Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
File: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft (raw, json)
Hash identifier: oYczk0XjnnzLxfv7os2vroK2nrTPAINdakcEoXFJCR0=
Subject key identifier: 36:F0:EF:F7:DB:CD:37:A3:ED:57:E2:A6:90:04:18:AF:BC:BA:58:D2
Authority key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
Certificate issuer: /CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Certificate serial: 019D29CE055ABDEE1811EBD2AAF4D15D1812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
Manifest number: 0F7C
Signing time: Thu 26 Mar 2026 11:01:00 +0000
Manifest this update: Thu 26 Mar 2026 11:01:00 +0000
Manifest next update: Fri 27 Mar 2026 11:01:00 +0000
Files and hashes: 1: B2wOUgohqeye9MfPxQxtz9YTAls.roa (hash: 1bpwvIgjEWlAzlHrAhdbiAA3AdkV/y3b10LOBBviIzw=)
2: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl (hash: bsM9FuxUV56WMKO/W8BtvUIfKysJ+sj8MJDSuyqM9+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:05:5a:bd:ee:18:11:eb:d2:aa:f4:d1:5d:18:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Validity
Not Before: Mar 26 11:01:00 2026 GMT
Not After : Mar 27 11:01:00 2026 GMT
Subject: CN=36f0eff7dbcd37a3ed57e2a6900418afbcba58d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:fc:c7:26:60:fb:02:7e:da:9f:5c:11:b4:
9e:66:af:0a:0d:fc:84:9f:b6:46:58:fe:02:e9:6a:
8f:5d:7d:a5:de:4a:6a:27:e7:b0:88:e7:22:83:2d:
3e:83:d1:6d:04:04:5d:3e:9c:b3:d4:00:df:25:b5:
44:54:60:23:79:24:38:f2:f4:ab:84:cc:fc:41:f8:
61:8a:61:f1:7b:53:03:e6:81:93:8d:26:ac:83:f3:
d3:1e:63:3b:db:3d:51:b0:ff:ce:a5:74:b7:9f:1a:
0b:fe:cc:c1:cb:45:d3:31:bf:53:59:ba:9a:2f:f9:
14:49:f6:56:b7:9a:ec:6f:cb:3c:1d:00:70:03:4f:
5e:04:45:2a:93:5c:c9:e4:64:a6:74:e9:52:15:39:
ee:ee:e3:94:8c:ac:97:29:e8:83:72:bd:7e:f1:40:
b9:3d:6d:20:db:70:f7:bb:bd:92:a2:72:fb:f9:26:
0e:0d:c2:95:43:7f:8a:f2:bc:95:6a:1b:eb:06:ef:
ba:54:4b:ef:65:96:2b:a7:09:8f:98:0c:41:cc:68:
9a:8f:07:4d:9f:76:18:f6:1d:49:ab:de:dc:0f:c1:
5a:a1:f8:9b:f1:23:dc:d2:5b:21:80:92:63:f1:e1:
1d:ac:07:35:e0:66:b7:0e:ef:48:7e:55:0e:27:99:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F0:EF:F7:DB:CD:37:A3:ED:57:E2:A6:90:04:18:AF:BC:BA:58:D2
X509v3 Authority Key Identifier:
keyid:67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:14:05:22:ab:7c:4f:f3:c7:c0:9e:38:01:39:c2:a5:7a:3d:
f7:3e:7c:e0:4a:49:0b:ef:7a:06:c3:c9:54:76:92:e2:ca:7c:
39:9e:3e:c2:bb:97:1e:97:98:f3:70:aa:f2:cd:e5:69:1d:27:
eb:9f:29:05:c2:e4:f6:71:fc:19:0a:83:1b:06:a5:35:5e:6d:
1a:f4:fb:86:52:55:1d:d0:02:b9:15:0f:8a:7f:f4:55:d9:70:
5e:94:02:46:a0:42:27:e3:65:33:4a:75:ff:86:d1:3f:1e:ab:
d9:d6:cc:18:b0:3a:dc:db:f0:c0:d8:2a:8c:95:21:30:e6:4f:
58:b4:a1:a3:cf:73:59:6a:f5:72:b4:f0:c7:93:af:78:41:70:
c3:94:3c:c0:e8:70:89:55:b8:4c:05:dd:1a:dd:52:1b:c1:3f:
87:d2:6f:0d:9e:46:e2:cb:d5:4f:9b:d6:ec:b9:a0:da:1a:18:
fe:1f:76:1b:f0:7f:cc:a5:66:17:d8:75:43:41:8f:10:c2:c1:
44:66:97:d5:63:1c:55:be:ab:5f:c0:d4:87:fe:4b:94:d4:d5:
5e:bf:1f:12:8d:2b:0b:94:e4:bd:06:45:b2:8f:7e:99:60:ed:
4e:7e:bb:9c:e9:bc:7b:00:88:e1:01:22:bc:3c:81:98:2b:72:
6b:17:1b:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzgVave4YEevSqvTRXRgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDA0NWMxM2MwM2RjYjM3M2QyYTdkODVkMWUwMWI2ZTBh
YzdlMWMwHhcNMjYwMzI2MTEwMTAwWhcNMjYwMzI3MTEwMTAwWjAzMTEwLwYDVQQD
EygzNmYwZWZmN2RiY2QzN2EzZWQ1N2UyYTY5MDA0MThhZmJjYmE1OGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuj8xyZg+wJ+2p9cEbSeZq8KDfyE
n7ZGWP4C6WqPXX2l3kpqJ+ewiOcigy0+g9FtBARdPpyz1ADfJbVEVGAjeSQ48vSr
hMz8QfhhimHxe1MD5oGTjSasg/PTHmM72z1RsP/OpXS3nxoL/szBy0XTMb9TWbqa
L/kUSfZWt5rsb8s8HQBwA09eBEUqk1zJ5GSmdOlSFTnu7uOUjKyXKeiDcr1+8UC5
PW0g23D3u72SonL7+SYODcKVQ3+K8ryVahvrBu+6VEvvZZYrpwmPmAxBzGiajwdN
n3YY9h1Jq97cD8Faofib8SPc0lshgJJj8eEdrAc14Ga3Du9IflUOJ5kjRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbw7/fbzTej7VfippAEGK+8uljSMB8GA1UdIwQY
MBaAFGfQRcE8A9yzc9Kn2F0eAbbgrH4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjlCRndUd0QzTE56MHFmWVhSNEJ0dUNzZmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yZTRmM2YtNTUyNi00NTIwLTgzMTMt
MTZmZjcyM2FmMzM1LzEvWjlCRndUd0QzTE56MHFmWVhSNEJ0dUNzZmh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yZTRmM2YtNTUyNi00NTIwLTgzMTMtMTZmZjcyM2FmMzM1
LzEvWjlCRndUd0QzTE56MHFmWVhSNEJ0dUNzZmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBQFIqt8
T/PHwJ44ATnCpXo99z584EpJC+96BsPJVHaS4sp8OZ4+wruXHpeY83Cq8s3laR0n
658pBcLk9nH8GQqDGwalNV5tGvT7hlJVHdACuRUPin/0VdlwXpQCRqBCJ+NlM0p1
/4bRPx6r2dbMGLA63NvwwNgqjJUhMOZPWLSho89zWWr1crTwx5OveEFww5Q8wOhw
iVW4TAXdGt1SG8E/h9JvDZ5G4svVT5vW7Lmg2hoY/h92G/B/zKVmF9h1Q0GPEMLB
RGaX1WMcVb6rX8DUh/5LlNTVXr8fEo0rC5TkvQZFso9+mWDtTn67nOm8ewCI4QEi
vDyBmCtyaxcbxg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:52 2026 by rpki-client