Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
File: ZQXsmbwMbKl7--a9UkTeywKGbis.mft (raw, json)
Hash identifier: dhi8XuJ0UQxGtHp2gRbBAlyDx5ZAEoZkHu6/JOwrcCQ=
Subject key identifier: 22:A6:BD:DB:D8:A6:F7:BD:55:A8:D2:A5:8B:55:8B:CF:B8:C5:D0:D8
Authority key identifier: 65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
Certificate issuer: /CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Certificate serial: 019D28BB7A5656F9B6239AD8EB08476DC8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
Manifest number: 0D7B
Signing time: Thu 26 Mar 2026 06:01:08 +0000
Manifest this update: Thu 26 Mar 2026 06:01:08 +0000
Manifest next update: Fri 27 Mar 2026 06:01:08 +0000
Files and hashes: 1: ZQXsmbwMbKl7--a9UkTeywKGbis.crl (hash: +cMGp+pcXTSos3cC6EBAHlauRZqIrwaD5+OlYGgF10U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:7a:56:56:f9:b6:23:9a:d8:eb:08:47:6d:c8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Validity
Not Before: Mar 26 06:01:08 2026 GMT
Not After : Mar 27 06:01:08 2026 GMT
Subject: CN=22a6bddbd8a6f7bd55a8d2a58b558bcfb8c5d0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:8c:ca:b5:df:c2:31:5f:9b:ab:51:43:60:
25:ae:f9:61:7a:f6:3e:9a:14:f0:9e:b1:f9:c8:94:
2c:3d:96:d2:fb:11:b5:33:ad:39:9b:2a:1b:35:43:
32:7b:10:ea:a4:70:fe:89:7b:8a:aa:48:74:2b:9b:
9a:fd:40:31:3a:53:6b:8c:bb:77:31:0f:21:72:55:
09:59:3f:1e:fe:16:fc:eb:e0:b3:33:c2:ee:ab:08:
05:d4:4d:f8:df:ad:87:d3:1e:37:28:be:fc:cf:23:
f9:84:00:f8:3e:82:03:67:03:fe:5e:75:48:4d:42:
94:30:00:7f:68:1b:b9:0b:4f:57:ea:0e:74:06:f0:
24:45:44:78:90:df:df:46:99:7c:fd:52:8b:77:de:
2c:1c:9b:88:75:1c:6e:7b:1d:14:dd:e2:3d:82:d2:
0b:8f:6b:cd:0f:b5:ed:9c:8a:6d:4c:79:da:a0:e3:
f7:25:15:17:b3:8b:4a:bf:38:b5:33:2b:10:8c:9e:
a6:11:41:34:f9:fd:9e:27:1e:8c:f4:fc:bd:05:c9:
0d:06:1c:4e:9e:74:7a:db:1b:79:11:41:b2:cb:26:
4f:29:eb:b0:22:7a:e7:48:8f:df:57:98:01:1a:a6:
bc:27:53:4c:1e:2b:d8:72:ff:bb:6b:8f:87:ab:7a:
3f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A6:BD:DB:D8:A6:F7:BD:55:A8:D2:A5:8B:55:8B:CF:B8:C5:D0:D8
X509v3 Authority Key Identifier:
keyid:65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a2:df:86:8f:18:22:83:6f:b7:8c:ce:72:68:dc:66:b4:51:
09:5e:35:ef:bd:08:de:66:7c:00:e5:23:f6:f2:eb:bc:61:83:
1f:70:c0:af:02:f2:fb:66:84:6f:5d:c0:55:17:9d:77:45:c0:
87:b6:5b:40:f1:88:0d:5c:a9:71:cc:c4:ab:07:e2:49:4e:04:
78:47:ff:19:0f:37:cc:57:33:a8:65:50:28:b7:5e:df:ce:1d:
2c:9e:03:a1:53:b7:cb:e0:9a:ca:24:b1:92:ea:49:2c:e7:8a:
ec:be:41:29:94:ad:00:f5:bd:cc:47:e0:e4:e0:6b:84:2e:52:
05:61:67:95:16:29:12:12:be:84:ed:cf:96:85:f5:d7:86:bd:
16:2c:59:fe:2c:36:0d:80:8c:a0:4f:c8:78:13:4c:55:50:19:
30:11:24:81:f7:07:22:22:32:fd:5e:04:83:82:c4:7a:07:45:
b8:ad:c9:9b:7c:f6:a6:96:01:91:07:84:4d:8e:39:bd:2a:27:
39:6f:58:82:e7:01:68:fc:3a:e0:d9:97:cd:ac:0d:6f:61:dc:
67:ed:3b:59:a7:e8:3a:9e:aa:d7:d6:1b:53:9e:1c:ce:ec:34:
cc:d1:f5:a9:f6:51:72:94:89:7c:bd:08:51:1b:1f:c8:33:9b:
de:02:09:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou3pWVvm2I5rY6whHbcixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MDVlYzk5YmMwYzZjYTk3YmZiZTZiZDUyNDRkZWNiMDI4
NjZlMmIwHhcNMjYwMzI2MDYwMTA4WhcNMjYwMzI3MDYwMTA4WjAzMTEwLwYDVQQD
EygyMmE2YmRkYmQ4YTZmN2JkNTVhOGQyYTU4YjU1OGJjZmI4YzVkMGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLSMyrXfwjFfm6tRQ2AlrvlhevY+
mhTwnrH5yJQsPZbS+xG1M605myobNUMyexDqpHD+iXuKqkh0K5ua/UAxOlNrjLt3
MQ8hclUJWT8e/hb86+CzM8LuqwgF1E34362H0x43KL78zyP5hAD4PoIDZwP+XnVI
TUKUMAB/aBu5C09X6g50BvAkRUR4kN/fRpl8/VKLd94sHJuIdRxuex0U3eI9gtIL
j2vND7XtnIptTHnaoOP3JRUXs4tKvzi1MysQjJ6mEUE0+f2eJx6M9Py9BckNBhxO
nnR62xt5EUGyyyZPKeuwInrnSI/fV5gBGqa8J1NMHivYcv+7a4+Hq3o/dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKmvdvYpve9VajSpYtVi8+4xdDYMB8GA1UdIwQY
MBaAFGUF7Jm8DGype/vmvVJE3ssChm4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlFYc21id01iS2w3LS1hOVVrVGV5d0tHYmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ODMxNGMtZDJjZi00OGI4LWI5NWEt
ZmRhNWRkNTkwZjE2LzEvWlFYc21id01iS2w3LS1hOVVrVGV5d0tHYmlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ODMxNGMtZDJjZi00OGI4LWI5NWEtZmRhNWRkNTkwZjE2
LzEvWlFYc21id01iS2w3LS1hOVVrVGV5d0tHYmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqLfho8Y
IoNvt4zOcmjcZrRRCV41770I3mZ8AOUj9vLrvGGDH3DArwLy+2aEb13AVRedd0XA
h7ZbQPGIDVypcczEqwfiSU4EeEf/GQ83zFczqGVQKLde384dLJ4DoVO3y+CayiSx
kupJLOeK7L5BKZStAPW9zEfg5OBrhC5SBWFnlRYpEhK+hO3PloX114a9FixZ/iw2
DYCMoE/IeBNMVVAZMBEkgfcHIiIy/V4Eg4LEegdFuK3Jm3z2ppYBkQeETY45vSon
OW9YgucBaPw64NmXzawNb2HcZ+07WafoOp6q19YbU54czuw0zNH1qfZRcpSJfL0I
URsfyDOb3gIJ+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:42 2026 by rpki-client