Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File: 0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier: ybQsN3OBHxWMJ7dKEuhjfPSezkzq9KVbs/FFpbLKlWU=
Subject key identifier: 92:C5:40:DF:E2:81:11:AD:BF:E1:7C:93:C7:A5:80:E9:3B:56:93:28
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 019D27E0125334D7B255FB60ED26254A449C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number: 17D8
Signing time: Thu 26 Mar 2026 02:01:29 +0000
Manifest this update: Thu 26 Mar 2026 02:01:29 +0000
Manifest next update: Fri 27 Mar 2026 02:01:29 +0000
Files and hashes: 1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: j/3+EPK6fr4PTzt3rNZOjfZWVxGfzFQkDem+Z+n5ZLE=)
2: 3dnL_zi3FNnTaz0mdMUS2sR8-h4.roa (hash: yjPFLmbKjZ2sKMH0GGDX4iM6oXsyBOBi8BX/jG36XcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:12:53:34:d7:b2:55:fb:60:ed:26:25:4a:44:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Mar 26 02:01:29 2026 GMT
Not After : Mar 27 02:01:29 2026 GMT
Subject: CN=92c540dfe28111adbfe17c93c7a580e93b569328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c6:40:08:63:8e:4e:db:27:4c:6d:83:19:be:
06:36:aa:14:2b:47:16:28:bb:32:fc:54:a9:4a:b0:
56:ff:65:1e:6f:ad:92:f7:71:0a:63:1b:6a:d9:9a:
a1:14:17:0a:9a:46:38:56:ba:fd:5d:4a:8c:7f:e4:
ed:97:4e:69:3d:00:ae:2b:4f:4a:c8:ef:ce:9a:e3:
0a:7e:1e:14:6a:0c:bb:cc:44:77:8a:84:1a:bb:ea:
4a:48:5d:53:6a:40:02:bd:f7:8b:45:97:ea:e8:04:
c3:e4:c2:27:42:24:8b:19:fc:e3:11:f7:d9:ac:7a:
72:4d:2a:cf:57:ea:4c:71:ae:60:dd:fc:5b:0c:3b:
68:d9:88:86:8d:23:b3:49:eb:17:60:7b:44:3d:bd:
d8:37:8e:52:9e:72:ec:f2:08:e8:b9:b9:c8:1a:b5:
87:c9:08:52:20:97:f1:54:7c:13:c2:bc:df:11:a5:
af:06:53:8e:d4:a8:50:22:56:e5:53:cc:b0:89:dd:
16:12:3e:e9:c2:55:9c:c3:5d:1a:14:16:16:47:16:
87:e7:4a:88:3b:84:62:9c:04:2a:85:48:e9:d2:24:
05:7c:9c:fb:ea:be:6a:be:2d:03:ad:a6:90:33:b4:
0f:6d:cb:3d:68:bf:8e:4c:4b:9a:ef:3b:a9:c3:44:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C5:40:DF:E2:81:11:AD:BF:E1:7C:93:C7:A5:80:E9:3B:56:93:28
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f3:4d:25:f1:b8:cd:cd:31:5b:d3:ac:c6:61:8c:93:01:40:
30:0b:aa:85:03:6a:32:99:3b:23:ba:09:af:d2:8a:9f:68:b5:
99:cb:6b:6f:ef:30:65:1d:e6:2a:8f:ae:83:41:66:0e:99:45:
cd:78:61:39:63:7b:4b:9c:56:0a:8e:5f:08:a4:47:34:aa:86:
1f:1a:f2:6a:6c:57:c5:2b:56:05:40:33:ba:75:54:6f:02:af:
c7:be:23:8b:b7:a3:89:47:49:6f:bd:6b:f6:0d:9a:2e:de:9c:
de:ff:9a:bc:fc:18:3a:1d:48:70:55:fe:d3:2c:f4:11:75:d1:
f7:57:66:6c:8e:9c:89:3a:5c:a5:35:bc:5d:48:20:f7:ae:19:
77:ba:27:90:d2:56:0a:18:a0:4e:b7:de:25:24:c8:d0:9d:6e:
5b:cb:d9:d9:06:7d:85:20:f2:50:ec:6d:2f:da:cc:ac:25:60:
2f:8f:14:38:a7:7d:29:48:29:2d:35:ee:ee:b5:b5:8b:79:12:
9c:0b:07:a4:98:2e:a8:46:67:4f:f3:1f:5a:be:eb:0e:ae:e9:
b0:c0:ef:ce:9b:45:30:76:4e:e4:88:52:d9:69:7c:15:29:c1:
f2:d5:f7:d0:32:2f:96:c9:44:03:3e:3f:11:8e:72:8d:98:bd:
f5:06:c2:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4BJTNNeyVftg7SYlSkScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTE3OGJiNGE2MTE0ZWFiOThiZTAwNDc4Y2M3ZjEzYjBh
ZDIwMmEwHhcNMjYwMzI2MDIwMTI5WhcNMjYwMzI3MDIwMTI5WjAzMTEwLwYDVQQD
Eyg5MmM1NDBkZmUyODExMWFkYmZlMTdjOTNjN2E1ODBlOTNiNTY5MzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cZACGOOTtsnTG2DGb4GNqoUK0cW
KLsy/FSpSrBW/2Ueb62S93EKYxtq2ZqhFBcKmkY4Vrr9XUqMf+Ttl05pPQCuK09K
yO/OmuMKfh4Uagy7zER3ioQau+pKSF1TakACvfeLRZfq6ATD5MInQiSLGfzjEffZ
rHpyTSrPV+pMca5g3fxbDDto2YiGjSOzSesXYHtEPb3YN45SnnLs8gjoubnIGrWH
yQhSIJfxVHwTwrzfEaWvBlOO1KhQIlblU8ywid0WEj7pwlWcw10aFBYWRxaH50qI
O4RinAQqhUjp0iQFfJz76r5qvi0DraaQM7QPbcs9aL+OTEua7zupw0SngQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLFQN/igRGtv+F8k8elgOk7VpMoMB8GA1UdIwQY
MBaAFNGReLtKYRTquYvgBHjMfxOwrSAqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85MzY5MTUtMjEzYS00MGQ5LTk3OGIt
N2Y3YmFiODNiZGEwLzEvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85MzY5MTUtMjEzYS00MGQ5LTk3OGItN2Y3YmFiODNiZGEw
LzEvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/NNJfG4
zc0xW9OsxmGMkwFAMAuqhQNqMpk7I7oJr9KKn2i1mctrb+8wZR3mKo+ug0FmDplF
zXhhOWN7S5xWCo5fCKRHNKqGHxryamxXxStWBUAzunVUbwKvx74ji7ejiUdJb71r
9g2aLt6c3v+avPwYOh1IcFX+0yz0EXXR91dmbI6ciTpcpTW8XUgg964Zd7onkNJW
ChigTrfeJSTI0J1uW8vZ2QZ9hSDyUOxtL9rMrCVgL48UOKd9KUgpLTXu7rW1i3kS
nAsHpJguqEZnT/MfWr7rDq7psMDvzptFMHZO5IhS2Wl8FSnB8tX30DIvlslEAz4/
EY5yjZi99QbCbw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:53:23 2026 by rpki-client