Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: aDwkGGw6tsOwTulrFbG1w2gTcvqADqnYR5X9nzB5gk4=
Subject key identifier: 56:B5:82:D9:44:FC:68:6B:9B:F1:3F:02:13:4E:AE:6F:56:5F:42:8B
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 019D329A7F6DACE6EF60ECE5E1ABAE015A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 1089
Signing time: Sat 28 Mar 2026 04:01:18 +0000
Manifest this update: Sat 28 Mar 2026 04:01:18 +0000
Manifest next update: Sun 29 Mar 2026 04:01:18 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: 4/TForbRaGPRyR2T3a9HE30z1IZ5MGoCwWnbWu2DpDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:7f:6d:ac:e6:ef:60:ec:e5:e1:ab:ae:01:5a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: Mar 28 04:01:18 2026 GMT
Not After : Mar 29 04:01:18 2026 GMT
Subject: CN=56b582d944fc686b9bf13f02134eae6f565f428b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:f1:67:f6:4d:ef:fe:0d:f7:eb:fc:68:ff:
53:ba:89:94:13:5b:7f:d1:c4:a0:05:3e:cf:f9:9f:
85:e9:a0:56:7f:67:ee:75:75:06:f6:46:1d:14:94:
c2:dd:10:77:c6:ca:03:c7:47:ee:cc:08:63:b2:9d:
73:d4:1a:1f:77:ad:82:47:6e:64:8a:85:22:78:3d:
c9:60:48:ce:35:19:c6:cc:e8:7d:e7:0f:28:d8:3f:
cc:0c:20:de:31:12:74:c2:4a:56:8b:a6:d7:8c:7d:
07:2f:49:44:60:71:54:07:43:62:c8:da:5d:d9:04:
32:8f:32:e5:e2:26:b3:63:32:21:bb:f1:87:0f:ac:
24:b5:0f:61:62:04:33:81:37:ef:2a:d8:dd:2c:1c:
f1:68:e5:85:92:f1:41:dd:af:bf:79:1e:84:f2:68:
18:31:a7:9c:9a:92:73:bb:67:08:dd:d1:1c:c9:42:
92:6c:31:77:28:11:dd:20:22:80:be:89:27:08:84:
7d:e0:14:b4:b0:3e:cd:e9:8c:39:de:87:c8:be:34:
50:ce:48:47:26:71:db:c7:f0:94:8f:a1:aa:95:24:
18:fd:78:8d:cd:b0:99:1a:1c:47:e3:43:46:2e:0d:
6d:8a:ee:0b:0f:47:65:6f:8b:c3:d4:41:a5:b7:93:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B5:82:D9:44:FC:68:6B:9B:F1:3F:02:13:4E:AE:6F:56:5F:42:8B
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:15:71:6b:7d:a9:ac:3f:34:7e:b7:8b:cd:27:9c:09:fe:f1:
ac:e0:76:49:eb:3f:e7:b1:90:ae:ad:c2:66:59:04:9c:6f:5f:
a7:a3:bc:50:ec:eb:6d:54:b6:fd:1d:5b:f4:9f:17:83:7b:b1:
60:6d:a7:5a:b2:8f:03:a2:e6:61:5e:9f:af:98:ef:54:d4:1f:
de:03:5c:96:60:32:d5:29:04:07:11:60:20:ef:79:4e:43:13:
55:85:a8:df:25:ac:51:a6:71:c9:fb:7a:b9:05:ce:3b:ef:02:
bc:62:a3:ef:cb:5c:30:be:1a:69:88:ac:fa:c1:47:39:cc:a6:
5b:6e:bb:85:0e:c7:5d:a2:c0:9d:0d:f4:b3:11:8a:ea:4a:49:
3a:63:59:11:86:35:14:a5:e1:ce:44:3c:da:67:a2:5a:6a:64:
3e:75:53:72:a6:cb:97:c8:8e:c8:c1:91:78:d2:01:3f:2a:3c:
9f:37:c6:e5:8f:06:05:d2:89:ea:53:49:7a:94:71:33:68:66:
ff:0c:13:0f:bd:73:18:58:0f:e2:28:0d:65:a0:f9:d7:0b:4a:
c4:65:fb:6e:16:79:83:6a:c7:34:e3:74:92:3e:a1:4b:a0:5c:
86:a4:67:3a:fa:63:fd:ac:60:0a:70:00:7b:dc:cb:7f:18:da:
5c:51:de:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ymn9trObvYOzl4auuAVo8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTNlZGRmMTg3YWM2YzFhODRmODg5NGQ2M2FiYjYwNTk2
Mjc5ZWMwHhcNMjYwMzI4MDQwMTE4WhcNMjYwMzI5MDQwMTE4WjAzMTEwLwYDVQQD
Eyg1NmI1ODJkOTQ0ZmM2ODZiOWJmMTNmMDIxMzRlYWU2ZjU2NWY0MjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFXxZ/ZN7/4N9+v8aP9TuomUE1t/
0cSgBT7P+Z+F6aBWf2fudXUG9kYdFJTC3RB3xsoDx0fuzAhjsp1z1Bofd62CR25k
ioUieD3JYEjONRnGzOh95w8o2D/MDCDeMRJ0wkpWi6bXjH0HL0lEYHFUB0NiyNpd
2QQyjzLl4iazYzIhu/GHD6wktQ9hYgQzgTfvKtjdLBzxaOWFkvFB3a+/eR6E8mgY
MaecmpJzu2cI3dEcyUKSbDF3KBHdICKAvoknCIR94BS0sD7N6Yw53ofIvjRQzkhH
JnHbx/CUj6GqlSQY/XiNzbCZGhxH40NGLg1tiu4LD0dlb4vD1EGlt5MUWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFa1gtlE/Ghrm/E/AhNOrm9WX0KLMB8GA1UdIwQY
MBaAFM6j7d8YesbBqE+IlNY6u2BZYnnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8zMzBmYTUtZWE5MC00Njc2LTk5NWEt
MTMzNTk5MTU0YmUxLzEvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8zMzBmYTUtZWE5MC00Njc2LTk5NWEtMTMzNTk5MTU0YmUx
LzEvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBVxa32p
rD80freLzSecCf7xrOB2Ses/57GQrq3CZlkEnG9fp6O8UOzrbVS2/R1b9J8Xg3ux
YG2nWrKPA6LmYV6fr5jvVNQf3gNclmAy1SkEBxFgIO95TkMTVYWo3yWsUaZxyft6
uQXOO+8CvGKj78tcML4aaYis+sFHOcymW267hQ7HXaLAnQ30sxGK6kpJOmNZEYY1
FKXhzkQ82meiWmpkPnVTcqbLl8iOyMGReNIBPyo8nzfG5Y8GBdKJ6lNJepRxM2hm
/wwTD71zGFgP4igNZaD51wtKxGX7bhZ5g2rHNON0kj6hS6BchqRnOvpj/axgCnAA
e9zLfxjaXFHeow==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:05 2026 by rpki-client