Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
File: z9LUeU5busDjTJ0BibJu8UcViiM.mft (raw, json)
Hash identifier: h6hLJShSaY67YU3mS8MxqvsY1XCNhyiXTPQGAp25s2Y=
Subject key identifier: 8F:58:42:E2:97:B3:95:C5:0E:D6:89:8A:92:75:31:D6:BF:57:39:FF
Authority key identifier: CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
Certificate issuer: /CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Certificate serial: 019D33761DFC03738E38AEAD93B02B859EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
Manifest number: 5D
Signing time: Sat 28 Mar 2026 08:01:12 +0000
Manifest this update: Sat 28 Mar 2026 08:01:12 +0000
Manifest next update: Sun 29 Mar 2026 08:01:12 +0000
Files and hashes: 1: z9LUeU5busDjTJ0BibJu8UcViiM.crl (hash: x2UtyR3J+8N3l4GotKxlkF6+ygjXXHBjpjIao2I0yz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:1d:fc:03:73:8e:38:ae:ad:93:b0:2b:85:9e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd2d4794e5bbac0e34c9d0189b26ef147158a23
Validity
Not Before: Mar 28 08:01:12 2026 GMT
Not After : Mar 29 08:01:12 2026 GMT
Subject: CN=8f5842e297b395c50ed6898a927531d6bf5739ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:60:1d:c0:48:ed:aa:9e:45:53:7b:11:e7:
26:0e:a6:20:64:d3:e0:10:e9:f2:1e:f3:5f:a3:01:
cd:86:14:d6:d7:b5:c2:b3:a9:9b:9a:ce:37:d8:bf:
c1:a9:04:2b:83:ae:b5:6f:5e:c1:d8:9d:7d:13:fb:
69:82:27:c5:49:29:df:33:61:2a:fd:c9:65:2d:30:
de:c7:55:32:9a:ec:22:c9:ba:c7:54:ef:dc:a3:12:
02:81:1e:18:fa:f6:cd:93:61:4f:c6:4f:92:42:6f:
7d:dd:fc:4e:88:d3:b2:c2:c3:09:07:d3:d4:07:f7:
62:c7:06:40:13:20:80:9e:4d:7a:8b:0f:34:81:66:
54:10:68:f7:25:32:ec:97:d8:44:72:4a:9a:3f:9b:
25:b8:f3:49:cc:99:ce:0a:4b:60:42:7d:74:da:4b:
47:9b:e7:7e:c8:80:66:56:d9:24:09:50:68:d9:ab:
52:87:06:62:92:cd:05:03:cc:28:a4:7e:08:b5:7a:
04:88:5b:5b:98:45:70:f6:c2:a8:19:46:c4:61:fd:
04:b5:03:e6:fc:81:f7:59:f6:22:58:f8:3d:72:b5:
cb:b7:2b:a1:0f:27:62:b9:00:c0:89:c2:23:86:66:
0b:97:b1:9a:e4:3c:1e:21:0d:c9:f3:32:20:3d:15:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:58:42:E2:97:B3:95:C5:0E:D6:89:8A:92:75:31:D6:BF:57:39:FF
X509v3 Authority Key Identifier:
keyid:CF:D2:D4:79:4E:5B:BA:C0:E3:4C:9D:01:89:B2:6E:F1:47:15:8A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9LUeU5busDjTJ0BibJu8UcViiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a8237d-1307-4dfb-aad6-f90b3e5493d4/1/z9LUeU5busDjTJ0BibJu8UcViiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fa:2f:ae:d9:77:4d:9d:d0:e1:ac:34:b3:7f:73:1c:a7:2e:
