Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
File: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft (raw, json)
Hash identifier: K6wt2isxNAvuO8UU1hlF+iPTmfA4CgIBgru4FtQJMBs=
Subject key identifier: C5:F5:03:14:94:CE:11:34:E0:CA:8F:3D:13:FC:65:92:8A:CA:E6:AA
Authority key identifier: CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C
Certificate issuer: /CN=cdbc431b1c9886dc2b21008dccfde18db735371c
Certificate serial: 019D326302494F4A948BEFC328E32466ACDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
Manifest number: 0606
Signing time: Sat 28 Mar 2026 03:00:42 +0000
Manifest this update: Sat 28 Mar 2026 03:00:42 +0000
Manifest next update: Sun 29 Mar 2026 03:00:42 +0000
Files and hashes: 1: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl (hash: aDJly2CRwqbchyuxPe06KI8tZ5blD20BBmO726JrDG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:02:49:4f:4a:94:8b:ef:c3:28:e3:24:66:ac:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbc431b1c9886dc2b21008dccfde18db735371c
Validity
Not Before: Mar 28 03:00:42 2026 GMT
Not After : Mar 29 03:00:42 2026 GMT
Subject: CN=c5f5031494ce1134e0ca8f3d13fc65928acae6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:9d:ff:2c:05:37:ec:fa:8f:38:80:fd:65:
c1:93:c0:4d:d5:ff:3e:32:2b:1b:46:e7:3e:9d:21:
d9:53:4c:eb:d2:85:f6:ac:64:34:d7:65:ed:51:77:
7c:62:0d:2d:e0:68:f0:df:ab:ca:12:a6:33:be:f1:
27:de:c9:09:04:c2:8a:f3:8c:31:fb:0e:7b:a1:a0:
08:91:96:17:c8:c8:74:bd:cc:9f:b3:9f:42:35:30:
b6:c8:93:a8:55:e9:71:ec:c2:5f:24:40:7b:3c:97:
50:3b:9b:aa:f5:20:15:27:fe:a7:86:16:24:24:99:
a8:c9:b4:5b:2a:a7:34:46:8e:a3:1d:ab:c3:98:51:
74:10:91:4d:a3:a2:25:dc:cb:8f:1a:c1:4e:ba:c2:
00:4a:5c:1a:7c:e0:37:9f:22:8f:4d:76:c3:b0:7d:
b9:01:a5:de:3a:bd:d1:fd:57:66:aa:4e:c4:28:ef:
74:6e:4e:bf:36:b2:8a:01:0e:c9:4a:ab:be:de:82:
5b:53:fb:92:fc:6e:0d:4b:ae:be:fd:f7:7d:7a:39:
96:0c:74:b3:43:ae:0d:e3:fe:14:91:4d:78:b6:ec:
e6:7b:96:0a:5f:2d:42:67:3e:30:45:18:59:04:f2:
76:e0:22:2e:a1:46:10:d6:99:55:db:35:36:cb:8f:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F5:03:14:94:CE:11:34:E0:CA:8F:3D:13:FC:65:92:8A:CA:E6:AA
X509v3 Authority Key Identifier:
keyid:CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d8:47:4c:46:80:a4:71:f5:59:d9:1e:8a:59:eb:3b:4b:5b:
17:51:a7:e7:3e:33:f8:ef:ce:82:fb:fd:6d:a1:cc:20:40:c1:
1a:cc:50:c7:c0:9d:47:31:34:02:9d:27:4e:c4:0e:a2:d5:11:
eb:70:54:c1:d1:fd:17:f2:87:36:2c:17:ab:1b:1e:e7:05:e8:
d8:72:da:ff:cb:b0:be:44:cf:7a:f1:fa:62:8d:9b:dc:5d:d6:
d2:73:2c:9f:02:8b:f9:ce:22:09:ea:02:66:45:c1:bf:67:c4:
70:db:f4:c2:00:10:a1:c2:f9:b1:8f:74:14:19:37:28:a5:41:
b7:d1:37:ba:87:be:18:91:04:5c:d3:10:a7:c3:93:b3:7c:0e:
2a:50:09:ce:aa:36:4c:3d:cf:34:8a:c0:90:c7:8a:43:1e:e8:
ac:c3:71:c0:60:42:fc:18:a9:df:97:2e:e5:9a:5f:3c:5f:96:
03:15:42:fd:81:44:cf:46:c7:b6:09:e8:48:54:40:19:88:9b:
d1:06:64:b9:3e:6e:ed:8b:bc:7c:13:8e:25:77:18:9e:1c:be:
8b:84:70:ed:17:66:b2:6c:65:23:03:17:51:07:78:35:ff:a1:
9d:b8:6d:38:66:cc:a5:08:fc:cb:9d:57:45:93:e3:a6:3f:73:
47:f6:bc:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yYwJJT0qUi+/DKOMkZqzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmM0MzFiMWM5ODg2ZGMyYjIxMDA4ZGNjZmRlMThkYjcz
NTM3MWMwHhcNMjYwMzI4MDMwMDQyWhcNMjYwMzI5MDMwMDQyWjAzMTEwLwYDVQQD
EyhjNWY1MDMxNDk0Y2UxMTM0ZTBjYThmM2QxM2ZjNjU5MjhhY2FlNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu2d/ywFN+z6jziA/WXBk8BN1f8+
MisbRuc+nSHZU0zr0oX2rGQ012XtUXd8Yg0t4Gjw36vKEqYzvvEn3skJBMKK84wx
+w57oaAIkZYXyMh0vcyfs59CNTC2yJOoVelx7MJfJEB7PJdQO5uq9SAVJ/6nhhYk
JJmoybRbKqc0Ro6jHavDmFF0EJFNo6Il3MuPGsFOusIASlwafOA3nyKPTXbDsH25
AaXeOr3R/Vdmqk7EKO90bk6/NrKKAQ7JSqu+3oJbU/uS/G4NS66+/fd9ejmWDHSz
Q64N4/4UkU14tuzme5YKXy1CZz4wRRhZBPJ24CIuoUYQ1plV2zU2y49eoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMX1AxSUzhE04MqPPRP8ZZKKyuaqMB8GA1UdIwQY
MBaAFM28QxscmIbcKyEAjcz94Y23NTccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJ4REd4eVlodHdySVFDTnpQM2hqYmMxTnh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zNjg5YmUtODE1Mi00YmFkLWI5OTYt
M2NkYTcxMzczZGM5LzEvemJ4REd4eVlodHdySVFDTnpQM2hqYmMxTnh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zNjg5YmUtODE1Mi00YmFkLWI5OTYtM2NkYTcxMzczZGM5
LzEvemJ4REd4eVlodHdySVFDTnpQM2hqYmMxTnh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANhHTEaA
pHH1WdkeilnrO0tbF1Gn5z4z+O/Ogvv9baHMIEDBGsxQx8CdRzE0Ap0nTsQOotUR
63BUwdH9F/KHNiwXqxse5wXo2HLa/8uwvkTPevH6Yo2b3F3W0nMsnwKL+c4iCeoC
ZkXBv2fEcNv0wgAQocL5sY90FBk3KKVBt9E3uoe+GJEEXNMQp8OTs3wOKlAJzqo2
TD3PNIrAkMeKQx7orMNxwGBC/Bip35cu5ZpfPF+WAxVC/YFEz0bHtgnoSFRAGYib
0QZkuT5u7Yu8fBOOJXcYnhy+i4Rw7RdmsmxlIwMXUQd4Nf+hnbhtOGbMpQj8y51X
RZPjpj9zR/a80A==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:03 2026 by rpki-client