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85YTZlNTEtNGE4Zi00MGQzLWIwZmEtNGM2NTIyNDUzYzlh
LzEvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFRWFdit
KmJviq8xqovQvgo41t+VOfFLnEpeH217WvNBmeBehxMO5bBgvO6RqNuf9hlnpH5v
yMk9T/wQCMa3R+k1PlQsTMBBiEhySbdxIQpsGCHQTJYylaqrJ37+e47TOK+qT+iw
cGeSMWSGJ19S0Corv/xqHSIsHI0l76HuXMb9XI5khMsjGgf25gq5nGOSeaeY+CA0
LmHvR4p4Ffg6t5PX8UgmJHX1k8GHX4RaaFrcSZDOBp3I1omAOeMV08eIiNcViuN0
EWCivZ+G5gkvBVvlBsKF3Ygzck2rL5vES3goKzd6T+h3rXBeY1GZlfdAJeMdIUCU
jnnsqjLFBfr0hA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:05:50 2026 by rpki-client