36:27:31:c5:4e:6d:e6:92:7a:1e:91:00:ef:69:7f:f0:52:c0:
d8:fb:10:73:6a:90:8e:a2:f7:17:41:97:22:d8:a9:83:f1:91:
31:e6:f7:fd:6b:b8:f3:4f:6e:bb:23:34:35:58:a9:7a:c2:64:
b0:3b:e5:e4:a9:ad:61:0a:87:eb:ba:f0:1d:93:66:fd:d7:cf:
07:de:15:ef:10:e0:b2:3b:fc:fe:3e:98:d0:3d:30:09:38:ec:
a3:98:71:f2:13:e0:6a:5c:f3:ac:0f:3e:24:01:73:1e:6f:4a:
51:30:75:40:f5:0d:06:0a:c6:ce:08:e5:7d:52:5c:61:71:a3:
29:c8:57:15:d2:7c:80:eb:57:34:e2:38:b3:38:1f:74:40:07:
29:72:ef:a5:b0:b8:2a:4e:82:b2:85:9a:e2:15:57:e1:b3:ea:
db:10:60:01:1f:ce:73:ea:9e:9e:cc:7c:96:c1:f9:2e:52:68:
a5:0f:00:36:34:f9:7c:d0:e8:41:f4:0d:1a:27:b3:0e:0b:70:
86:19:51:b6:95:57:53:9a:82:1f:99:44:a3:f5:9f:2b:bc:3b:
52:9e:24:75:de:a7:ff:96:d3:d1:a6:f9:96:5d:0e:d5:8d:d0:
50:88:03:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zdh38A3OOOK6tk7ArhZ7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZDJkNDc5NGU1YmJhYzBlMzRjOWQwMTg5YjI2ZWYxNDcx
NThhMjMwHhcNMjYwMzI4MDgwMTEyWhcNMjYwMzI5MDgwMTEyWjAzMTEwLwYDVQQD
Eyg4ZjU4NDJlMjk3YjM5NWM1MGVkNjg5OGE5Mjc1MzFkNmJmNTczOWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmixgHcBI7aqeRVN7EecmDqYgZNPg
EOnyHvNfowHNhhTW17XCs6mbms432L/BqQQrg661b17B2J19E/tpgifFSSnfM2Eq
/cllLTDex1UymuwiybrHVO/coxICgR4Y+vbNk2FPxk+SQm993fxOiNOywsMJB9PU
B/dixwZAEyCAnk16iw80gWZUEGj3JTLsl9hEckqaP5sluPNJzJnOCktgQn102ktH
m+d+yIBmVtkkCVBo2atShwZiks0FA8wopH4ItXoEiFtbmEVw9sKoGUbEYf0EtQPm
/IH3WfYiWPg9crXLtyuhDydiuQDAicIjhmYLl7Ga5DweIQ3J8zIgPRUc6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9YQuKXs5XFDtaJipJ1Mda/Vzn/MB8GA1UdIwQY
MBaAFM/S1HlOW7rA40ydAYmybvFHFYojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejlMVWVVNWJ1c0RqVEowQmliSnU4VWNWaWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hODIzN2QtMTMwNy00ZGZiLWFhZDYt
ZjkwYjNlNTQ5M2Q0LzEvejlMVWVVNWJ1c0RqVEowQmliSnU4VWNWaWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hODIzN2QtMTMwNy00ZGZiLWFhZDYtZjkwYjNlNTQ5M2Q0
LzEvejlMVWVVNWJ1c0RqVEowQmliSnU4VWNWaWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvovrtl3
TZ3Q4aw0s39zHKcuNicxxU5t5pJ6HpEA72l/8FLA2PsQc2qQjqL3F0GXItipg/GR
Meb3/Wu4809uuyM0NVipesJksDvl5KmtYQqH67rwHZNm/dfPB94V7xDgsjv8/j6Y
0D0wCTjso5hx8hPgalzzrA8+JAFzHm9KUTB1QPUNBgrGzgjlfVJcYXGjKchXFdJ8
gOtXNOI4szgfdEAHKXLvpbC4Kk6CsoWa4hVX4bPq2xBgAR/Oc+qensx8lsH5LlJo
pQ8ANjT5fNDoQfQNGiezDgtwhhlRtpVXU5qCH5lEo/WfK7w7Up4kdd6n/5bT0ab5
ll0O1Y3QUIgDSw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:39:56 2026 by rpki-client