Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier: 3R+NgZF3Ce+VvJIJVrGJWyYHyNuLvdgCp1i+80XUtX4=
Subject key identifier: 09:B0:A4:3F:61:C0:D4:78:FD:89:43:24:F8:15:E5:B5:0A:AC:3B:F1
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial: 019D2703F87E20A2367B43E9F1A5B36647DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number: 11DD
Signing time: Wed 25 Mar 2026 22:01:04 +0000
Manifest this update: Wed 25 Mar 2026 22:01:04 +0000
Manifest next update: Thu 26 Mar 2026 22:01:04 +0000
Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: cPkWyJompf+lIYEb++iWvNjjOl+h4j5qjryDU60n8kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f8:7e:20:a2:36:7b:43:e9:f1:a5:b3:66:47:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Validity
Not Before: Mar 25 22:01:04 2026 GMT
Not After : Mar 26 22:01:04 2026 GMT
Subject: CN=09b0a43f61c0d478fd894324f815e5b50aac3bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:0b:7a:ba:6a:87:30:c4:50:c2:15:00:c4:
af:32:33:15:79:70:f9:d9:35:16:10:f1:be:99:48:
85:8e:ff:0d:f1:4b:00:23:37:e7:7e:a4:47:b4:6c:
c4:5e:97:4a:8d:63:b3:ea:e1:c5:56:71:03:8a:7b:
66:93:ed:60:b6:8f:a3:15:d2:23:22:f0:fe:c5:aa:
a8:94:a3:0a:e1:d9:37:6c:be:70:84:a0:cc:82:e8:
2e:41:b6:ac:58:ef:d8:6c:65:1b:95:68:8d:75:d3:
cc:6c:56:da:28:e3:68:33:17:66:ff:c0:05:81:b4:
8d:bc:bc:8f:2b:34:8c:39:20:88:24:d2:a8:05:d9:
47:61:08:22:17:83:dc:ab:15:ca:a3:40:a6:b5:99:
dc:44:fe:53:0a:55:21:c3:ab:f6:a5:29:bd:81:3c:
cd:74:33:2c:8d:3b:ee:e4:a0:92:fc:67:11:42:df:
49:a6:0d:7a:6a:bb:1b:6d:5d:72:05:f5:b6:1c:96:
67:06:c4:59:16:88:d5:dc:df:b8:27:50:2e:44:d5:
68:31:a7:3b:1a:df:10:a5:94:31:32:5b:e2:0f:f6:
0d:23:68:55:15:9b:cf:45:71:be:4e:3e:0d:10:ff:
df:73:e3:5c:c0:27:2f:cd:2e:bd:52:a4:62:7a:41:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B0:A4:3F:61:C0:D4:78:FD:89:43:24:F8:15:E5:B5:0A:AC:3B:F1
X509v3 Authority Key Identifier:
keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c9:04:7b:07:18:b0:bd:77:1c:1e:41:94:bd:2d:69:23:c2:
a1:13:61:c5:24:94:a4:99:3f:d6:d9:0e:e3:3e:91:b3:82:45:
f0:82:ec:56:80:1c:83:53:be:26:f1:01:13:7b:2e:5c:ee:29:
06:eb:e4:d1:49:b4:88:d0:23:83:a2:75:47:a1:00:09:14:a1:
b3:69:ae:b4:55:2c:6e:f6:cb:9a:f3:47:75:a7:84:43:7d:7a:
86:70:b6:1b:4d:87:7a:f7:67:17:60:a4:11:21:53:67:89:ca:
62:8f:6b:9d:ac:1f:a5:7b:8b:cf:89:2e:f2:3e:e3:15:8b:8f:
9c:7f:72:c8:00:bb:b0:0b:ab:53:a9:14:10:7e:da:96:d0:52:
e9:6e:25:4a:20:43:89:80:e3:d5:89:bb:16:0c:20:cb:85:c3:
ee:25:48:dd:69:1a:92:e9:8b:f3:21:45:02:29:6e:b9:53:39:
9e:cb:eb:eb:3c:fd:67:ff:6f:08:ae:bb:39:45:a8:02:4a:37:
eb:f3:81:5d:39:f6:9a:03:b6:52:62:da:b9:e2:12:88:2a:29:
f0:a6:c6:0d:8d:87:cb:1b:a9:3d:d0:cf:af:a2:34:92:a4:98:
55:7a:1d:eb:6e:4d:e9:24:1f:f8:07:86:12:b7:1c:d6:39:17:
41:0d:23:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA/h+IKI2e0Pp8aWzZkfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZTIwMmMwMWE4MjkwZWU5NTMyNWQzYTRmMzdmZjQwZTk5
NjQ4ZmEwHhcNMjYwMzI1MjIwMTA0WhcNMjYwMzI2MjIwMTA0WjAzMTEwLwYDVQQD
EygwOWIwYTQzZjYxYzBkNDc4ZmQ4OTQzMjRmODE1ZTViNTBhYWMzYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbcLerpqhzDEUMIVAMSvMjMVeXD5
2TUWEPG+mUiFjv8N8UsAIzfnfqRHtGzEXpdKjWOz6uHFVnEDintmk+1gto+jFdIj
IvD+xaqolKMK4dk3bL5whKDMguguQbasWO/YbGUblWiNddPMbFbaKONoMxdm/8AF
gbSNvLyPKzSMOSCIJNKoBdlHYQgiF4PcqxXKo0CmtZncRP5TClUhw6v2pSm9gTzN
dDMsjTvu5KCS/GcRQt9Jpg16arsbbV1yBfW2HJZnBsRZFojV3N+4J1AuRNVoMac7
Gt8QpZQxMlviD/YNI2hVFZvPRXG+Tj4NEP/fc+NcwCcvzS69UqRiekG0gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmwpD9hwNR4/YlDJPgV5bUKrDvxMB8GA1UdIwQY
MBaAFM3iAsAagpDulTJdOk83/0Dplkj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wZmNlNGUtMTBkZi00ZjlkLWJjOGYt
OTQzNzgyYzc5ZDBjLzEvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wZmNlNGUtMTBkZi00ZjlkLWJjOGYtOTQzNzgyYzc5ZDBj
LzEvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8kEewcY
sL13HB5BlL0taSPCoRNhxSSUpJk/1tkO4z6Rs4JF8ILsVoAcg1O+JvEBE3suXO4p
Buvk0Um0iNAjg6J1R6EACRShs2mutFUsbvbLmvNHdaeEQ316hnC2G02HevdnF2Ck
ESFTZ4nKYo9rnawfpXuLz4ku8j7jFYuPnH9yyAC7sAurU6kUEH7altBS6W4lSiBD
iYDj1Ym7Fgwgy4XD7iVI3WkakumL8yFFAiluuVM5nsvr6zz9Z/9vCK67OUWoAko3
6/OBXTn2mgO2UmLaueISiCop8KbGDY2HyxupPdDPr6I0kqSYVXod625N6SQf+AeG
Ercc1jkXQQ0j2A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:28 2026 by rpki-client