Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
File: _Zrjdhfz--SIgLIw_nx84PDcQcc.mft (raw, json)
Hash identifier: uwAqEHAEQF+VmKczfqs9hpJx3DysTnIRwXAMEah7qZU=
Subject key identifier: BF:36:F0:4B:94:89:1D:49:3D:87:97:C8:12:F4:BA:C3:54:5B:73:74
Authority key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
Certificate issuer: /CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Certificate serial: 019D27A9184B4E8648F499BC20602BD426CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
Manifest number: 04F5
Signing time: Thu 26 Mar 2026 01:01:26 +0000
Manifest this update: Thu 26 Mar 2026 01:01:26 +0000
Manifest next update: Fri 27 Mar 2026 01:01:26 +0000
Files and hashes: 1: _Zrjdhfz--SIgLIw_nx84PDcQcc.crl (hash: ysQJkRWO3LjM/1R3qAkliurogx6TlfpnPFRO/KSncoI=)
2: aVJL4rPiqkGBr1J1foNz3KXbYGo.roa (hash: NtS+N9noXkfYYLseXhWKgdb4LROtuPhEhSZAg2Ps9hE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:18:4b:4e:86:48:f4:99:bc:20:60:2b:d4:26:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Validity
Not Before: Mar 26 01:01:26 2026 GMT
Not After : Mar 27 01:01:26 2026 GMT
Subject: CN=bf36f04b94891d493d8797c812f4bac3545b7374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:6b:01:a6:3f:7d:c5:b1:bb:04:10:b9:0b:
13:02:f0:c2:21:9b:60:8c:fd:71:f7:8a:00:7f:ad:
29:44:52:48:e4:93:a8:83:b7:0f:a7:b1:c3:cb:b3:
59:db:91:67:03:e7:5e:20:6e:10:d5:50:20:7f:33:
df:64:53:cf:5f:60:98:aa:30:62:55:2c:16:a7:74:
b2:03:d5:65:f8:89:54:23:60:80:e5:a7:a0:7f:32:
b9:09:27:a5:c0:87:e6:7f:f3:b5:9d:72:11:eb:bf:
16:41:9d:5c:17:f8:2d:b2:a2:cd:d6:92:c6:82:93:
45:94:68:0c:18:d1:64:f5:7f:f6:ef:3a:dd:49:b2:
f8:4f:c6:85:fc:67:00:54:7e:da:3f:db:b1:d4:59:
c6:f7:20:b2:b6:45:ad:e1:fd:81:43:06:82:2a:80:
a5:38:64:31:16:79:4a:7a:94:3c:dc:69:5c:56:0d:
8a:3a:a1:68:ef:e2:a8:30:ea:12:0d:80:99:7e:50:
36:79:5b:b1:85:a6:7c:5a:a9:4b:fe:ac:3c:0c:0e:
04:60:c8:de:96:e1:61:83:a1:c3:24:15:09:dc:1c:
e2:50:45:6c:72:84:ab:31:27:68:7c:cb:07:83:15:
b5:aa:ce:02:09:b1:84:c4:be:b7:77:5e:fd:b4:16:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:36:F0:4B:94:89:1D:49:3D:87:97:C8:12:F4:BA:C3:54:5B:73:74
X509v3 Authority Key Identifier:
keyid:FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2a:a3:52:ec:24:7b:83:48:b0:8d:0c:04:99:31:ac:56:0d:
3e:49:4d:9c:70:e2:12:84:7d:c8:93:7f:36:b6:95:e0:56:02:
af:fb:30:e4:4d:87:bf:4b:d5:03:21:89:61:80:84:fd:81:4b:
da:f4:1b:4c:f7:87:bf:f0:67:fa:43:dc:49:59:a8:f5:5b:ec:
72:3e:04:38:73:e8:cd:dc:80:bc:dc:9d:75:f3:2d:e5:b3:97:
6a:74:9c:11:ff:5a:06:44:f8:15:09:5c:f0:6d:91:9f:df:dd:
73:f0:5b:11:eb:2f:0f:04:79:34:09:b0:f7:ab:76:52:65:2f:
05:39:4b:a9:30:c2:08:ba:06:c2:46:8b:35:3f:72:ef:1d:50:
b2:a0:0a:9b:6d:1a:3d:fb:3f:7e:6b:87:73:e1:d9:c6:6e:a5:
95:fa:53:1e:0b:09:7e:d2:45:f4:03:0a:18:ba:c0:90:fe:f8:
8b:f2:fd:b2:93:d7:a7:2b:79:fe:6c:15:4c:7a:0f:de:58:fc:
b5:7e:5b:c9:c9:62:88:d0:fb:c7:2d:43:ff:9c:26:26:ac:c6:
eb:ba:e0:1f:4d:b0:2b:c8:83:ae:ea:50:3d:23:23:52:88:27:
21:3e:ac:3e:9a:ab:46:96:33:df:6e:d9:2a:b0:c6:44:55:51:
7c:f2:e7:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqRhLToZI9Jm8IGAr1CbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOWFlMzc2MTdmM2ZiZTQ4ODgwYjIzMGZlN2M3Y2UwZjBk
YzQxYzcwHhcNMjYwMzI2MDEwMTI2WhcNMjYwMzI3MDEwMTI2WjAzMTEwLwYDVQQD
EyhiZjM2ZjA0Yjk0ODkxZDQ5M2Q4Nzk3YzgxMmY0YmFjMzU0NWI3Mzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9VrAaY/fcWxuwQQuQsTAvDCIZtg
jP1x94oAf60pRFJI5JOog7cPp7HDy7NZ25FnA+deIG4Q1VAgfzPfZFPPX2CYqjBi
VSwWp3SyA9Vl+IlUI2CA5aegfzK5CSelwIfmf/O1nXIR678WQZ1cF/gtsqLN1pLG
gpNFlGgMGNFk9X/27zrdSbL4T8aF/GcAVH7aP9ux1FnG9yCytkWt4f2BQwaCKoCl
OGQxFnlKepQ83GlcVg2KOqFo7+KoMOoSDYCZflA2eVuxhaZ8WqlL/qw8DA4EYMje
luFhg6HDJBUJ3BziUEVscoSrMSdofMsHgxW1qs4CCbGExL63d179tBaBNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL828EuUiR1JPYeXyBL0usNUW3N0MB8GA1UdIwQY
MBaAFP2a43YX8/vkiICyMP58fODw3EHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1pyamRoZnotLVNJZ0xJd19ueDg0UERjUWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jOGY0MWQtZWE3My00YTAzLWJhNzIt
MGY1MDc3M2IwZWRlLzEvX1pyamRoZnotLVNJZ0xJd19ueDg0UERjUWNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jOGY0MWQtZWE3My00YTAzLWJhNzItMGY1MDc3M2IwZWRl
LzEvX1pyamRoZnotLVNJZ0xJd19ueDg0UERjUWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiqjUuwk
e4NIsI0MBJkxrFYNPklNnHDiEoR9yJN/NraV4FYCr/sw5E2Hv0vVAyGJYYCE/YFL
2vQbTPeHv/Bn+kPcSVmo9Vvscj4EOHPozdyAvNyddfMt5bOXanScEf9aBkT4FQlc
8G2Rn9/dc/BbEesvDwR5NAmw96t2UmUvBTlLqTDCCLoGwkaLNT9y7x1QsqAKm20a
Pfs/fmuHc+HZxm6llfpTHgsJftJF9AMKGLrAkP74i/L9spPXpyt5/mwVTHoP3lj8
tX5bycliiND7xy1D/5wmJqzG67rgH02wK8iDrupQPSMjUognIT6sPpqrRpYz327Z
KrDGRFVRfPLn/w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:15 2026 by rpki-client