Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
File: zWv2DrCPHiOrqLp5fBFyREzhW3E.mft (raw, json)
Hash identifier: jOj5Jvs2mMc8cxAUnt5r/zQqbehZu6HzECip6vo69RA=
Subject key identifier: 62:9C:1A:68:8A:D0:93:68:E1:39:47:F2:D2:C7:B7:1A:B0:17:96:AF
Authority key identifier: CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
Certificate issuer: /CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Certificate serial: 019D28F2D6568E09842E677586A13516930B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
Manifest number: 1335
Signing time: Thu 26 Mar 2026 07:01:36 +0000
Manifest this update: Thu 26 Mar 2026 07:01:36 +0000
Manifest next update: Fri 27 Mar 2026 07:01:36 +0000
Files and hashes: 1: zWv2DrCPHiOrqLp5fBFyREzhW3E.crl (hash: vfg+vA8MqrwuFL+XTv7JdlwTpEQqkJLrl2oLP5qkjm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d6:56:8e:09:84:2e:67:75:86:a1:35:16:93:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Validity
Not Before: Mar 26 07:01:36 2026 GMT
Not After : Mar 27 07:01:36 2026 GMT
Subject: CN=629c1a688ad09368e13947f2d2c7b71ab01796af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:72:47:d8:7f:a6:d7:77:03:db:a7:cb:7b:
68:88:6f:81:33:6d:69:df:42:42:0f:57:a5:b0:e2:
a8:39:a8:1b:ea:2c:e7:a2:32:3a:d0:02:8b:d9:05:
b9:09:27:d0:18:9a:56:b8:89:29:ff:21:aa:3b:42:
a0:b2:35:78:33:7b:c5:95:5f:75:1d:c3:96:73:0a:
65:26:19:6f:d4:73:6e:32:4b:dc:32:f6:a3:11:e3:
25:b1:cc:c7:21:1d:52:52:6b:64:bd:51:8d:37:87:
0a:1e:9c:8c:27:1a:7e:c6:69:3b:f3:c9:ff:2e:4b:
c7:ff:a2:58:28:2e:f3:e3:b1:e0:7e:26:1f:83:08:
6b:af:51:32:3b:ef:2e:e1:2d:dd:1a:52:90:d7:49:
2c:2f:64:c4:24:a0:53:4d:a5:e0:91:bf:d3:73:af:
3b:84:a4:34:46:c1:e2:68:85:38:ed:72:2b:f1:a5:
0a:fa:02:b2:08:db:9e:68:ab:bd:32:b5:53:74:bb:
76:25:7b:c4:53:a3:b9:a7:53:7c:d4:3c:e9:9c:52:
e2:76:54:cc:e4:92:6c:ff:65:ce:7a:ed:99:10:d6:
5e:a9:fb:1a:01:52:7e:f9:3d:fb:6b:06:01:8d:1e:
6e:fe:c6:4a:50:18:c6:5d:e1:37:b9:4d:cd:72:56:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9C:1A:68:8A:D0:93:68:E1:39:47:F2:D2:C7:B7:1A:B0:17:96:AF
X509v3 Authority Key Identifier:
keyid:CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:15:24:24:a4:93:94:d1:23:42:b7:ef:9e:1a:2d:12:53:38:
bc:e6:06:a7:65:70:21:8d:f3:b9:df:b3:23:fc:b9:45:dd:35:
e1:57:0c:80:a1:3f:9d:57:31:b6:07:75:19:e4:86:44:43:96:
cb:c8:1e:ef:e2:8e:10:49:bb:27:8f:f0:89:17:f9:b5:ce:fd:
dc:85:64:6f:e4:66:5a:2e:9b:fa:51:0a:cd:2a:74:23:a0:26:
d1:7a:dc:fc:0f:cb:f1:19:cb:56:94:c9:c3:bf:1e:42:db:5d:
4b:cd:e4:4d:5a:ab:f3:72:84:79:03:b0:b4:0d:28:2c:ff:bb:
18:73:10:ce:07:91:0c:97:4f:f6:45:c6:a4:6f:95:f4:19:77:
42:c3:08:4b:c0:89:db:cf:15:10:1c:dc:01:4e:bc:f7:39:7d:
4e:86:d3:22:2e:68:22:d5:1c:46:1f:6d:10:7a:ff:96:ab:a4:
51:89:5b:5e:42:3a:34:17:50:f5:5a:dc:27:ec:d8:7a:e6:12:
41:fb:d1:15:2f:ef:d9:20:6f:b3:51:70:4e:63:d6:87:0d:9d:
c0:da:b2:23:a2:5f:38:84:f1:43:db:38:8b:58:a6:a9:2b:68:
6c:89:f8:81:e4:dc:33:9f:c1:79:3e:d5:5c:73:11:4c:49:cb:
ed:54:c4:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8tZWjgmELmd1hqE1FpMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNmJmNjBlYjA4ZjFlMjNhYmE4YmE3OTdjMTE3MjQ0NGNl
MTViNzEwHhcNMjYwMzI2MDcwMTM2WhcNMjYwMzI3MDcwMTM2WjAzMTEwLwYDVQQD
Eyg2MjljMWE2ODhhZDA5MzY4ZTEzOTQ3ZjJkMmM3YjcxYWIwMTc5NmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJFyR9h/ptd3A9uny3toiG+BM21p
30JCD1elsOKoOagb6iznojI60AKL2QW5CSfQGJpWuIkp/yGqO0KgsjV4M3vFlV91
HcOWcwplJhlv1HNuMkvcMvajEeMlsczHIR1SUmtkvVGNN4cKHpyMJxp+xmk788n/
LkvH/6JYKC7z47HgfiYfgwhrr1EyO+8u4S3dGlKQ10ksL2TEJKBTTaXgkb/Tc687
hKQ0RsHiaIU47XIr8aUK+gKyCNueaKu9MrVTdLt2JXvEU6O5p1N81DzpnFLidlTM
5JJs/2XOeu2ZENZeqfsaAVJ++T37awYBjR5u/sZKUBjGXeE3uU3NclYuDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKcGmiK0JNo4TlH8tLHtxqwF5avMB8GA1UdIwQY
MBaAFM1r9g6wjx4jq6i6eXwRckRM4VtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lODc1NjctNmRkOC00YTYwLTkyMWUt
MmEwNzIyYWUxNjQ0LzEveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lODc1NjctNmRkOC00YTYwLTkyMWUtMmEwNzIyYWUxNjQ0
LzEveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxUkJKST
lNEjQrfvnhotElM4vOYGp2VwIY3zud+zI/y5Rd014VcMgKE/nVcxtgd1GeSGREOW
y8ge7+KOEEm7J4/wiRf5tc793IVkb+RmWi6b+lEKzSp0I6Am0Xrc/A/L8RnLVpTJ
w78eQttdS83kTVqr83KEeQOwtA0oLP+7GHMQzgeRDJdP9kXGpG+V9Bl3QsMIS8CJ
288VEBzcAU689zl9TobTIi5oItUcRh9tEHr/lqukUYlbXkI6NBdQ9VrcJ+zYeuYS
QfvRFS/v2SBvs1FwTmPWhw2dwNqyI6JfOITxQ9s4i1imqStobIn4geTcM5/BeT7V
XHMRTEnL7VTEDg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:31 2026 by rpki-client