Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json)
Hash identifier: bVK3Sti4vbdZc+zz7t3kWy3ZJ6KelcNGwjSDqRP0/w0=
Subject key identifier: 6B:E8:42:F6:2E:55:D5:F2:1F:23:5E:0F:B6:E4:90:3F:D0:87:C2:97
Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Certificate issuer: /CN=6414775fdaeec7b0d5c927083988d555727c21b5
Certificate serial: 019D28F25843E864A76834AA6354389751C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
Manifest number: 0A34
Signing time: Thu 26 Mar 2026 07:01:03 +0000
Manifest this update: Thu 26 Mar 2026 07:01:03 +0000
Manifest next update: Fri 27 Mar 2026 07:01:03 +0000
Files and hashes: 1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: vAcVOdhFINtdrZ2WvQHTJs9C00XRlfRQnEqOLklkRpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:58:43:e8:64:a7:68:34:aa:63:54:38:97:51:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5
Validity
Not Before: Mar 26 07:01:03 2026 GMT
Not After : Mar 27 07:01:03 2026 GMT
Subject: CN=6be842f62e55d5f21f235e0fb6e4903fd087c297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:45:12:be:20:48:5b:de:cf:7f:50:60:ca:
9c:54:0b:58:65:05:34:1d:09:90:b7:01:c8:17:67:
29:52:da:3c:97:14:2a:25:f3:50:7a:ed:68:7d:ec:
38:9b:b2:6a:3a:d4:15:cb:e3:52:4f:c2:6c:c1:e6:
1c:c1:d0:37:0b:02:a4:c8:44:ae:be:f6:75:1b:cd:
4d:56:fa:bf:63:32:88:48:1f:55:52:f7:f8:52:74:
22:b7:2d:f5:2d:e4:ee:36:a6:2a:e1:ea:60:da:16:
1f:f9:90:89:49:ab:dc:a3:b7:6e:c8:f5:bb:45:47:
9c:3e:12:04:9c:f3:49:dc:d3:5c:66:b0:a3:a2:6d:
62:26:ff:2d:ad:bb:24:94:ba:b7:51:51:69:a3:9b:
4f:3d:10:44:fc:7c:cf:89:b4:d1:a1:8b:0e:2c:79:
1b:b5:9b:d2:68:f3:fe:f4:78:2f:dc:3e:12:bd:56:
33:37:fe:c1:78:98:4e:7c:47:9a:b7:ac:e8:ce:e3:
f9:16:3a:4d:52:66:0c:19:0f:5c:4f:ea:1f:af:46:
1c:4b:4b:5b:25:22:32:3d:07:93:c7:59:7f:df:10:
ae:4d:73:2f:82:e1:97:55:ef:33:38:61:64:9c:c9:
6d:16:4b:4a:2c:b9:a5:81:b5:09:e9:2f:ec:67:cd:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E8:42:F6:2E:55:D5:F2:1F:23:5E:0F:B6:E4:90:3F:D0:87:C2:97
X509v3 Authority Key Identifier:
keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ec:70:14:b2:00:e1:58:0a:90:6d:4f:e8:c3:29:f7:25:21:
60:aa:c1:96:fb:64:5c:78:6a:1b:10:fc:ca:1b:b0:1d:59:61:
2e:36:6c:16:60:bf:51:4d:3a:de:97:43:3a:22:67:be:1d:24:
a8:3d:6a:87:a0:1e:5d:4f:d0:53:fc:26:56:fd:2c:e6:02:16:
24:b8:7b:5a:7e:8f:ba:c7:78:85:7c:f1:86:8a:e8:a7:7a:72:
bd:b1:05:50:bf:81:d6:9f:8f:ab:d1:94:a3:a8:68:50:63:d2:
eb:ff:d1:ce:93:e6:14:25:14:37:72:db:4c:c3:e7:86:1a:dd:
78:05:fc:80:7b:a3:92:46:ad:a1:11:9d:c7:62:6e:93:d7:d1:
d8:81:ab:c5:b5:5f:32:e7:60:4c:74:3e:7d:38:20:8f:2c:55:
16:92:59:da:8d:90:ae:cb:aa:ae:49:12:ce:84:ef:3d:c4:e2:
7e:96:51:b7:ec:d1:33:76:20:63:8c:94:66:4d:f9:c2:78:db:
70:73:c7:79:10:31:86:d8:ec:0c:f5:6f:50:4b:a8:4f:a0:07:
4b:f3:29:83:78:26:cb:51:2a:2b:a4:21:ed:1b:26:fc:4e:97:
b7:f9:33:1f:e2:18:26:3a:e5:ab:be:b3:e3:6e:13:94:52:bd:
b7:af:77:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8lhD6GSnaDSqY1Q4l1HCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTQ3NzVmZGFlZWM3YjBkNWM5MjcwODM5ODhkNTU1NzI3
YzIxYjUwHhcNMjYwMzI2MDcwMTAzWhcNMjYwMzI3MDcwMTAzWjAzMTEwLwYDVQQD
Eyg2YmU4NDJmNjJlNTVkNWYyMWYyMzVlMGZiNmU0OTAzZmQwODdjMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBJFEr4gSFvez39QYMqcVAtYZQU0
HQmQtwHIF2cpUto8lxQqJfNQeu1ofew4m7JqOtQVy+NST8JsweYcwdA3CwKkyESu
vvZ1G81NVvq/YzKISB9VUvf4UnQity31LeTuNqYq4epg2hYf+ZCJSavco7duyPW7
RUecPhIEnPNJ3NNcZrCjom1iJv8trbsklLq3UVFpo5tPPRBE/HzPibTRoYsOLHkb
tZvSaPP+9Hgv3D4SvVYzN/7BeJhOfEeat6zozuP5FjpNUmYMGQ9cT+ofr0YcS0tb
JSIyPQeTx1l/3xCuTXMvguGXVe8zOGFknMltFktKLLmlgbUJ6S/sZ81ZswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvoQvYuVdXyHyNeD7bkkD/Qh8KXMB8GA1UdIwQY
MBaAFGQUd1/a7sew1cknCDmI1VVyfCG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hZjlmNDUtMzQ1Ni00OGEyLWFkNzUt
NDc1NzI3YTAzZGQzLzEvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hZjlmNDUtMzQ1Ni00OGEyLWFkNzUtNDc1NzI3YTAzZGQz
LzEvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuxwFLIA
4VgKkG1P6MMp9yUhYKrBlvtkXHhqGxD8yhuwHVlhLjZsFmC/UU063pdDOiJnvh0k
qD1qh6AeXU/QU/wmVv0s5gIWJLh7Wn6Pusd4hXzxhorop3pyvbEFUL+B1p+Pq9GU
o6hoUGPS6//RzpPmFCUUN3LbTMPnhhrdeAX8gHujkkatoRGdx2Juk9fR2IGrxbVf
MudgTHQ+fTggjyxVFpJZ2o2QrsuqrkkSzoTvPcTifpZRt+zRM3YgY4yUZk35wnjb
cHPHeRAxhtjsDPVvUEuoT6AHS/Mpg3gmy1EqK6Qh7Rsm/E6Xt/kzH+IYJjrlq76z
424TlFK9t693Lg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:13 2026 by rpki-client