Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
File: ZUlVDFrmZAApGGz8nep06Rp7Yec.mft (raw, json)
Hash identifier: LLmClkW2L4Y9qxzDwqbHOB/XGYHoX9MNahMIzeeEnZ4=
Subject key identifier: E9:AD:15:44:3D:74:C5:43:20:43:F2:0B:E9:53:6E:AD:74:2B:1E:E9
Authority key identifier: 65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
Certificate issuer: /CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Certificate serial: 019D265F4A3FAF1648C1273814BDC48BF2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
Manifest number: 055D
Signing time: Wed 25 Mar 2026 19:01:12 +0000
Manifest this update: Wed 25 Mar 2026 19:01:12 +0000
Manifest next update: Thu 26 Mar 2026 19:01:12 +0000
Files and hashes: 1: ZUlVDFrmZAApGGz8nep06Rp7Yec.crl (hash: 7rBW8MP/vxMHmCTLI+cc8TVv87Jv8zbebMT5sNjNG1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:4a:3f:af:16:48:c1:27:38:14:bd:c4:8b:f2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6549550c5ae6640029186cfc9dea74e91a7b61e7
Validity
Not Before: Mar 25 19:01:12 2026 GMT
Not After : Mar 26 19:01:12 2026 GMT
Subject: CN=e9ad15443d74c5432043f20be9536ead742b1ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:b7:9e:9e:c7:75:3a:5c:c8:e5:a5:ab:5f:
83:c1:77:19:88:ef:4f:1f:23:76:a5:48:8c:1e:23:
1d:38:1c:51:e3:72:7a:94:c9:83:67:82:f6:e0:85:
3a:71:83:3d:ef:2a:b4:64:25:86:a0:82:ff:c6:f6:
42:f1:33:a7:2d:19:5d:2c:c9:d2:29:d7:f4:9b:d4:
14:23:07:ad:78:1d:2e:30:83:c6:90:f9:14:66:5d:
d0:fe:20:88:c2:b9:c6:f9:18:00:30:c9:dd:91:63:
8b:66:ca:5a:b8:30:71:bd:a9:d0:9f:36:25:11:63:
3d:3e:6d:89:73:c3:b6:0f:e1:05:00:fd:2c:fa:54:
45:81:41:35:f8:3c:5a:97:07:22:a7:a4:d9:b7:be:
1d:ad:8c:bc:d1:86:13:b8:6f:7f:39:3e:60:95:42:
ff:81:e8:4a:8e:80:e2:15:1f:91:a5:2e:d6:04:a2:
41:45:9f:5f:61:5d:58:58:c0:9e:ed:1b:77:47:fe:
81:e7:1c:4e:f1:9f:0e:0f:32:d1:77:78:c5:36:87:
8f:f3:44:89:0c:24:c9:04:d6:fb:25:7a:ba:71:9c:
57:6b:8a:b6:09:f1:6d:10:aa:2e:26:f4:5a:ca:4e:
31:52:05:5e:8f:99:48:f5:42:63:c3:1c:71:6e:85:
c6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AD:15:44:3D:74:C5:43:20:43:F2:0B:E9:53:6E:AD:74:2B:1E:E9
X509v3 Authority Key Identifier:
keyid:65:49:55:0C:5A:E6:64:00:29:18:6C:FC:9D:EA:74:E9:1A:7B:61:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUlVDFrmZAApGGz8nep06Rp7Yec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/deb395-28be-47b0-b59e-a62e180cfbb2/1/ZUlVDFrmZAApGGz8nep06Rp7Yec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b4:dc:8c:f4:09:21:d2:44:a4:b9:ed:37:a9:1e:b7:55:57:
