Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: tJkLJQMYWtptJa1vQ66GAL0ewXbga9og4euhtwx2pXw=
Subject key identifier: AA:1D:62:4B:CC:2E:1C:5E:12:6C:FA:D7:17:13:30:16:D4:E2:CB:81
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 019D27E04D3CD589C8D6ECADBAAD01FE6DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0FC9
Signing time: Thu 26 Mar 2026 02:01:44 +0000
Manifest this update: Thu 26 Mar 2026 02:01:44 +0000
Manifest next update: Fri 27 Mar 2026 02:01:44 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: 502UnTC+jC6aMBy3IRqb0UE/ZzenADF+NMMOg0g6p6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:4d:3c:d5:89:c8:d6:ec:ad:ba:ad:01:fe:6d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Mar 26 02:01:44 2026 GMT
Not After : Mar 27 02:01:44 2026 GMT
Subject: CN=aa1d624bcc2e1c5e126cfad717133016d4e2cb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:39:97:5b:dd:ac:df:3c:e2:90:2a:9b:3a:
f4:37:25:d6:b6:73:97:e4:d4:2c:e1:06:cc:98:a1:
cc:64:8f:3b:55:dd:4c:08:f4:89:d9:be:29:33:cf:
b5:b5:89:09:d6:d6:5d:f7:24:e9:24:2d:7c:de:34:
b4:33:c6:11:c9:a2:b0:25:86:cc:fa:8c:ea:22:ee:
dc:c0:d8:03:f3:b6:e3:bc:46:8e:6e:cc:b2:0d:8a:
45:32:dc:7c:75:78:95:7e:44:0f:01:0b:08:05:0d:
5c:e0:83:b6:47:eb:2e:57:7e:c7:ed:99:5e:71:06:
28:f9:af:2c:9d:ba:26:98:1b:e6:f5:93:7d:a3:77:
49:f7:c8:9b:0c:25:76:19:5e:5d:64:ef:b9:dd:59:
20:9c:1a:79:05:12:0e:4d:ec:4f:ba:00:11:01:fd:
44:ff:28:e8:48:00:30:e8:3b:62:5b:c0:a0:14:b8:
ab:45:62:09:4c:63:27:c9:ac:a0:e5:26:9b:81:24:
1c:a7:b8:3a:aa:0e:72:ad:29:3d:38:48:65:23:74:
e1:b9:b6:fa:89:e0:20:e0:5c:84:b0:c7:4a:84:43:
9a:c4:e1:2a:7d:0c:f6:40:f2:6e:59:7c:d9:79:5b:
4c:ae:72:85:54:f8:21:28:8e:5e:60:13:ab:91:8f:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1D:62:4B:CC:2E:1C:5E:12:6C:FA:D7:17:13:30:16:D4:E2:CB:81
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:97:78:99:d1:ab:a6:15:c7:5e:1f:a3:16:1e:9a:bf:5c:ef:
55:03:2c:a6:78:b8:25:79:05:7e:ca:1c:ac:31:a9:fb:73:d4:
3e:a6:66:64:b0:c0:f2:2e:4c:37:82:2a:b8:bf:ee:ac:e0:56:
95:6b:fb:67:e8:31:ca:b7:fd:18:e9:2c:46:06:13:22:d1:38:
44:db:a5:1a:2d:fc:d6:80:fd:89:8a:e3:c6:ed:43:95:4a:65:
cb:6f:da:f0:52:72:08:2d:eb:ee:de:6d:24:e7:d1:e1:cf:98:
c7:15:32:87:76:ca:14:81:b6:12:9c:da:fa:95:15:4b:43:dc:
5c:42:23:c8:96:b7:c2:fd:57:83:33:20:a2:b4:50:8a:69:32:
f4:79:6d:95:ee:9d:33:94:d0:bb:1c:d0:83:cf:e1:7c:3c:2e:
d6:29:20:d5:c2:21:c9:36:6d:fe:ab:dd:de:be:6c:17:6d:8d:
92:2b:7f:d3:2d:bb:23:8f:9c:cf:0f:c8:9f:41:4b:6f:24:f2:
8c:78:c5:51:93:1c:66:61:5d:41:90:3d:85:83:2b:49:85:74:
4c:0a:d3:14:e9:8c:3b:25:75:09:3e:ef:8e:7f:54:d6:61:4c:
a4:85:6e:5e:25:4e:14:2e:fc:88:74:ff:84:66:e7:4a:97:8a:
77:99:04:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4E081YnI1uytuq0B/m2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjVkZGM0OWI3NWVhODRkZjQ1YWUxMTRjNDMyMWQ0NmQ1
YWNkNGEwHhcNMjYwMzI2MDIwMTQ0WhcNMjYwMzI3MDIwMTQ0WjAzMTEwLwYDVQQD
EyhhYTFkNjI0YmNjMmUxYzVlMTI2Y2ZhZDcxNzEzMzAxNmQ0ZTJjYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1o5l1vdrN884pAqmzr0NyXWtnOX
5NQs4QbMmKHMZI87Vd1MCPSJ2b4pM8+1tYkJ1tZd9yTpJC183jS0M8YRyaKwJYbM
+ozqIu7cwNgD87bjvEaObsyyDYpFMtx8dXiVfkQPAQsIBQ1c4IO2R+suV37H7Zle
cQYo+a8snbommBvm9ZN9o3dJ98ibDCV2GV5dZO+53VkgnBp5BRIOTexPugARAf1E
/yjoSAAw6DtiW8CgFLirRWIJTGMnyayg5SabgSQcp7g6qg5yrSk9OEhlI3Thubb6
ieAg4FyEsMdKhEOaxOEqfQz2QPJuWXzZeVtMrnKFVPghKI5eYBOrkY/gwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKodYkvMLhxeEmz61xcTMBbU4suBMB8GA1UdIwQY
MBaAFM/13cSbdeqE30WuEUxDIdRtWs1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYt
MTc3OThiMmRhYWM0LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYtMTc3OThiMmRhYWM0
LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJd4mdGr
phXHXh+jFh6av1zvVQMspni4JXkFfsocrDGp+3PUPqZmZLDA8i5MN4IquL/urOBW
lWv7Z+gxyrf9GOksRgYTItE4RNulGi381oD9iYrjxu1DlUply2/a8FJyCC3r7t5t
JOfR4c+YxxUyh3bKFIG2Epza+pUVS0PcXEIjyJa3wv1XgzMgorRQimky9Hltle6d
M5TQuxzQg8/hfDwu1ikg1cIhyTZt/qvd3r5sF22Nkit/0y27I4+czw/In0FLbyTy
jHjFUZMcZmFdQZA9hYMrSYV0TArTFOmMOyV1CT7vjn9U1mFMpIVuXiVOFC78iHT/
hGbnSpeKd5kEFQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:45 2026 by rpki-client