Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
File: ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft (raw, json)
Hash identifier: mIqThdViMEOGZneciTHjRuXCAMrKrt2kaEkHe4aa4lY=
Subject key identifier: 91:C9:F2:79:63:D4:E7:99:0C:FC:57:72:9B:D0:58:AD:B5:91:76:70
Authority key identifier: 65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
Certificate issuer: /CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Certificate serial: 019D29CDC74CAF6C3B2F47EA66A376446118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 11:00:44 +0000
Manifest this update: Thu 26 Mar 2026 11:00:44 +0000
Manifest next update: Fri 27 Mar 2026 11:00:44 +0000
Files and hashes: 1: ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl (hash: W882FCeygk6Uyyf3rpvZplJiMy55dsI778WUWJSoOb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:c7:4c:af:6c:3b:2f:47:ea:66:a3:76:44:61:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab485af923d1b46c5a321fc7a3f856c04fb6fc
Validity
Not Before: Mar 26 11:00:44 2026 GMT
Not After : Mar 27 11:00:44 2026 GMT
Subject: CN=91c9f27963d4e7990cfc57729bd058adb5917670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:62:1b:98:f0:71:7a:13:0e:20:7f:ba:f3:
0d:d1:a3:2b:57:a6:a0:38:13:b3:e9:05:da:72:62:
17:57:21:72:12:79:82:a3:f4:d7:6f:a6:c0:ea:a6:
0c:d6:dd:bf:e8:37:66:25:d6:68:d5:6c:c6:2b:a2:
ff:08:76:6a:17:bc:23:c2:3f:46:db:3b:d0:6b:f6:
0f:d4:32:da:0b:9e:49:f8:ed:ed:1e:d0:20:28:03:
a9:0e:30:17:fc:1d:32:17:08:a6:37:52:df:4c:8f:
f7:64:23:c0:fb:f6:8e:26:6c:f2:d4:5c:b7:63:71:
4f:b7:9f:76:e8:fd:92:4d:b9:f2:94:f9:66:77:6c:
ee:4d:e6:01:a3:13:f0:e6:19:1d:0b:45:c8:75:a9:
89:66:3c:97:b6:25:10:fd:c1:79:2e:2e:1d:24:c8:
28:bc:e3:4f:24:7b:02:4a:6b:31:ba:27:8e:83:d5:
7a:0a:c3:f6:de:17:2f:88:54:23:2b:a1:04:45:39:
b0:19:57:e6:d9:07:b1:1f:23:53:ed:25:db:57:64:
3b:89:ca:43:28:07:99:8a:6d:0b:2c:4a:e4:f1:88:
18:27:e8:d4:95:1e:3c:ee:ff:88:1e:46:be:cf:90:
68:67:ad:51:44:70:7d:9d:ff:2a:6e:55:b4:c8:ad:
78:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C9:F2:79:63:D4:E7:99:0C:FC:57:72:9B:D0:58:AD:B5:91:76:70
X509v3 Authority Key Identifier:
keyid:65:AB:48:5A:F9:23:D1:B4:6C:5A:32:1F:C7:A3:F8:56:C0:4F:B6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatIWvkj0bRsWjIfx6P4VsBPtvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/164d8d-41ac-4522-bb25-898634942285/1/ZatIWvkj0bRsWjIfx6P4VsBPtvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1c:75:ae:47:7c:e4:0a:bd:6e:17:4b:bd:83:a6:92:24:ae:
