Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
File: RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json)
Hash identifier: 0Vjd8lbX9hOEdJh7In97IuoluwQwHQw34COLKmWmT2c=
Subject key identifier: 95:3B:FB:AF:D2:8C:D1:88:24:42:BC:BD:B6:96:83:7A:E9:CD:C2:2C
Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
Certificate issuer: /CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Certificate serial: 019D2A3C1298DFA955752B0668D906F59C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
Manifest number: 0D3E
Signing time: Thu 26 Mar 2026 13:01:13 +0000
Manifest this update: Thu 26 Mar 2026 13:01:13 +0000
Manifest next update: Fri 27 Mar 2026 13:01:13 +0000
Files and hashes: 1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: IWoqb2u8uK2YO90xbAc0S/nj8G7ZtXxSk4GyPQPB24g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:12:98:df:a9:55:75:2b:06:68:d9:06:f5:9c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Validity
Not Before: Mar 26 13:01:13 2026 GMT
Not After : Mar 27 13:01:13 2026 GMT
Subject: CN=953bfbafd28cd1882442bcbdb696837ae9cdc22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:d8:31:0c:b1:ed:b2:b6:e5:3f:a8:a5:b8:
da:0a:8f:4f:18:4e:c5:94:ef:d2:28:41:c3:5b:59:
a7:c4:94:ad:50:c6:1b:18:d4:c5:3a:a6:1f:6c:2a:
77:43:d5:85:ff:bd:29:30:e7:c3:32:5a:7f:7a:04:
5a:0f:f1:c1:ba:a7:94:16:52:75:00:03:e4:66:55:
84:a0:4a:8f:e0:ad:5f:0f:00:2f:79:2c:94:f4:8f:
48:cd:96:83:24:f2:d7:06:78:46:1b:ea:c0:67:51:
f7:4f:8b:7e:b2:e0:15:aa:59:82:4b:d5:86:82:11:
17:98:9d:1d:b9:0e:58:9b:a2:7e:0b:97:2c:a5:bb:
89:df:4a:7d:bc:e8:13:4c:1c:ae:74:70:3b:9f:4d:
96:be:9d:91:ce:0d:e6:0d:d7:be:17:2c:b9:94:c4:
32:00:32:2c:6b:87:4c:42:e8:af:56:b3:fd:37:41:
b5:00:be:7f:d6:ab:7b:80:b2:ae:d2:27:70:91:72:
f4:97:7a:ac:a2:0c:88:8f:fb:a3:d6:ee:79:13:b3:
8e:2d:e7:e0:5f:60:8f:a9:91:2e:ed:27:09:76:b3:
88:46:4a:b4:87:c3:ec:5a:42:ba:16:82:ba:ed:22:
ae:64:8c:0f:af:78:84:b4:ac:2f:6c:d1:c3:f5:a9:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3B:FB:AF:D2:8C:D1:88:24:42:BC:BD:B6:96:83:7A:E9:CD:C2:2C
X509v3 Authority Key Identifier:
keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:18:9d:05:13:1a:cf:51:a9:1c:bf:42:e3:70:c5:4d:9d:2e:
eb:8c:1f:d7:46:3b:a4:2e:08:a0:67:c5:03:fa:40:83:a5:23:
e6:88:45:dd:ba:79:3a:e2:ab:00:ff:57:15:19:e0:ce:a1:8b:
6d:e4:0e:49:16:75:62:3a:0f:33:aa:1b:d8:56:b4:b8:ff:8b:
56:70:26:7f:1b:c5:c0:7c:e6:df:69:6c:97:f2:98:3e:82:da:
1a:48:04:cb:8d:5d:78:b4:71:12:23:a6:60:e2:de:64:d5:01:
4d:ff:d1:06:d2:4d:3f:bf:28:f1:65:fc:a7:b0:6b:ff:13:91:
7b:dc:24:12:72:f6:99:67:0e:59:0d:d5:73:e3:f8:1c:84:8e:
50:76:b1:25:48:e1:e3:01:2d:1e:d2:92:f1:af:26:b6:1f:95:
6d:18:41:bf:87:5d:24:b6:74:98:40:e8:38:12:29:16:85:c6:
7a:5a:0c:a0:77:96:a9:07:52:09:fa:69:00:20:4f:6e:9a:1b:
21:97:4a:39:04:29:29:b2:5c:12:91:bb:3a:01:81:e0:84:d0:
53:6f:f5:20:94:a9:2e:0b:b8:ee:0e:03:8d:8f:e8:c1:3d:43:
f7:ce:9e:40:8e:b9:2a:dd:52:1b:90:0c:d6:de:0a:3c:d3:63:
cd:14:65:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qPBKY36lVdSsGaNkG9ZxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzJlYzBlOTFkYmJmOTRkZGExZDY1MDQ0N2QyNjg5NzZk
NjIwOWEwHhcNMjYwMzI2MTMwMTEzWhcNMjYwMzI3MTMwMTEzWjAzMTEwLwYDVQQD
Eyg5NTNiZmJhZmQyOGNkMTg4MjQ0MmJjYmRiNjk2ODM3YWU5Y2RjMjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9PYMQyx7bK25T+opbjaCo9PGE7F
lO/SKEHDW1mnxJStUMYbGNTFOqYfbCp3Q9WF/70pMOfDMlp/egRaD/HBuqeUFlJ1
AAPkZlWEoEqP4K1fDwAveSyU9I9IzZaDJPLXBnhGG+rAZ1H3T4t+suAVqlmCS9WG
ghEXmJ0duQ5Ym6J+C5cspbuJ30p9vOgTTByudHA7n02Wvp2Rzg3mDde+Fyy5lMQy
ADIsa4dMQuivVrP9N0G1AL5/1qt7gLKu0idwkXL0l3qsogyIj/uj1u55E7OOLefg
X2CPqZEu7ScJdrOIRkq0h8PsWkK6FoK67SKuZIwPr3iEtKwvbNHD9alG+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJU7+6/SjNGIJEK8vbaWg3rpzcIsMB8GA1UdIwQY
MBaAFEcy7A6R27+U3aHWUER9Jol21iCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83ZTFiMWMtZjk2My00ZTI5LWI4ZWMt
Nzg4ZGIwOWQwZmU2LzEvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83ZTFiMWMtZjk2My00ZTI5LWI4ZWMtNzg4ZGIwOWQwZmU2
LzEvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBidBRMa
z1GpHL9C43DFTZ0u64wf10Y7pC4IoGfFA/pAg6Uj5ohF3bp5OuKrAP9XFRngzqGL
beQOSRZ1YjoPM6ob2Fa0uP+LVnAmfxvFwHzm32lsl/KYPoLaGkgEy41deLRxEiOm
YOLeZNUBTf/RBtJNP78o8WX8p7Br/xORe9wkEnL2mWcOWQ3Vc+P4HISOUHaxJUjh
4wEtHtKS8a8mth+VbRhBv4ddJLZ0mEDoOBIpFoXGeloMoHeWqQdSCfppACBPbpob
IZdKOQQpKbJcEpG7OgGB4ITQU2/1IJSpLgu47g4DjY/owT1D986eQI65Kt1SG5AM
1t4KPNNjzRRlPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:27 2026 by rpki-client