Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
File: r-Zisul_0r2pHzKyzOnnRculhgI.mft (raw, json)
Hash identifier: tqz4OoU6qMHdNmWasvMGDdz4uQHQ8sHwgP8vDaOyXBs=
Subject key identifier: 3F:B6:A6:64:FC:D7:28:32:18:34:A5:48:59:49:36:DC:FA:B6:D5:C3
Authority key identifier: AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02
Certificate issuer: /CN=afe662b2e97fd2bda91f32b2cce9e745cba58602
Certificate serial: 019D2929921C659AC8FD0642883B1EB78795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
Manifest number: 026D
Signing time: Thu 26 Mar 2026 08:01:23 +0000
Manifest this update: Thu 26 Mar 2026 08:01:23 +0000
Manifest next update: Fri 27 Mar 2026 08:01:23 +0000
Files and hashes: 1: r-Zisul_0r2pHzKyzOnnRculhgI.crl (hash: tPDi7GvupLKi8F6Uq4bfDYVrL3Jp0GN92pHumtsv3x4=)
2: sBjAqPrKhV1Z1WPs7LsZcM8hAlM.roa (hash: FofTnNrc0AeEr8Tl3KCw6xOYYJYEqXcD/ByXgE3T67E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:92:1c:65:9a:c8:fd:06:42:88:3b:1e:b7:87:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe662b2e97fd2bda91f32b2cce9e745cba58602
Validity
Not Before: Mar 26 08:01:23 2026 GMT
Not After : Mar 27 08:01:23 2026 GMT
Subject: CN=3fb6a664fcd728321834a548594936dcfab6d5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:9d:96:26:23:5f:a3:49:c4:05:f0:96:3d:
58:71:a1:0a:29:26:69:43:65:7d:6a:57:b2:27:f9:
da:d5:7d:62:1d:82:1a:39:57:7b:8d:fb:49:d9:df:
71:d2:fb:f9:85:35:00:a2:03:65:27:43:94:1b:6e:
11:76:9d:76:24:0c:69:c8:35:14:fa:ec:03:96:0f:
e3:76:bf:a0:a2:05:27:f7:67:2b:5a:c6:d4:5c:66:
5d:f4:5f:00:ce:8f:c7:3e:c8:38:92:97:b8:e9:32:
21:85:97:cd:39:77:8e:5c:05:b3:b3:d1:02:14:a7:
b0:02:4d:7a:69:ef:69:5f:34:58:d7:a3:84:70:4e:
66:7d:4a:9f:37:3d:12:0c:22:2b:af:fa:b7:65:64:
e0:27:83:4d:fa:52:bb:b6:cf:17:5c:29:a3:5a:97:
5e:0d:69:d1:2b:5b:c0:af:b3:25:aa:56:53:63:0b:
9b:8f:e8:21:1e:5b:75:ce:7c:42:67:10:21:6e:9d:
f1:ba:2b:a7:25:3d:de:d4:ec:48:a5:a1:cc:02:25:
fe:fa:02:f5:08:b9:31:eb:fa:07:02:c0:63:33:f2:
82:24:6d:44:72:d3:58:75:04:1e:18:e4:29:bf:a4:
83:0a:89:91:2e:0d:80:f7:5e:bf:d7:c2:ba:fc:fb:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B6:A6:64:FC:D7:28:32:18:34:A5:48:59:49:36:DC:FA:B6:D5:C3
X509v3 Authority Key Identifier:
keyid:AF:E6:62:B2:E9:7F:D2:BD:A9:1F:32:B2:CC:E9:E7:45:CB:A5:86:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Zisul_0r2pHzKyzOnnRculhgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c908ca-82c3-46c3-8b29-34d0c0e4c113/1/r-Zisul_0r2pHzKyzOnnRculhgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:06:9f:8c:3a:18:36:bb:f6:03:fe:10:50:df:fb:38:80:ae:
