Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
File: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft (raw, json)
Hash identifier: QkfRWjoVlwVUVJpO0+OsL3+iKiLQpCmxfEPTbaVQ+oc=
Subject key identifier: DD:CA:67:41:13:82:0F:31:C0:1E:58:79:29:1D:1C:99:F2:B9:A4:31
Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
Certificate issuer: /CN=646836c9214faaa16798a93e8773e599534b29d7
Certificate serial: 019D27E005C352503146993342C59EB62E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
Manifest number: 09F4
Signing time: Thu 26 Mar 2026 02:01:25 +0000
Manifest this update: Thu 26 Mar 2026 02:01:25 +0000
Manifest next update: Fri 27 Mar 2026 02:01:25 +0000
Files and hashes: 1: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl (hash: nurVXLn9Lf7h8ZZ2BVa7tnJ+iY/fzeO5KXJZUA2ao4c=)
2: xqX86PxnYUFgmbMyGq-FYjU7myI.roa (hash: LU7BTND6Kz806aRKd+CDSvMICobI0jgTkTNE1f7lbDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:05:c3:52:50:31:46:99:33:42:c5:9e:b6:2e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7
Validity
Not Before: Mar 26 02:01:25 2026 GMT
Not After : Mar 27 02:01:25 2026 GMT
Subject: CN=ddca674113820f31c01e5879291d1c99f2b9a431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:18:85:a5:3c:61:69:af:b5:ee:e3:55:a9:
8a:26:e3:50:c3:94:62:cb:c9:ff:54:a0:66:d9:53:
83:28:fa:d5:fe:bc:57:31:00:40:0b:51:01:af:3c:
5c:5a:c2:9f:49:1e:0d:70:c1:33:90:17:ba:cf:9f:
0e:d0:c5:21:42:f7:e5:88:e4:77:f6:96:96:32:9c:
b4:aa:9b:81:11:73:f6:60:a1:3e:d4:07:4c:31:1f:
73:2e:95:6c:5b:a2:75:51:f6:7a:9f:a5:4a:98:23:
89:3c:9a:b8:2e:cb:b1:a8:2e:e5:72:b0:10:d5:a3:
ff:ec:8f:cf:09:e1:24:d6:2c:f6:d4:15:9a:e5:38:
1f:f5:3b:10:a0:fd:86:97:a1:19:9a:46:25:06:a4:
8a:12:85:eb:f2:de:ff:a8:d6:ac:3e:b5:dd:6a:7f:
a5:69:75:ef:4a:d9:9e:b4:2b:b8:c9:8b:39:21:9c:
0c:cf:d5:ae:f7:cf:a6:23:a7:68:31:94:71:48:f3:
96:db:0f:d0:21:ee:02:89:e9:72:1b:1d:ba:6c:0a:
f5:1c:ba:f3:5c:61:03:4d:b6:32:3a:93:fe:8a:c2:
c1:a1:b4:ad:df:31:1f:2e:88:8d:9e:46:8f:f1:0b:
a7:d0:67:ee:18:8f:2b:6a:59:6a:ad:85:bf:06:51:
21:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CA:67:41:13:82:0F:31:C0:1E:58:79:29:1D:1C:99:F2:B9:A4:31
X509v3 Authority Key Identifier:
keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:aa:5d:e0:a6:7e:47:66:9f:b9:e0:a4:45:52:86:cd:28:7c:
94:9c:2e:ea:79:6e:af:c7:89:d5:2b:a9:9a:ba:4a:f1:69:32:
04:74:b5:c0:8c:ee:50:1b:12:48:72:d8:0b:f2:90:36:78:15:
20:b5:92:ad:dd:3c:57:07:24:d0:84:46:b8:f0:fe:c2:33:3c:
2a:01:83:30:75:83:cb:cb:13:4f:8c:8c:52:9d:3f:7f:60:df:
c8:93:45:0c:0b:06:57:53:2b:8c:25:b1:d0:1f:02:71:d0:b6:
ea:b0:d4:81:29:2c:3c:5e:5c:f2:76:ce:c9:04:a0:f1:ef:ed:
40:4d:f5:05:90:67:56:e4:09:64:05:c9:34:64:22:fe:0b:33:
0a:06:e5:49:e9:18:49:4d:79:1f:f7:db:e3:ee:fa:dd:b7:d5:
cf:d9:60:29:30:fd:f7:6b:5d:22:a4:a1:75:7b:19:d2:6c:52:
6b:d6:c0:21:ad:9b:5c:03:20:82:db:4a:f5:ff:75:f0:d7:23:
47:dc:6b:1a:50:43:e7:89:03:60:c3:ea:e9:ea:36:ce:9e:c2:
9c:a0:3f:70:92:3b:10:bc:f1:d4:4e:e6:a6:1f:f0:88:25:e9:
bd:fb:d0:13:78:80:ac:2d:18:c7:e2:ce:f2:46:4f:69:a5:94:
57:89:5b:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4AXDUlAxRpkzQsWeti5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjgzNmM5MjE0ZmFhYTE2Nzk4YTkzZTg3NzNlNTk5NTM0
YjI5ZDcwHhcNMjYwMzI2MDIwMTI1WhcNMjYwMzI3MDIwMTI1WjAzMTEwLwYDVQQD
EyhkZGNhNjc0MTEzODIwZjMxYzAxZTU4NzkyOTFkMWM5OWYyYjlhNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bMYhaU8YWmvte7jVamKJuNQw5Ri
y8n/VKBm2VODKPrV/rxXMQBAC1EBrzxcWsKfSR4NcMEzkBe6z58O0MUhQvfliOR3
9paWMpy0qpuBEXP2YKE+1AdMMR9zLpVsW6J1UfZ6n6VKmCOJPJq4LsuxqC7lcrAQ
1aP/7I/PCeEk1iz21BWa5Tgf9TsQoP2Gl6EZmkYlBqSKEoXr8t7/qNasPrXdan+l
aXXvStmetCu4yYs5IZwMz9Wu98+mI6doMZRxSPOW2w/QIe4CielyGx26bAr1HLrz
XGEDTbYyOpP+isLBobSt3zEfLoiNnkaP8Qun0GfuGI8rallqrYW/BlEhVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3KZ0ETgg8xwB5YeSkdHJnyuaQxMB8GA1UdIwQY
MBaAFGRoNskhT6qhZ5ipPodz5ZlTSynXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYt
NWU4MjJmMzEwNjM4LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYtNWU4MjJmMzEwNjM4
LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqpd4KZ+
R2afueCkRVKGzSh8lJwu6nlur8eJ1SupmrpK8WkyBHS1wIzuUBsSSHLYC/KQNngV
ILWSrd08Vwck0IRGuPD+wjM8KgGDMHWDy8sTT4yMUp0/f2DfyJNFDAsGV1MrjCWx
0B8CcdC26rDUgSksPF5c8nbOyQSg8e/tQE31BZBnVuQJZAXJNGQi/gszCgblSekY
SU15H/fb4+763bfVz9lgKTD992tdIqShdXsZ0mxSa9bAIa2bXAMggttK9f918Ncj
R9xrGlBD54kDYMPq6eo2zp7CnKA/cJI7ELzx1E7mph/wiCXpvfvQE3iArC0Yx+LO
8kZPaaWUV4lbQg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:37 2026 by rpki-client