Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json)
Hash identifier: md4mVoY6j/wle5KnZ6+1zbcbuuGJW8n15/ZGzWwOGKE=
Subject key identifier: 60:2A:D7:3D:10:9A:1D:B5:8E:29:96:97:4C:18:2C:87:7E:83:CE:2E
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 019D28165FFBDD59E2A524E363F6950E386A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
Manifest number: 0B49
Signing time: Thu 26 Mar 2026 03:00:48 +0000
Manifest this update: Thu 26 Mar 2026 03:00:48 +0000
Manifest next update: Fri 27 Mar 2026 03:00:48 +0000
Files and hashes: 1: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: o8xGoHbF7sZtaQ+zqctQDb4uqD5yupR1CpALmJn1o+U=)
2: YAsr4AMd-DQg17IKnmJqPsKycSA.roa (hash: g07FXjeIHQJ20whOb8MTucqM4PupENC/MFjlVryEQbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:5f:fb:dd:59:e2:a5:24:e3:63:f6:95:0e:38:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: Mar 26 03:00:48 2026 GMT
Not After : Mar 27 03:00:48 2026 GMT
Subject: CN=602ad73d109a1db58e2996974c182c877e83ce2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a1:5f:8c:e6:aa:72:2e:3c:3d:8c:2c:7a:66:
d8:c4:d1:95:b0:eb:a2:48:7a:95:ce:bf:9a:53:39:
c2:4c:05:7a:5d:49:b3:77:b6:44:8d:6b:78:eb:28:
6c:ca:b1:9c:49:e0:6a:53:f7:ba:93:78:2c:40:dd:
07:31:c3:de:67:4b:e1:6f:84:d4:87:98:fe:90:30:
ba:70:0f:3b:fd:00:d4:0a:47:4f:c1:0a:11:bb:5c:
19:80:4b:e2:0e:e8:f2:93:f9:f9:39:d9:5a:9e:e8:
4f:19:66:11:2d:65:99:28:4f:ad:64:1d:29:3a:ee:
b9:85:48:b5:ba:1c:d2:68:58:55:80:2c:c7:f0:92:
a6:df:61:87:64:4e:d8:b0:7e:48:68:82:4f:ee:49:
0a:4c:b4:89:a9:c3:13:c7:e0:8c:13:4a:cf:46:ee:
63:b5:30:fc:91:d3:68:e9:a5:cd:5d:b9:cf:e5:e0:
d7:14:b2:28:5b:5b:bd:57:a5:93:a6:c8:8b:d5:b0:
94:f2:48:04:58:85:7f:21:08:3b:74:2e:35:26:94:
78:5f:60:43:1d:9a:13:94:48:67:5e:45:0e:38:37:
9b:f1:32:28:0c:a2:96:07:b1:4a:d9:33:71:c6:0a:
64:53:e6:67:0e:be:0f:61:38:55:59:93:27:df:a4:
6d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2A:D7:3D:10:9A:1D:B5:8E:29:96:97:4C:18:2C:87:7E:83:CE:2E
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cd:51:78:0b:71:33:e9:84:51:b6:dc:43:2a:05:0d:4e:1a:
07:09:e5:59:61:7c:e1:82:71:f4:d7:91:2b:25:a2:ba:a7:5a:
16:df:68:c6:a5:6a:1f:b1:46:d0:ab:b5:d6:56:5c:cb:f1:97:
75:b1:f6:3e:8a:ef:ab:d2:b1:e8:46:4a:dd:bf:02:a5:a9:49:
14:0c:cb:ee:d3:c3:8d:65:b1:67:65:14:c7:7a:b7:7d:84:38:
94:19:48:9e:ac:07:9f:6a:34:19:18:a4:e5:75:15:4a:df:ab:
9b:a6:ac:9b:1d:df:75:65:15:05:96:ae:54:a3:f2:b7:33:2c:
67:69:a6:d7:01:6f:d9:29:ce:2c:af:c9:78:d8:ef:0a:3e:ca:
65:43:ac:07:71:6f:dd:6a:e4:10:bf:5c:e3:ec:a9:18:e3:b6:
47:a2:a5:55:73:bb:40:16:b7:31:1f:17:68:f1:f0:1b:1f:f3:
b0:2a:51:77:05:39:35:a5:e8:9c:b4:90:25:e1:1a:08:54:f1:
b7:66:f1:ec:41:64:be:58:e2:d2:ff:9f:1b:40:29:f2:56:77:
45:01:ad:b5:c5:df:e0:9b:47:99:23:d2:09:6e:f8:d7:f1:29:
22:b5:e5:90:84:af:b6:08:da:82:da:0c:8e:00:63:99:22:55:
92:68:47:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFl/73VnipSTjY/aVDjhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTllZDg0ZTRiMjExY2M4YmFhODkxNDk3NDEzNTRmODg1
MGVmMGYwHhcNMjYwMzI2MDMwMDQ4WhcNMjYwMzI3MDMwMDQ4WjAzMTEwLwYDVQQD
Eyg2MDJhZDczZDEwOWExZGI1OGUyOTk2OTc0YzE4MmM4NzdlODNjZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56FfjOaqci48PYwsembYxNGVsOui
SHqVzr+aUznCTAV6XUmzd7ZEjWt46yhsyrGcSeBqU/e6k3gsQN0HMcPeZ0vhb4TU
h5j+kDC6cA87/QDUCkdPwQoRu1wZgEviDujyk/n5OdlanuhPGWYRLWWZKE+tZB0p
Ou65hUi1uhzSaFhVgCzH8JKm32GHZE7YsH5IaIJP7kkKTLSJqcMTx+CME0rPRu5j
tTD8kdNo6aXNXbnP5eDXFLIoW1u9V6WTpsiL1bCU8kgEWIV/IQg7dC41JpR4X2BD
HZoTlEhnXkUOODeb8TIoDKKWB7FK2TNxxgpkU+ZnDr4PYThVWZMn36RtoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAq1z0Qmh21jimWl0wYLId+g84uMB8GA1UdIwQY
MBaAFEWZ7YTkshHMi6qJFJdBNU+IUO8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDkt
MTZmZmExMTQ2OTljLzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDktMTZmZmExMTQ2OTlj
LzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp81ReAtx
M+mEUbbcQyoFDU4aBwnlWWF84YJx9NeRKyWiuqdaFt9oxqVqH7FG0Ku11lZcy/GX
dbH2Porvq9Kx6EZK3b8CpalJFAzL7tPDjWWxZ2UUx3q3fYQ4lBlInqwHn2o0GRik
5XUVSt+rm6asmx3fdWUVBZauVKPytzMsZ2mm1wFv2SnOLK/JeNjvCj7KZUOsB3Fv
3WrkEL9c4+ypGOO2R6KlVXO7QBa3MR8XaPHwGx/zsCpRdwU5NaXonLSQJeEaCFTx
t2bx7EFkvlji0v+fG0Ap8lZ3RQGttcXf4JtHmSPSCW741/EpIrXlkISvtgjagtoM
jgBjmSJVkmhHpA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:42 2026 by rpki-client