Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: yXdL2+mEzYOrfCYFs0rSqWhEnfPNO7IDd0cTeqA21c8=
Subject key identifier: 92:1F:0A:91:38:F6:FB:BF:60:FC:80:E8:2A:86:F3:0C:C3:8D:57:3D
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 019D25BACC5FA828CA59BC59861F32C29DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 03E8
Signing time: Wed 25 Mar 2026 16:01:32 +0000
Manifest this update: Wed 25 Mar 2026 16:01:32 +0000
Manifest next update: Thu 26 Mar 2026 16:01:32 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: xmxXULfp/XWxuOyqkm9V5KsHRonYnLE7UhjysHIJGWk=)
2: 7jgvwOfbTS9EcboNY_mci-_zFzQ.roa (hash: SGXWMpwVSmLMAKNP+kPKK/+5RwAE6AIl6oVDLelweNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:cc:5f:a8:28:ca:59:bc:59:86:1f:32:c2:9d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Mar 25 16:01:32 2026 GMT
Not After : Mar 26 16:01:32 2026 GMT
Subject: CN=921f0a9138f6fbbf60fc80e82a86f30cc38d573d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:c6:20:15:2f:af:13:5e:06:4e:5f:39:56:
5d:0b:89:fa:5d:ae:b6:c9:39:a6:6e:45:bc:2b:f1:
94:49:99:c5:1f:46:24:02:2d:19:6d:e3:24:46:cf:
7e:56:db:f4:9d:96:e7:c6:66:7d:5e:f2:ee:6b:91:
85:eb:98:95:71:df:49:96:5f:bc:70:a4:3f:c4:31:
fa:e9:2a:f4:a8:6d:32:70:37:58:dd:75:50:f9:40:
f8:08:b5:69:2b:3b:85:73:66:33:a8:6b:60:32:7a:
8b:1c:31:e9:b0:73:99:e9:36:ad:68:69:8b:2f:37:
a2:c7:a4:7f:26:d8:5b:0a:dc:3a:8b:45:3f:8b:ac:
09:32:d1:c4:8c:1c:7a:d2:39:71:0e:bf:99:00:b0:
d8:37:18:9b:b3:c2:6d:de:44:65:27:c8:f4:c4:7e:
4a:4d:65:69:a9:e2:a7:72:9d:c0:c3:c8:f9:69:3a:
73:fc:69:71:d8:9a:5f:94:45:0c:12:69:d0:b6:65:
65:d2:48:43:09:5f:39:93:e5:ab:91:0e:14:64:a4:
6f:5c:84:32:66:db:9e:1e:e4:90:6a:77:ad:c6:5c:
76:7b:fe:25:55:af:ed:e8:c6:d3:9f:78:21:47:88:
78:15:94:0f:cd:a7:ce:24:43:67:ec:23:11:8d:1c:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1F:0A:91:38:F6:FB:BF:60:FC:80:E8:2A:86:F3:0C:C3:8D:57:3D
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:21:97:9b:25:f6:d3:bd:0b:0d:fa:37:8b:ac:ad:fd:ff:be:
c7:59:13:9a:ac:33:b6:1f:c9:b7:48:78:05:c6:43:5e:79:b1:
bd:c7:4c:ff:75:0a:41:36:d3:b4:39:08:b7:0a:1c:40:b1:81:
87:8b:f2:7b:d5:f2:78:fa:35:78:7d:a2:69:68:33:81:49:7f:
62:2d:81:6d:28:55:43:de:6a:a0:e5:4d:82:b2:b0:a0:ee:12:
08:a4:7f:7e:a2:c3:43:24:f8:85:5e:fe:19:6b:61:bc:97:d4:
d9:66:67:4e:ea:f8:ab:07:2a:96:2b:64:4f:94:42:d0:c9:9a:
8e:68:fa:d4:8b:1c:61:10:54:de:6f:31:7a:78:cf:9c:91:dd:
19:63:19:92:5a:6e:e9:68:2b:75:e8:96:ca:13:2a:74:9a:f8:
cf:2a:22:ac:b9:2a:13:4c:bf:b9:a8:4d:a8:2f:04:38:21:91:
c4:35:41:b8:58:5c:fc:0d:31:97:b8:e8:90:c6:f0:fe:67:32:
9d:a5:b5:a8:5d:fc:5c:39:01:8a:63:dd:4b:ce:1c:66:3e:88:
f0:58:57:e0:ba:b5:8e:0f:1b:a9:0b:f4:5f:9b:83:24:8f:30:
ba:08:e3:31:df:48:13:e2:1b:8e:f8:fb:62:60:1b:b5:d2:ad:
be:6b:dc:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lusxfqCjKWbxZhh8ywp2uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTg4MzQxZDM2MDc4NjVmNTBmNWJiMDJhOWEzZjVjMmRl
NThhOTIwHhcNMjYwMzI1MTYwMTMyWhcNMjYwMzI2MTYwMTMyWjAzMTEwLwYDVQQD
Eyg5MjFmMGE5MTM4ZjZmYmJmNjBmYzgwZTgyYTg2ZjMwY2MzOGQ1NzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybXGIBUvrxNeBk5fOVZdC4n6Xa62
yTmmbkW8K/GUSZnFH0YkAi0ZbeMkRs9+Vtv0nZbnxmZ9XvLua5GF65iVcd9Jll+8
cKQ/xDH66Sr0qG0ycDdY3XVQ+UD4CLVpKzuFc2YzqGtgMnqLHDHpsHOZ6TataGmL
Lzeix6R/JthbCtw6i0U/i6wJMtHEjBx60jlxDr+ZALDYNxibs8Jt3kRlJ8j0xH5K
TWVpqeKncp3Aw8j5aTpz/Glx2JpflEUMEmnQtmVl0khDCV85k+WrkQ4UZKRvXIQy
ZtueHuSQanetxlx2e/4lVa/t6MbTn3ghR4h4FZQPzafOJENn7CMRjRzCOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIfCpE49vu/YPyA6CqG8wzDjVc9MB8GA1UdIwQY
MBaAFNGYg0HTYHhl9Q9bsCqaP1wt5YqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMt
OTMyMGExYzczYjFkLzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMtOTMyMGExYzczYjFk
LzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSGXmyX2
070LDfo3i6yt/f++x1kTmqwzth/Jt0h4BcZDXnmxvcdM/3UKQTbTtDkItwocQLGB
h4vye9XyePo1eH2iaWgzgUl/Yi2BbShVQ95qoOVNgrKwoO4SCKR/fqLDQyT4hV7+
GWthvJfU2WZnTur4qwcqlitkT5RC0Mmajmj61IscYRBU3m8xenjPnJHdGWMZklpu
6WgrdeiWyhMqdJr4zyoirLkqE0y/uahNqC8EOCGRxDVBuFhc/A0xl7jokMbw/mcy
naW1qF38XDkBimPdS84cZj6I8FhX4Lq1jg8bqQv0X5uDJI8wugjjMd9IE+Ibjvj7
YmAbtdKtvmvcKQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:31 2026 by rpki-client