Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
File: zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json)
Hash identifier: tfbNPqt5hIhCQozRAiAcMfiEjNbSF4DaQ/+ml5C69aE=
Subject key identifier: 5E:70:CA:F7:B0:C8:91:10:94:B3:EE:DD:19:46:71:6E:E3:A7:9A:6F
Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
Certificate issuer: /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Certificate serial: 019D29CDF8D7B59CBF7BD91EEBA6FACFC7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
Manifest number: 0C06
Signing time: Thu 26 Mar 2026 11:00:57 +0000
Manifest this update: Thu 26 Mar 2026 11:00:57 +0000
Manifest next update: Fri 27 Mar 2026 11:00:57 +0000
Files and hashes: 1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: VKzpNT3iUCrussoMURncUCY7l8v4fFaK2IILllKt6e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:f8:d7:b5:9c:bf:7b:d9:1e:eb:a6:fa:cf:c7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Validity
Not Before: Mar 26 11:00:57 2026 GMT
Not After : Mar 27 11:00:57 2026 GMT
Subject: CN=5e70caf7b0c8911094b3eedd1946716ee3a79a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6a:f4:bd:37:6e:ca:ac:d2:d6:81:84:cf:ad:
12:ef:5d:ce:a1:2d:cf:4e:a7:f1:d4:59:e4:50:55:
21:7c:23:61:78:9b:7e:b8:66:b4:02:c0:54:37:96:
bd:e8:da:16:4e:4c:ba:ca:b2:55:79:40:42:65:f7:
d2:4d:b7:52:84:d2:a6:4e:0b:72:cd:2d:52:dc:bf:
61:c4:b7:27:80:67:a3:d1:42:b6:25:46:58:32:38:
0b:14:bf:8d:a5:67:4d:19:e0:06:00:29:38:d9:ee:
44:ff:bc:a7:fa:bf:6e:87:9f:00:2a:b4:44:7a:1c:
9c:aa:72:b0:1e:a8:d0:64:0c:4b:3b:db:ce:e4:d5:
5c:84:7b:7e:8b:02:03:3b:d7:82:17:ea:1a:37:89:
49:d1:14:eb:83:b1:90:d5:c5:87:67:b4:6a:af:f4:
f3:76:e5:ff:08:51:ed:d1:18:0d:60:b0:de:01:b4:
18:2e:f1:c3:52:e8:78:91:0e:e1:19:32:5b:bd:ec:
d3:76:de:63:19:c1:92:24:0b:31:9a:d5:8f:97:86:
43:6e:ee:ac:14:49:e6:7b:e4:45:c9:a7:a2:20:03:
45:0f:19:41:97:21:9b:76:0c:e1:7a:4e:a0:85:e3:
36:65:7b:37:2d:d8:93:23:82:9c:ff:d2:56:a0:5f:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:70:CA:F7:B0:C8:91:10:94:B3:EE:DD:19:46:71:6E:E3:A7:9A:6F
X509v3 Authority Key Identifier:
keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b3:ae:9d:38:0a:39:99:5d:cf:12:18:9b:c1:ad:76:bc:0d:
c6:f6:4d:8d:ae:a5:fe:3b:4a:f5:a6:ac:62:68:72:30:70:69:
81:c8:c1:98:70:d1:87:7f:b8:67:68:3a:5e:81:ab:47:82:c4:
c6:22:de:3a:c0:bf:7d:22:9e:88:be:ae:e7:9b:92:88:02:4f:
06:dd:82:63:2b:74:75:2f:b6:57:a9:cf:e1:51:a4:78:72:e3:
66:85:17:67:a2:f0:8f:0d:23:0a:08:65:82:82:69:29:b5:93:
d1:b2:4e:64:74:71:38:af:9e:34:97:11:8a:11:4e:e5:12:1a:
e6:32:c5:75:e4:1d:3e:46:fa:81:f7:77:08:ec:4e:a0:7c:96:
0f:21:de:e8:99:a5:8e:47:75:e5:16:39:e1:a7:4b:bc:c1:86:
47:63:83:7f:ba:19:c6:dc:73:50:6e:21:90:f7:4f:2e:88:9f:
7d:2c:4f:5e:e2:90:06:48:3d:69:db:35:cc:35:b9:f5:11:ed:
e9:9b:5e:09:70:7b:9f:24:f9:96:af:07:73:b7:4a:54:c5:c0:
d9:23:7f:39:e5:dd:d9:d2:85:2a:10:63:dc:83:a9:11:bb:f0:
f4:7a:05:b4:f8:0a:4d:8c:54:6f:04:4d:30:cb:ca:b8:a1:5a:
c9:f2:9a:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzfjXtZy/e9ke66b6z8ewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMTA0MTFlMzljYzllNTg0MzRjMGJiOTc1NTRkNjA2M2U3
NzAyZWMwHhcNMjYwMzI2MTEwMDU3WhcNMjYwMzI3MTEwMDU3WjAzMTEwLwYDVQQD
Eyg1ZTcwY2FmN2IwYzg5MTEwOTRiM2VlZGQxOTQ2NzE2ZWUzYTc5YTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92r0vTduyqzS1oGEz60S713OoS3P
Tqfx1FnkUFUhfCNheJt+uGa0AsBUN5a96NoWTky6yrJVeUBCZffSTbdShNKmTgty
zS1S3L9hxLcngGej0UK2JUZYMjgLFL+NpWdNGeAGACk42e5E/7yn+r9uh58AKrRE
ehycqnKwHqjQZAxLO9vO5NVchHt+iwIDO9eCF+oaN4lJ0RTrg7GQ1cWHZ7Rqr/Tz
duX/CFHt0RgNYLDeAbQYLvHDUuh4kQ7hGTJbvezTdt5jGcGSJAsxmtWPl4ZDbu6s
FEnme+RFyaeiIANFDxlBlyGbdgzhek6gheM2ZXs3LdiTI4Kc/9JWoF+QGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5wyvewyJEQlLPu3RlGcW7jp5pvMB8GA1UdIwQY
MBaAFM4QQR45zJ5YQ0wLuXVU1gY+dwLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemhCQkhqbk1ubGhEVEF1NWRWVFdCajUzQXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iZjlkN2EtYzYwNS00ZjY0LWJlMDMt
ZDkwOGIwMDk4NjE0LzEvemhCQkhqbk1ubGhEVEF1NWRWVFdCajUzQXV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9iZjlkN2EtYzYwNS00ZjY0LWJlMDMtZDkwOGIwMDk4NjE0
LzEvemhCQkhqbk1ubGhEVEF1NWRWVFdCajUzQXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArOunTgK
OZldzxIYm8GtdrwNxvZNja6l/jtK9aasYmhyMHBpgcjBmHDRh3+4Z2g6XoGrR4LE
xiLeOsC/fSKeiL6u55uSiAJPBt2CYyt0dS+2V6nP4VGkeHLjZoUXZ6Lwjw0jCghl
goJpKbWT0bJOZHRxOK+eNJcRihFO5RIa5jLFdeQdPkb6gfd3COxOoHyWDyHe6Jml
jkd15RY54adLvMGGR2ODf7oZxtxzUG4hkPdPLoiffSxPXuKQBkg9ads1zDW59RHt
6ZteCXB7nyT5lq8Hc7dKVMXA2SN/OeXd2dKFKhBj3IOpEbvw9HoFtPgKTYxUbwRN
MMvKuKFayfKaqg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:58:42 2026 by rpki-client