c5:ac:9d:ab:93:22:79:8f:35:ef:54:97:df:ca:37:69:bd:2c:
a0:fe:d6:90:fd:e5:4d:70:f1:e4:48:14:60:bd:6c:ac:2a:57:
e9:f5:ff:4c:7e:7f:3d:c9:ab:f6:2f:52:35:29:8c:da:0b:f5:
79:5d:45:41:e3:ab:52:66:48:02:cb:f7:99:8b:78:74:ba:58:
e1:28:61:09:08:68:4c:40:52:ce:d4:17:ab:cc:32:c2:34:29:
f9:97:f6:fb:08:61:f8:ea:54:e7:01:b9:0a:93:d8:58:50:9c:
e9:eb:57:a7:ae:c9:bf:03:b0:73:fc:2b:1f:32:24:15:34:85:
19:1d:42:9a:cd:8c:de:02:45:15:15:f3:47:f4:36:eb:1d:25:
19:31:21:79:9d:f4:8e:39:cd:1f:a5:23:e9:53:16:07:2a:88:
fd:df:04:49:03:1a:d8:75:30:1f:0c:f1:ac:eb:5a:e6:d6:5a:
dd:25:62:9f:bb:a8:20:33:14:58:35:24:d1:53:ae:57:61:35:
80:fc:c1:ca:3b:b0:cb:33:15:72:23:e4:9e:34:89:ed:4d:38:
46:d5:ce:f8:9e:df:70:fb:1c:cd:66:d3:d6:e2:49:88:c0:2e:
91:8d:c6:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzcdMr2w7L0fqZqN2RGEYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YWI0ODVhZjkyM2QxYjQ2YzVhMzIxZmM3YTNmODU2YzA0
ZmI2ZmMwHhcNMjYwMzI2MTEwMDQ0WhcNMjYwMzI3MTEwMDQ0WjAzMTEwLwYDVQQD
Eyg5MWM5ZjI3OTYzZDRlNzk5MGNmYzU3NzI5YmQwNThhZGI1OTE3NjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/BiG5jwcXoTDiB/uvMN0aMrV6ag
OBOz6QXacmIXVyFyEnmCo/TXb6bA6qYM1t2/6DdmJdZo1WzGK6L/CHZqF7wjwj9G
2zvQa/YP1DLaC55J+O3tHtAgKAOpDjAX/B0yFwimN1LfTI/3ZCPA+/aOJmzy1Fy3
Y3FPt5926P2STbnylPlmd2zuTeYBoxPw5hkdC0XIdamJZjyXtiUQ/cF5Li4dJMgo
vONPJHsCSmsxuieOg9V6CsP23hcviFQjK6EERTmwGVfm2QexHyNT7SXbV2Q7icpD
KAeZim0LLErk8YgYJ+jUlR487v+IHka+z5BoZ61RRHB9nf8qblW0yK14YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHJ8nlj1OeZDPxXcpvQWK21kXZwMB8GA1UdIwQY
MBaAFGWrSFr5I9G0bFoyH8ej+FbAT7b8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmF0SVd2a2owYlJzV2pJZng2UDRWc0JQdHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xNjRkOGQtNDFhYy00NTIyLWJiMjUt
ODk4NjM0OTQyMjg1LzEvWmF0SVd2a2owYlJzV2pJZng2UDRWc0JQdHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8xNjRkOGQtNDFhYy00NTIyLWJiMjUtODk4NjM0OTQyMjg1
LzEvWmF0SVd2a2owYlJzV2pJZng2UDRWc0JQdHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShx1rkd8
5Aq9bhdLvYOmkiSuxaydq5MieY8171SX38o3ab0soP7WkP3lTXDx5EgUYL1srCpX
6fX/TH5/Pcmr9i9SNSmM2gv1eV1FQeOrUmZIAsv3mYt4dLpY4ShhCQhoTEBSztQX
q8wywjQp+Zf2+whh+OpU5wG5CpPYWFCc6etXp67JvwOwc/wrHzIkFTSFGR1Cms2M
3gJFFRXzR/Q26x0lGTEheZ30jjnNH6Uj6VMWByqI/d8ESQMa2HUwHwzxrOta5tZa
3SVin7uoIDMUWDUk0VOuV2E1gPzByjuwyzMVciPknjSJ7U04RtXO+J7fcPsczWbT
1uJJiMAukY3G7A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:42:33 2026 by rpki-client