Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
File: Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft (raw, json)
Hash identifier: 7AU7zFEK09ye7eCa4se2BIqLLaSyAog3yCpQgftowzk=
Subject key identifier: FE:8C:31:9D:B2:9A:EF:86:1E:1D:78:35:E9:94:0E:10:74:FB:66:A4
Authority key identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
Certificate issuer: /CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Certificate serial: 019D2A3C16AEFE57305125021C0B68E11C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
Manifest number: 16A5
Signing time: Thu 26 Mar 2026 13:01:14 +0000
Manifest this update: Thu 26 Mar 2026 13:01:14 +0000
Manifest next update: Fri 27 Mar 2026 13:01:14 +0000
Files and hashes: 1: Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl (hash: oNkaShNdL1Kg5WrYsBw3CHbqDB05hiFhC8jBO0r9juo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:16:ae:fe:57:30:51:25:02:1c:0b:68:e1:1c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Validity
Not Before: Mar 26 13:01:14 2026 GMT
Not After : Mar 27 13:01:14 2026 GMT
Subject: CN=fe8c319db29aef861e1d7835e9940e1074fb66a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:bf:e7:1f:ac:bb:9a:60:7a:f8:19:5f:b0:
77:0d:0f:e2:fe:2c:65:38:ea:9b:95:9f:10:e3:fa:
e5:c8:93:76:ac:a5:0f:20:40:cf:32:ad:0d:61:78:
bd:0c:33:09:32:24:97:6f:bd:5f:73:48:0d:a2:48:
0a:43:3a:eb:bd:a5:cf:ba:e2:1c:bf:90:29:98:65:
8e:32:af:6d:e8:e9:00:7d:4c:f0:da:2b:31:e5:6c:
76:60:0c:9a:ec:5b:32:ce:ed:48:9f:54:4d:f7:52:
1d:df:eb:4a:55:5f:b6:45:7d:2e:71:a2:13:39:7b:
e4:68:11:95:2a:33:18:37:c5:d4:b0:fa:57:95:00:
05:97:6f:34:c0:18:6e:62:36:8a:73:8a:b7:69:4c:
35:fd:7d:7f:31:d1:11:52:76:42:4d:f3:a8:23:d1:
89:b0:09:98:76:21:c3:ce:6f:a3:ac:08:ab:40:0f:
2c:0e:f5:5e:fb:c1:e1:56:54:9b:4c:97:a4:e9:9e:
85:1c:41:d1:87:75:8a:24:2f:56:de:dc:52:50:a5:
f4:fc:9e:c4:58:9b:10:f2:e5:65:8d:7d:4a:cd:24:
14:5e:02:65:d8:53:d4:d1:5e:64:66:03:12:ac:8f:
c8:38:97:bf:35:45:74:d1:e9:fd:91:85:c5:f2:46:
9e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8C:31:9D:B2:9A:EF:86:1E:1D:78:35:E9:94:0E:10:74:FB:66:A4
X509v3 Authority Key Identifier:
keyid:66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b0:d8:4d:70:f0:8c:45:12:57:a7:88:65:09:15:cc:72:93:
8b:f3:e8:91:ab:20:9f:6e:b3:1d:94:de:6e:83:ce:31:f2:eb:
9c:e3:34:ad:9d:f5:d0:f3:26:79:5f:66:4d:5e:3d:a7:fb:de:
1d:e9:65:29:5e:d4:b8:02:58:96:63:2a:cb:82:a6:78:78:8f:
c7:44:c7:ba:65:c9:c7:c2:db:e9:58:72:17:9d:78:d4:76:e5:
94:da:84:1c:b8:47:a5:e9:27:03:29:fd:5f:35:c0:ca:e7:e8:
f7:d2:ee:e3:fc:0c:bd:5d:ca:46:78:36:d2:76:15:c0:64:e0:
55:b1:20:a7:bd:fc:bb:9b:c0:55:23:b1:5d:c9:77:b3:54:f9:
e7:8e:b7:e7:bd:ba:1d:80:7b:a6:7f:d7:65:4c:83:65:06:73:
15:ea:fd:12:16:30:a0:b5:4b:bc:5f:90:00:ee:39:8d:84:c5:
2c:f4:f4:4e:4d:0c:d4:d7:45:a6:f4:85:d2:07:65:d9:11:3f:
5a:cd:2f:fa:7c:11:b6:14:f0:79:32:c5:37:1f:b0:09:6e:a5:
01:11:21:cf:23:8b:e5:e5:12:2c:ec:58:a6:fb:8f:22:05:6e:
c9:47:62:c1:b8:ae:3e:40:43:43:64:00:47:51:30:39:5d:ca:
26:0c:ee:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qPBau/lcwUSUCHAto4RxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmZiZjA5YWU2ODg2ZWM3ZGQ1ODZiNGEzNGIxZGM5NzM3
ZTg3N2QwHhcNMjYwMzI2MTMwMTE0WhcNMjYwMzI3MTMwMTE0WjAzMTEwLwYDVQQD
EyhmZThjMzE5ZGIyOWFlZjg2MWUxZDc4MzVlOTk0MGUxMDc0ZmI2NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1aW/5x+su5pgevgZX7B3DQ/i/ixl
OOqblZ8Q4/rlyJN2rKUPIEDPMq0NYXi9DDMJMiSXb71fc0gNokgKQzrrvaXPuuIc
v5ApmGWOMq9t6OkAfUzw2isx5Wx2YAya7Fsyzu1In1RN91Id3+tKVV+2RX0ucaIT
OXvkaBGVKjMYN8XUsPpXlQAFl280wBhuYjaKc4q3aUw1/X1/MdERUnZCTfOoI9GJ
sAmYdiHDzm+jrAirQA8sDvVe+8HhVlSbTJek6Z6FHEHRh3WKJC9W3txSUKX0/J7E
WJsQ8uVljX1KzSQUXgJl2FPU0V5kZgMSrI/IOJe/NUV00en9kYXF8kaeqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6MMZ2ymu+GHh14NemUDhB0+2akMB8GA1UdIwQY
MBaAFGYvvwmuaIbsfdWGtKNLHclzfod9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmktX0NhNW9odXg5MVlhMG8wc2R5WE4taDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hZWI0M2UtMDI4Ny00MTljLWFhNTUt
MWM2NjhmZjU3ODczLzEvWmktX0NhNW9odXg5MVlhMG8wc2R5WE4taDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hZWI0M2UtMDI4Ny00MTljLWFhNTUtMWM2NjhmZjU3ODcz
LzEvWmktX0NhNW9odXg5MVlhMG8wc2R5WE4taDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7DYTXDw
jEUSV6eIZQkVzHKTi/Pokasgn26zHZTeboPOMfLrnOM0rZ310PMmeV9mTV49p/ve
HellKV7UuAJYlmMqy4KmeHiPx0THumXJx8Lb6VhyF5141HbllNqEHLhHpeknAyn9
XzXAyufo99Lu4/wMvV3KRng20nYVwGTgVbEgp738u5vAVSOxXcl3s1T554635726
HYB7pn/XZUyDZQZzFer9EhYwoLVLvF+QAO45jYTFLPT0Tk0M1NdFpvSF0gdl2RE/
Ws0v+nwRthTweTLFNx+wCW6lAREhzyOL5eUSLOxYpvuPIgVuyUdiwbiuPkBDQ2QA
R1EwOV3KJgzuhA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:51:44 2026 by rpki-client