Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
File: ZGHiGIOECxNlwzhXExO30yqtnFc.mft (raw, json)
Hash identifier: 7pAe14O5N47sncDjGhi3bWJ5N2MElRNVTcvrKAhs3Pg=
Subject key identifier: 40:52:C6:17:8E:C5:7E:B0:B8:6A:A1:6E:72:D1:85:A9:15:84:AE:8C
Authority key identifier: 64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
Certificate issuer: /CN=6461e21883840b1365c338571313b7d32aad9c57
Certificate serial: 019D2704239383453322722796A227EEC305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
Manifest number: 09C5
Signing time: Wed 25 Mar 2026 22:01:15 +0000
Manifest this update: Wed 25 Mar 2026 22:01:15 +0000
Manifest next update: Thu 26 Mar 2026 22:01:15 +0000
Files and hashes: 1: ZGHiGIOECxNlwzhXExO30yqtnFc.crl (hash: shCLsuON0yeh/1YDpHfMBpNVYEYwXlLEGbT0CjAhVWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:23:93:83:45:33:22:72:27:96:a2:27:ee:c3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6461e21883840b1365c338571313b7d32aad9c57
Validity
Not Before: Mar 25 22:01:15 2026 GMT
Not After : Mar 26 22:01:15 2026 GMT
Subject: CN=4052c6178ec57eb0b86aa16e72d185a91584ae8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:60:da:60:50:ba:6a:e7:ac:bc:0e:66:9c:
90:b1:18:94:0c:a2:c5:fd:99:4e:41:e7:59:7f:b5:
66:72:b6:1b:46:b4:01:fc:60:5a:f2:99:9b:59:b4:
57:ab:84:b7:05:0d:7f:e8:5c:41:53:00:92:c6:13:
9c:b1:33:5c:08:c4:d6:cb:0b:6f:9f:c9:a5:6e:03:
b9:1c:68:b9:0a:55:e2:5d:4b:b5:15:b7:bd:6c:59:
c6:72:3a:97:22:c3:ac:2e:cc:19:fa:34:f5:8e:a3:
43:6d:da:47:f1:3c:80:e3:fb:d3:df:23:a6:41:7d:
7b:93:bd:9d:e3:5b:7a:21:d0:dd:a7:e9:11:97:b6:
5b:73:ee:a4:4a:3b:fa:16:ce:08:d2:21:7d:ea:d9:
29:36:ad:dd:f6:e8:43:ed:bd:2f:48:5d:89:ac:fd:
37:6c:26:74:ac:61:c8:21:de:d2:89:d5:47:53:5a:
f4:98:11:ae:66:b4:1e:11:c7:3d:3d:72:ae:62:b3:
37:83:88:f4:b7:b1:9b:41:41:a9:6e:7d:ae:95:20:
f4:1d:22:bb:a6:a2:29:2c:9c:8f:3a:b6:3c:6a:40:
3e:42:17:df:b4:73:6b:c3:a7:f6:bc:7f:37:e5:7c:
be:61:db:81:df:dc:10:05:7c:1f:18:2d:ff:54:1d:
62:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:52:C6:17:8E:C5:7E:B0:B8:6A:A1:6E:72:D1:85:A9:15:84:AE:8C
X509v3 Authority Key Identifier:
keyid:64:61:E2:18:83:84:0B:13:65:C3:38:57:13:13:B7:D3:2A:AD:9C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGHiGIOECxNlwzhXExO30yqtnFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d201dd-47dd-4c4e-a42c-1c1b974ffafc/1/ZGHiGIOECxNlwzhXExO30yqtnFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:32:92:10:d1:8d:2e:44:9f:20:75:0e:d7:17:5a:d2:3b:ba:
5b:6b:34:b6:a8:2c:92:37:e7:3e:fe:c5:ff:78:5d:68:18:c5:
94:ac:e2:ab:60:c2:ae:e1:8d:e8:5d:2a:f2:b1:37:7c:4d:d7:
bd:85:30:e8:c1:ec:9c:33:e4:c1:14:4f:57:1a:e0:aa:10:11:
7a:4d:bf:c1:58:7b:76:0f:a0:b4:14:7f:59:1f:9a:47:ee:fc:
d1:5e:ff:1b:61:e0:84:97:34:eb:f5:10:13:a7:53:d4:5c:01:
8c:b7:4c:80:7c:2e:b6:c4:04:c4:4b:04:96:94:e5:0f:83:00:
f4:6e:47:47:87:7e:89:73:a5:0e:0a:da:de:35:0f:da:eb:27:
0a:81:50:7c:0f:1a:8e:94:0b:eb:4f:e2:39:13:a5:a2:17:a2:
f7:42:27:58:89:f9:a6:73:6a:08:77:01:57:e9:20:a2:0c:d7:
58:4c:c7:79:3a:fc:f8:94:8e:59:c3:c5:11:e2:60:64:61:4b:
a6:22:be:57:a3:80:bf:73:2c:cf:9c:f1:71:80:89:67:bd:dd:
87:ae:ba:5d:0b:84:57:3b:3b:1d:b6:9c:8b:6b:60:46:cb:77:
b9:05:f9:5f:76:43:ad:cb:f2:bd:95:e2:f8:97:8e:72:ce:4a:
b3:f1:09:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBCOTg0UzInInlqIn7sMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjFlMjE4ODM4NDBiMTM2NWMzMzg1NzEzMTNiN2QzMmFh
ZDljNTcwHhcNMjYwMzI1MjIwMTE1WhcNMjYwMzI2MjIwMTE1WjAzMTEwLwYDVQQD
Eyg0MDUyYzYxNzhlYzU3ZWIwYjg2YWExNmU3MmQxODVhOTE1ODRhZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpBg2mBQumrnrLwOZpyQsRiUDKLF
/ZlOQedZf7VmcrYbRrQB/GBa8pmbWbRXq4S3BQ1/6FxBUwCSxhOcsTNcCMTWywtv
n8mlbgO5HGi5ClXiXUu1Fbe9bFnGcjqXIsOsLswZ+jT1jqNDbdpH8TyA4/vT3yOm
QX17k72d41t6IdDdp+kRl7Zbc+6kSjv6Fs4I0iF96tkpNq3d9uhD7b0vSF2JrP03
bCZ0rGHIId7SidVHU1r0mBGuZrQeEcc9PXKuYrM3g4j0t7GbQUGpbn2ulSD0HSK7
pqIpLJyPOrY8akA+QhfftHNrw6f2vH835Xy+YduB39wQBXwfGC3/VB1iYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBSxheOxX6wuGqhbnLRhakVhK6MMB8GA1UdIwQY
MBaAFGRh4hiDhAsTZcM4VxMTt9MqrZxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdIaUdJT0VDeE5sd3poWEV4TzMweXF0bkZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kMjAxZGQtNDdkZC00YzRlLWE0MmMt
MWMxYjk3NGZmYWZjLzEvWkdIaUdJT0VDeE5sd3poWEV4TzMweXF0bkZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9kMjAxZGQtNDdkZC00YzRlLWE0MmMtMWMxYjk3NGZmYWZj
LzEvWkdIaUdJT0VDeE5sd3poWEV4TzMweXF0bkZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTKSENGN
LkSfIHUO1xda0ju6W2s0tqgskjfnPv7F/3hdaBjFlKziq2DCruGN6F0q8rE3fE3X
vYUw6MHsnDPkwRRPVxrgqhARek2/wVh7dg+gtBR/WR+aR+780V7/G2HghJc06/UQ
E6dT1FwBjLdMgHwutsQExEsElpTlD4MA9G5HR4d+iXOlDgra3jUP2usnCoFQfA8a
jpQL60/iOROlohei90InWIn5pnNqCHcBV+kgogzXWEzHeTr8+JSOWcPFEeJgZGFL
piK+V6OAv3Msz5zxcYCJZ73dh666XQuEVzs7Hbaci2tgRst3uQX5X3ZDrcvyvZXi
+JeOcs5Ks/EJVw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:24 2026 by rpki-client