Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
File: zb7dtaniq1M0dBCLfIAPgTLxDiE.mft (raw, json)
Hash identifier: 6GsY+VetCDhtFsdWe5Zdnx18JxvT6BKz8tD/zmW74jw=
Subject key identifier: A2:FE:B2:6D:3B:EA:FF:92:1A:4B:74:87:51:9B:51:79:31:26:0A:E0
Authority key identifier: CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
Certificate issuer: /CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Certificate serial: 019D27724D510E6C1EC172824AA0F00BF000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:01:35 +0000
Manifest this update: Thu 26 Mar 2026 00:01:35 +0000
Manifest next update: Fri 27 Mar 2026 00:01:35 +0000
Files and hashes: 1: zb7dtaniq1M0dBCLfIAPgTLxDiE.crl (hash: hZNvhtSHhKuZzkSYwD5hz5XmbejyjVcaQ/jtmQlx/ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4d:51:0e:6c:1e:c1:72:82:4a:a0:f0:0b:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Validity
Not Before: Mar 26 00:01:35 2026 GMT
Not After : Mar 27 00:01:35 2026 GMT
Subject: CN=a2feb26d3beaff921a4b7487519b517931260ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6e:3b:0f:13:04:81:03:06:e8:eb:6e:43:e0:
bb:62:9c:b2:9c:1f:f8:3e:22:22:d5:d9:8d:8b:ae:
79:35:a2:26:63:e0:a2:ed:34:f9:bc:ca:a7:52:71:
6b:60:1e:9e:31:4c:e8:90:9c:ba:50:89:26:31:b1:
16:ef:0f:53:f8:1e:d6:3d:4e:de:5e:02:dc:d6:36:
37:cf:e9:89:7f:f5:a0:e6:e2:e0:91:c1:11:23:db:
70:bb:bb:37:ed:16:a1:c8:0c:c0:27:f2:29:4b:ac:
d4:77:53:ac:94:e1:62:b6:34:a8:04:c5:3b:20:d3:
21:77:ec:51:ca:f7:5b:c2:a8:fc:8f:f8:7d:cc:74:
fe:82:d5:8f:27:c0:ae:87:c5:ca:09:dd:31:54:6c:
98:0e:39:d1:84:fe:3f:fd:de:13:cf:96:db:44:c7:
e4:98:e1:0e:de:b1:51:ec:58:b3:44:e9:f4:4f:fa:
a6:6b:61:2f:36:d1:63:c5:db:8a:c4:e1:8e:7e:6b:
c0:f9:ca:b1:83:f1:06:38:48:cf:3f:81:2d:90:2c:
6f:ab:b3:fd:98:e9:d4:7e:6f:66:27:66:fb:b8:f9:
d4:95:e7:a2:45:6e:42:56:1c:de:aa:fa:aa:26:a0:
de:5c:d1:71:ff:7c:e9:fb:11:ce:4b:b6:de:2e:d2:
b5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FE:B2:6D:3B:EA:FF:92:1A:4B:74:87:51:9B:51:79:31:26:0A:E0
X509v3 Authority Key Identifier:
keyid:CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d4:ef:98:66:76:10:ff:54:13:57:71:5a:2a:31:84:3d:1c:
e5:c7:b3:a2:79:23:09:61:92:83:d0:bd:9a:7f:37:6b:76:86:
2c:0c:41:0d:f9:02:f0:e3:62:a4:70:4f:75:7a:49:22:65:3f:
5c:cd:fe:f5:10:b5:b0:a1:98:dc:05:74:db:42:82:a7:70:f4:
69:72:8d:1a:02:01:2d:c3:c2:ac:a0:75:c1:ff:63:1b:d7:c0:
26:7a:0e:af:3c:80:d9:95:fe:dc:9d:10:81:1d:a0:55:90:3b:
2a:33:f7:b8:1e:5c:40:1f:e6:40:d9:7d:27:c6:dd:13:c6:4d:
bc:58:b6:28:f1:1b:7d:1d:57:c2:f5:2b:ea:b4:02:69:4c:6c:
c6:e4:0b:39:80:6a:a7:b2:d5:5c:de:d8:a7:9f:28:fd:de:c5:
5d:6a:97:45:47:be:0f:a6:96:79:a6:84:ac:3f:59:9a:da:25:
f3:32:58:47:e1:34:32:14:16:76:9b:3e:78:17:75:5e:85:78:
47:52:b4:8f:14:1a:f6:d8:55:68:74:84:ef:99:4f:c7:06:a3:
60:95:74:3a:ac:86:db:ca:2a:93:39:06:c3:3a:3b:e0:5c:99:
ce:d0:f4:41:62:b1:2d:c9:63:2f:3b:ea:90:74:b9:3f:06:4a:
0d:f2:a8:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nck1RDmwewXKCSqDwC/AAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmVkZGI1YTllMmFiNTMzNDc0MTA4YjdjODAwZjgxMzJm
MTBlMjEwHhcNMjYwMzI2MDAwMTM1WhcNMjYwMzI3MDAwMTM1WjAzMTEwLwYDVQQD
EyhhMmZlYjI2ZDNiZWFmZjkyMWE0Yjc0ODc1MTliNTE3OTMxMjYwYWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG47DxMEgQMG6OtuQ+C7YpyynB/4
PiIi1dmNi655NaImY+Ci7TT5vMqnUnFrYB6eMUzokJy6UIkmMbEW7w9T+B7WPU7e
XgLc1jY3z+mJf/Wg5uLgkcERI9twu7s37RahyAzAJ/IpS6zUd1OslOFitjSoBMU7
INMhd+xRyvdbwqj8j/h9zHT+gtWPJ8Cuh8XKCd0xVGyYDjnRhP4//d4Tz5bbRMfk
mOEO3rFR7FizROn0T/qma2EvNtFjxduKxOGOfmvA+cqxg/EGOEjPP4EtkCxvq7P9
mOnUfm9mJ2b7uPnUleeiRW5CVhzeqvqqJqDeXNFx/3zp+xHOS7beLtK1fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKL+sm076v+SGkt0h1GbUXkxJgrgMB8GA1UdIwQY
MBaAFM2+3bWp4qtTNHQQi3yAD4Ey8Q4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hOGZlNzMtOGY5NS00OWJhLTg2MWQt
OWUxNDMzZjkzYjRlLzEvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hOGZlNzMtOGY5NS00OWJhLTg2MWQtOWUxNDMzZjkzYjRl
LzEvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdTvmGZ2
EP9UE1dxWioxhD0c5cezonkjCWGSg9C9mn83a3aGLAxBDfkC8ONipHBPdXpJImU/
XM3+9RC1sKGY3AV020KCp3D0aXKNGgIBLcPCrKB1wf9jG9fAJnoOrzyA2ZX+3J0Q
gR2gVZA7KjP3uB5cQB/mQNl9J8bdE8ZNvFi2KPEbfR1XwvUr6rQCaUxsxuQLOYBq
p7LVXN7Yp58o/d7FXWqXRUe+D6aWeaaErD9Zmtol8zJYR+E0MhQWdps+eBd1XoV4
R1K0jxQa9thVaHSE75lPxwajYJV0OqyG28oqkzkGwzo74FyZztD0QWKxLcljLzvq
kHS5PwZKDfKoWQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:53 2026 by rpki-client