Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
File: zS0l92kTYIeMus6YWJC59e_PfZU.mft (raw, json)
Hash identifier: GDXdZkUStTeK14ZLP/xSXqr/JsDquqBPXh0hSZOfjZ0=
Subject key identifier: CB:8D:71:3D:6F:F2:B4:6C:A1:16:36:84:2A:14:1C:DF:07:74:64:A6
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Certificate issuer: /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial: 019D2703F2E58F937ADEF5F8E317D92ECD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
Manifest number: 17DD
Signing time: Wed 25 Mar 2026 22:01:03 +0000
Manifest this update: Wed 25 Mar 2026 22:01:03 +0000
Manifest next update: Thu 26 Mar 2026 22:01:03 +0000
Files and hashes: 1: RqKPi2xz-dA9iWopa2S6eD63VNM.roa (hash: sh/U5dfnaz+hJ1QK4InqZNRlbTTXVEErKQaPltkS37U=)
2: zS0l92kTYIeMus6YWJC59e_PfZU.crl (hash: X0aJolLcCS9OqqVCfcz7qFGUcvItWaZBy844mwJGvFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f2:e5:8f:93:7a:de:f5:f8:e3:17:d9:2e:cd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Validity
Not Before: Mar 25 22:01:03 2026 GMT
Not After : Mar 26 22:01:03 2026 GMT
Subject: CN=cb8d713d6ff2b46ca11636842a141cdf077464a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:95:b4:84:4d:9e:fe:5e:66:58:39:a7:3d:
38:74:8e:8d:cc:55:9a:e9:8f:95:b2:07:2d:27:c8:
16:34:e4:42:f2:bd:2a:dd:58:52:42:2d:3c:95:9e:
24:10:03:0c:62:7a:6c:4e:77:8d:39:36:dd:4e:bd:
37:57:19:0e:33:2c:07:38:8a:f5:22:26:7f:e9:a8:
02:e6:bb:b1:dd:fa:d9:21:0f:1b:44:fa:95:06:e5:
78:02:bb:6a:51:93:95:b0:5e:95:cb:96:e0:dc:63:
ec:33:89:ec:c1:65:68:e2:7e:11:60:dc:a5:80:7f:
c0:53:56:e6:91:c0:8b:09:26:f8:5b:2b:8a:31:e2:
71:30:59:b2:2f:46:93:d2:26:e8:10:90:d4:2c:94:
04:1d:1b:cc:27:12:93:c9:f0:45:ca:18:32:17:ae:
1d:ee:b0:d9:10:21:20:4b:24:60:c1:d1:9d:93:f8:
3c:72:ff:42:7f:9f:25:54:44:bb:07:99:91:dd:5a:
28:5b:f0:a0:f5:4f:5f:09:06:14:8b:88:0d:1e:66:
ca:38:07:ee:73:c0:94:c4:5f:c0:26:0f:6b:d5:74:
84:4f:f9:a1:66:30:38:dd:2f:d1:32:f9:20:f0:6d:
2d:fa:00:1f:6e:a1:d8:9b:57:7e:6a:21:40:e6:81:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8D:71:3D:6F:F2:B4:6C:A1:16:36:84:2A:14:1C:DF:07:74:64:A6
X509v3 Authority Key Identifier:
keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1d:a1:32:e9:93:c7:47:cf:25:c3:94:ac:16:d2:8b:05:0c:
bf:87:ea:d3:20:22:b0:52:a4:39:08:5a:69:03:c0:dc:0c:bf:
1d:9b:a2:87:3c:01:7f:38:72:87:3b:9f:7e:cb:94:75:eb:68:
ab:d7:c2:98:13:2d:fa:aa:e6:f5:93:50:87:60:90:5d:7c:e1:
ec:33:79:69:b9:9c:e4:61:7b:3d:00:0a:ef:e6:fe:b0:a5:ca:
3b:64:8b:4a:2c:8e:be:cd:ed:d6:90:2c:14:e1:a4:b8:c8:47:
71:9e:06:56:5b:d2:a7:37:c5:14:2e:de:ce:a2:11:77:6c:eb:
03:52:dc:38:a1:17:6b:09:6c:1c:e8:78:8a:f0:f4:0b:c0:90:
bc:38:5b:d9:91:c6:5f:36:6e:8a:35:2e:14:67:1e:92:ea:d3:
4f:8e:c6:54:77:25:d2:0b:c9:3b:cc:37:ea:5c:cd:ff:c4:47:
c4:af:1a:65:93:12:5a:37:68:63:95:e5:5c:6e:59:8e:f8:72:
0b:f3:80:7f:0a:fa:2a:f0:fd:6a:ca:2d:3f:db:1b:84:b0:86:
16:74:e1:28:59:21:dc:10:76:05:e8:8c:06:03:f7:f0:bc:a6:
d1:c1:d0:66:a0:2e:68:a7:ed:ef:bf:67:68:fb:3d:42:0c:f2:
cc:ba:4e:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA/Llj5N63vX44xfZLs2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMmQyNWY3NjkxMzYwODc4Y2JhY2U5ODU4OTBiOWY1ZWZj
ZjdkOTUwHhcNMjYwMzI1MjIwMTAzWhcNMjYwMzI2MjIwMTAzWjAzMTEwLwYDVQQD
EyhjYjhkNzEzZDZmZjJiNDZjYTExNjM2ODQyYTE0MWNkZjA3NzQ2NGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunmVtIRNnv5eZlg5pz04dI6NzFWa
6Y+VsgctJ8gWNORC8r0q3VhSQi08lZ4kEAMMYnpsTneNOTbdTr03VxkOMywHOIr1
IiZ/6agC5rux3frZIQ8bRPqVBuV4ArtqUZOVsF6Vy5bg3GPsM4nswWVo4n4RYNyl
gH/AU1bmkcCLCSb4WyuKMeJxMFmyL0aT0iboEJDULJQEHRvMJxKTyfBFyhgyF64d
7rDZECEgSyRgwdGdk/g8cv9Cf58lVES7B5mR3VooW/Cg9U9fCQYUi4gNHmbKOAfu
c8CUxF/AJg9r1XSET/mhZjA43S/RMvkg8G0t+gAfbqHYm1d+aiFA5oFDgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuNcT1v8rRsoRY2hCoUHN8HdGSmMB8GA1UdIwQY
MBaAFM0tJfdpE2CHjLrOmFiQufXvz32VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTct
NjM2OWIxN2ZmMTc4LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTctNjM2OWIxN2ZmMTc4
LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhB2hMumT
x0fPJcOUrBbSiwUMv4fq0yAisFKkOQhaaQPA3Ay/HZuihzwBfzhyhzuffsuUdeto
q9fCmBMt+qrm9ZNQh2CQXXzh7DN5abmc5GF7PQAK7+b+sKXKO2SLSiyOvs3t1pAs
FOGkuMhHcZ4GVlvSpzfFFC7ezqIRd2zrA1LcOKEXawlsHOh4ivD0C8CQvDhb2ZHG
XzZuijUuFGcekurTT47GVHcl0gvJO8w36lzN/8RHxK8aZZMSWjdoY5XlXG5Zjvhy
C/OAfwr6KvD9asotP9sbhLCGFnThKFkh3BB2BeiMBgP38Lym0cHQZqAuaKft779n
aPs9QgzyzLpOtA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:35 2026 by rpki-client