7a:23:4c:9e:d5:ae:42:15:29:85:d2:43:1c:54:16:34:0e:6d:
36:70:8e:de:cf:e3:8a:cb:d6:e0:13:df:f8:e7:4f:70:00:f2:
4b:1e:b5:13:7f:b2:be:f3:ef:97:ad:64:a9:b4:59:84:1e:a0:
9e:89:f3:3a:93:5f:74:f8:8d:77:ad:3e:ee:fb:ae:81:b2:aa:
6f:01:eb:95:c7:0c:1c:4d:e6:bd:9e:8c:71:61:80:96:a3:56:
bc:32:cc:0d:af:90:96:50:a4:fa:45:5d:ee:5d:10:11:5b:97:
31:8d:eb:31:01:79:f5:39:bd:2d:20:ad:d2:4d:65:e5:bb:aa:
aa:35:a1:2f:2f:90:88:01:eb:88:32:4e:5c:cd:a1:95:73:b6:
02:17:e5:d2:5f:2a:63:5e:9e:ea:b8:e5:eb:e7:a5:b6:85:9d:
3f:53:4d:58:16:4d:18:1c:4b:10:9e:57:78:bb:8b:1a:cf:67:
f2:2c:65:6f:f7:0f:64:f8:1d:3e:ab:dc:7c:e5:2e:33:09:6d:
a2:e2:5f:b7:1c:61:fa:3f:8c:2d:e6:d0:79:fd:0a:e6:68:47:
ae:6d:ae:80:f0:4c:b4:eb:76:29:a4:83:72:c0:24:4c:46:30:
37:5b:76:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKZIcZZrI/QZCiDset4eVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTY2MmIyZTk3ZmQyYmRhOTFmMzJiMmNjZTllNzQ1Y2Jh
NTg2MDIwHhcNMjYwMzI2MDgwMTIzWhcNMjYwMzI3MDgwMTIzWjAzMTEwLwYDVQQD
EygzZmI2YTY2NGZjZDcyODMyMTgzNGE1NDg1OTQ5MzZkY2ZhYjZkNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJidliYjX6NJxAXwlj1YcaEKKSZp
Q2V9aleyJ/na1X1iHYIaOVd7jftJ2d9x0vv5hTUAogNlJ0OUG24Rdp12JAxpyDUU
+uwDlg/jdr+gogUn92crWsbUXGZd9F8Azo/HPsg4kpe46TIhhZfNOXeOXAWzs9EC
FKewAk16ae9pXzRY16OEcE5mfUqfNz0SDCIrr/q3ZWTgJ4NN+lK7ts8XXCmjWpde
DWnRK1vAr7MlqlZTYwubj+ghHlt1znxCZxAhbp3xuiunJT3e1OxIpaHMAiX++gL1
CLkx6/oHAsBjM/KCJG1EctNYdQQeGOQpv6SDComRLg2A916/18K6/PuKswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+2pmT81ygyGDSlSFlJNtz6ttXDMB8GA1UdIwQY
MBaAFK/mYrLpf9K9qR8ysszp50XLpYYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9jOTA4Y2EtODJjMy00NmMzLThiMjkt
MzRkMGMwZTRjMTEzLzEvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9jOTA4Y2EtODJjMy00NmMzLThiMjktMzRkMGMwZTRjMTEz
LzEvci1aaXN1bF8wcjJwSHpLeXpPbm5SY3VsaGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8AafjDoY
Nrv2A/4QUN/7OICueiNMntWuQhUphdJDHFQWNA5tNnCO3s/jisvW4BPf+OdPcADy
Sx61E3+yvvPvl61kqbRZhB6gnonzOpNfdPiNd60+7vuugbKqbwHrlccMHE3mvZ6M
cWGAlqNWvDLMDa+QllCk+kVd7l0QEVuXMY3rMQF59Tm9LSCt0k1l5buqqjWhLy+Q
iAHriDJOXM2hlXO2Ahfl0l8qY16e6rjl6+eltoWdP1NNWBZNGBxLEJ5XeLuLGs9n
8ixlb/cPZPgdPqvcfOUuMwltouJftxxh+j+MLebQef0K5mhHrm2ugPBMtOt2KaSD
csAkTEYwN1t2oQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:13 2026 by rpki-client