a6:6b:d2:ff:64:f4:c2:6e:57:9d:6d:35:ae:cb:ed:b0:3b:e8:
cc:2e:e4:79:dd:e6:86:16:f9:99:46:c5:b7:04:18:94:dc:9c:
cd:2d:71:99:b6:54:48:6b:7b:3c:46:e2:c8:a1:4f:f4:8f:5a:
fb:3a:2f:22:45:bf:22:e2:7a:31:77:b1:e2:b3:e5:65:6d:09:
d1:2c:4e:07:dc:e0:77:56:dd:aa:e8:75:51:6f:40:75:1c:68:
28:1f:58:54:0f:0b:83:2c:c2:df:e1:38:94:6f:5e:33:04:6c:
01:d2:9a:81:50:14:02:27:80:a1:4a:fc:9a:98:e3:95:b0:80:
c4:53:6c:64:86:8b:db:4e:ee:42:67:d1:53:7c:95:51:25:85:
c7:64:4c:a5:2d:8c:a4:6f:a8:2b:59:64:32:6d:00:fa:9c:6c:
31:41:be:2f:b5:17:18:ca:8d:aa:91:d8:99:0e:a5:bb:18:cc:
76:3e:1d:4a:e5:fa:5f:73:80:cd:85:ba:5d:d4:c4:7a:ae:f2:
ed:86:27:90:a3:6d:a8:14:70:28:cb:bc:13:52:bd:45:61:56:
3b:15:d3:a3:ed:50:ec:c4:4b:84:58:e7:c8:87:16:68:2d:46:
56:07:b9:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX0o/rxZIwSc4FL3Ei/K5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NDk1NTBjNWFlNjY0MDAyOTE4NmNmYzlkZWE3NGU5MWE3
YjYxZTcwHhcNMjYwMzI1MTkwMTEyWhcNMjYwMzI2MTkwMTEyWjAzMTEwLwYDVQQD
EyhlOWFkMTU0NDNkNzRjNTQzMjA0M2YyMGJlOTUzNmVhZDc0MmIxZWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhG3np7HdTpcyOWlq1+DwXcZiO9P
HyN2pUiMHiMdOBxR43J6lMmDZ4L24IU6cYM97yq0ZCWGoIL/xvZC8TOnLRldLMnS
Kdf0m9QUIweteB0uMIPGkPkUZl3Q/iCIwrnG+RgAMMndkWOLZspauDBxvanQnzYl
EWM9Pm2Jc8O2D+EFAP0s+lRFgUE1+Dxalwcip6TZt74drYy80YYTuG9/OT5glUL/
gehKjoDiFR+RpS7WBKJBRZ9fYV1YWMCe7Rt3R/6B5xxO8Z8ODzLRd3jFNoeP80SJ
DCTJBNb7JXq6cZxXa4q2CfFtEKouJvRayk4xUgVej5lI9UJjwxxxboXGJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmtFUQ9dMVDIEPyC+lTbq10Kx7pMB8GA1UdIwQY
MBaAFGVJVQxa5mQAKRhs/J3qdOkae2HnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kZWIzOTUtMjhiZS00N2IwLWI1OWUt
YTYyZTE4MGNmYmIyLzEvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kZWIzOTUtMjhiZS00N2IwLWI1OWUtYTYyZTE4MGNmYmIy
LzEvWlVsVkRGcm1aQUFwR0d6OG5lcDA2UnA3WWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLTcjPQJ
IdJEpLntN6ket1VXpmvS/2T0wm5XnW01rsvtsDvozC7ked3mhhb5mUbFtwQYlNyc
zS1xmbZUSGt7PEbiyKFP9I9a+zovIkW/IuJ6MXex4rPlZW0J0SxOB9zgd1bdquh1
UW9AdRxoKB9YVA8LgyzC3+E4lG9eMwRsAdKagVAUAieAoUr8mpjjlbCAxFNsZIaL
207uQmfRU3yVUSWFx2RMpS2MpG+oK1lkMm0A+pxsMUG+L7UXGMqNqpHYmQ6luxjM
dj4dSuX6X3OAzYW6XdTEeq7y7YYnkKNtqBRwKMu8E1K9RWFWOxXTo+1Q7MRLhFjn
yIcWaC1GVge5Ww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:30 2026 by rpki-client