Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
File: ZWo7XAkm87RZeYDaUImcKOpqa9k.mft (raw, json)
Hash identifier: lFQD74nj5pSjAnYkiaW4HwFGnfJodJzBi4bE8VdOyK8=
Subject key identifier: A7:70:21:94:00:5D:4D:72:5D:B1:44:C5:5B:E0:DF:A9:D1:F0:6E:BB
Authority key identifier: 65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
Certificate issuer: /CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Certificate serial: 019D25842303E477807F740E81D2A5900072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
Manifest number: 0C48
Signing time: Wed 25 Mar 2026 15:01:49 +0000
Manifest this update: Wed 25 Mar 2026 15:01:49 +0000
Manifest next update: Thu 26 Mar 2026 15:01:49 +0000
Files and hashes: 1: ZWo7XAkm87RZeYDaUImcKOpqa9k.crl (hash: JtZYRK95A/P2HXp+FHYxCoRYRONCkWa5aYdIFQAb1hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:23:03:e4:77:80:7f:74:0e:81:d2:a5:90:00:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Validity
Not Before: Mar 25 15:01:49 2026 GMT
Not After : Mar 26 15:01:49 2026 GMT
Subject: CN=a7702194005d4d725db144c55be0dfa9d1f06ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:8a:9c:e7:a6:0b:03:5e:85:ad:16:3c:04:
28:a0:94:25:c6:66:cd:61:b1:fc:18:a3:29:49:b0:
6a:d3:d9:9b:9b:ba:3c:57:c4:2e:12:d0:89:38:0b:
bb:f2:92:76:db:11:2e:46:7a:8d:78:98:00:3f:c7:
15:80:f6:59:1c:1c:09:6d:33:39:5a:31:9e:93:b5:
3b:d2:fc:31:4e:02:0c:37:0a:52:df:03:a7:ce:8d:
4c:a9:ea:da:83:7f:b0:1b:2f:36:2b:34:f3:b0:f6:
17:ec:42:9b:06:cf:e1:e7:97:84:3a:50:74:df:24:
7d:09:46:0f:00:89:23:da:e0:1b:7b:55:56:05:78:
e0:71:51:27:33:9a:b0:ff:05:3a:d2:4c:58:6a:bf:
6c:22:2f:7d:4b:36:d6:a8:3e:6d:47:4e:7b:dc:23:
a7:e6:47:8f:73:7d:0a:6d:db:48:4a:c7:92:74:6d:
c6:b2:47:34:47:7b:f0:cc:31:c8:e6:e4:92:d7:d1:
d4:80:84:d9:a5:64:fb:1f:98:b9:84:52:ab:91:91:
28:52:06:ee:8a:91:ff:f7:ab:d4:8e:29:27:b3:e6:
9c:8e:33:e4:ac:35:5c:0b:41:3e:2f:4f:b0:4f:77:
f6:1f:42:de:d0:c1:30:b8:bf:e5:04:b1:b4:4d:0e:
6b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:70:21:94:00:5D:4D:72:5D:B1:44:C5:5B:E0:DF:A9:D1:F0:6E:BB
X509v3 Authority Key Identifier:
keyid:65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ed:b3:e1:72:f2:2d:de:a1:f4:db:fe:57:75:d5:90:0d:fe:
56:d0:4d:86:77:e8:ee:35:cb:7e:12:59:1f:63:29:0e:9a:13:
25:71:7d:99:d8:0f:54:9e:3d:73:b5:7b:e7:52:82:87:b0:b3:
a0:38:0f:62:ea:cb:94:79:e9:9c:54:c4:9e:83:a8:00:41:3e:
82:b9:94:b1:e2:24:19:50:a7:65:ec:ed:8c:22:a2:d8:20:25:
5e:d2:47:f7:1a:2a:f3:17:98:c4:8e:77:ae:f1:e0:fe:ce:2d:
3f:9e:f1:ac:49:2f:b5:b0:3d:01:2f:fd:3a:86:e4:e1:d5:ff:
c3:d7:ae:f0:2c:fc:d0:bb:5a:aa:5d:25:13:d2:d9:2d:6e:2d:
a6:db:46:ed:a3:c1:49:c6:4e:ed:16:55:1e:87:c2:66:49:45:
1b:03:d7:1b:d1:24:dc:40:e6:7f:73:d3:73:0f:03:1f:97:9b:
37:d7:69:b1:28:4a:14:0d:2a:81:b9:70:92:b3:8c:3d:ac:9b:
61:c3:ad:69:96:a2:c9:ea:b3:d8:ca:ab:03:82:2a:9f:d4:df:
d3:32:69:f3:69:06:34:14:e9:bf:14:06:1d:be:06:10:e8:8d:
56:bd:b3:2e:7d:5b:0a:1b:e7:f1:65:fd:84:eb:e1:b1:1d:60:
19:4b:47:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhCMD5HeAf3QOgdKlkAByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NmEzYjVjMDkyNmYzYjQ1OTc5ODBkYTUwODk5YzI4ZWE2
YTZiZDkwHhcNMjYwMzI1MTUwMTQ5WhcNMjYwMzI2MTUwMTQ5WjAzMTEwLwYDVQQD
EyhhNzcwMjE5NDAwNWQ0ZDcyNWRiMTQ0YzU1YmUwZGZhOWQxZjA2ZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVaKnOemCwNeha0WPAQooJQlxmbN
YbH8GKMpSbBq09mbm7o8V8QuEtCJOAu78pJ22xEuRnqNeJgAP8cVgPZZHBwJbTM5
WjGek7U70vwxTgIMNwpS3wOnzo1Mqerag3+wGy82KzTzsPYX7EKbBs/h55eEOlB0
3yR9CUYPAIkj2uAbe1VWBXjgcVEnM5qw/wU60kxYar9sIi99SzbWqD5tR0573COn
5kePc30KbdtISseSdG3Gskc0R3vwzDHI5uSS19HUgITZpWT7H5i5hFKrkZEoUgbu
ipH/96vUjikns+acjjPkrDVcC0E+L0+wT3f2H0Le0MEwuL/lBLG0TQ5rAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdwIZQAXU1yXbFExVvg36nR8G67MB8GA1UdIwQY
MBaAFGVqO1wJJvO0WXmA2lCJnCjqamvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8zNmMxYTktNGEyMi00NTUwLWIzYzgt
NGNkOGI0MzhmODE1LzEvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8zNmMxYTktNGEyMi00NTUwLWIzYzgtNGNkOGI0MzhmODE1
LzEvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEO2z4XLy
Ld6h9Nv+V3XVkA3+VtBNhnfo7jXLfhJZH2MpDpoTJXF9mdgPVJ49c7V751KCh7Cz
oDgPYurLlHnpnFTEnoOoAEE+grmUseIkGVCnZeztjCKi2CAlXtJH9xoq8xeYxI53
rvHg/s4tP57xrEkvtbA9AS/9Oobk4dX/w9eu8Cz80Ltaql0lE9LZLW4tpttG7aPB
ScZO7RZVHofCZklFGwPXG9Ek3EDmf3PTcw8DH5ebN9dpsShKFA0qgblwkrOMPayb
YcOtaZaiyeqz2MqrA4Iqn9Tf0zJp82kGNBTpvxQGHb4GEOiNVr2zLn1bChvn8WX9
hOvhsR1gGUtHqQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:34 2026 by rpki-client