Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
File: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json)
Hash identifier: KopWoTOoCjYR8ObSSXWZ/kYfnsNLfenxyxzYD9/8/QY=
Subject key identifier: 35:4D:A6:09:B3:A2:8E:22:39:00:43:59:AA:FB:B6:E8:C8:0F:F9:DA
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Certificate issuer: /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial: 019D29CE35AAA3E3C7C27F2181408D17AC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
Manifest number: 10A8
Signing time: Thu 26 Mar 2026 11:01:13 +0000
Manifest this update: Thu 26 Mar 2026 11:01:13 +0000
Manifest next update: Fri 27 Mar 2026 11:01:13 +0000
Files and hashes: 1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: EDyjbID6zgwrNGJGGTnivaa/0Qe/suyFzS1n15UgGsU=)
2: 3KARvcQJLBK_AN72q-v-VXBedTc.roa (hash: QFK7Ue4or8LMr7VexDK6GWjCaMT28dD7LoXQN+qlc8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:35:aa:a3:e3:c7:c2:7f:21:81:40:8d:17:ac:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
Validity
Not Before: Mar 26 11:01:13 2026 GMT
Not After : Mar 27 11:01:13 2026 GMT
Subject: CN=354da609b3a28e2239004359aafbb6e8c80ff9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:73:e2:e9:65:2b:e7:34:f0:35:73:87:f7:
2b:d6:7a:4d:70:98:b7:b5:dd:74:a5:30:9f:04:cf:
c7:3e:8d:e7:a7:8e:69:e9:2a:df:a0:61:a5:53:08:
c9:42:2b:4a:6e:dc:de:af:95:ce:d8:d6:78:e5:d0:
fb:46:29:e2:fb:e3:ba:77:93:b1:38:66:4a:bc:e8:
93:ad:a2:4e:ce:07:a3:f1:87:ed:51:9f:4a:b4:6a:
ba:9d:f1:3e:89:43:0a:b8:6d:30:25:12:60:0c:1b:
f7:c2:13:1a:e0:b6:9e:a0:1f:7b:70:92:b5:d7:6f:
36:c3:1b:1c:4b:8b:31:0b:d0:f8:f3:19:2e:52:c6:
05:fd:53:c2:6f:2a:14:70:e7:a4:62:d8:ee:4f:76:
34:64:a4:8c:f8:a8:eb:4f:95:f0:36:29:69:c2:07:
f6:0f:72:c0:aa:9d:4f:cb:a0:56:62:aa:d5:4b:06:
4c:fa:eb:9b:2e:67:d4:3b:31:88:5a:7b:71:2d:19:
95:51:e1:bc:69:67:8d:25:e4:7b:93:7d:47:2f:3c:
37:b6:dc:b6:38:0d:e3:01:cc:ac:04:f4:d0:82:56:
cf:13:ee:7d:d9:39:59:97:d5:6c:03:d0:83:9c:ef:
61:32:94:05:1e:db:c3:4a:2e:cd:ae:9d:d4:df:1b:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4D:A6:09:B3:A2:8E:22:39:00:43:59:AA:FB:B6:E8:C8:0F:F9:DA
X509v3 Authority Key Identifier:
keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:33:11:57:87:c3:60:70:fd:19:99:b0:60:7a:b8:0c:4f:22:
a9:54:74:02:9c:82:9e:fa:39:80:e1:5e:d7:43:b4:ca:d7:9d:
2b:c9:37:d4:9b:16:e0:c6:e1:86:4e:7f:c7:4b:a4:24:5b:86:
4a:8e:a9:6d:56:b0:81:4e:5a:c8:69:15:ec:d7:7b:b2:52:73:
82:7a:4d:03:39:e5:c1:f8:33:a0:4d:83:70:34:b7:53:bf:23:
29:01:5c:c3:81:47:54:a6:43:11:fd:b3:de:87:69:67:87:25:
63:cb:20:ef:49:1a:05:93:9a:00:08:b1:41:c7:39:70:aa:83:
50:b4:0a:45:e1:f7:d5:bb:21:f5:ba:60:73:3d:91:28:ee:24:
c5:a0:0a:9e:a5:e6:de:a8:e9:1a:ac:d1:9f:21:99:52:56:f2:
d0:44:28:c7:4a:40:16:25:34:7a:9a:d1:51:5f:84:ac:49:cf:
19:bb:20:14:d9:f3:2a:81:3c:a1:6b:7c:c3:9e:5b:5f:5c:e1:
eb:77:06:9a:fd:71:bb:22:3c:c1:c9:4d:3d:67:ba:d3:37:ec:
32:5c:5d:ed:6a:62:aa:c5:62:15:f0:82:e1:54:02:e0:5e:0a:
25:d0:16:09:2c:87:42:97:4f:55:f4:f5:e0:0b:b9:f9:4b:f8:
98:a2:8b:72
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0pzjWqo+PHwn8hgUCNF6wIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OTUxYmE1NjMyOTMyM2I0YzYwZjYyMGQ2YTczOTFlNzA3
YjU1NTYwHhcNMjYwMzI2MTEwMTEzWhcNMjYwMzI3MTEwMTEzWjAzMTEwLwYDVQQD
EygzNTRkYTYwOWIzYTI4ZTIyMzkwMDQzNTlhYWZiYjZlOGM4MGZmOWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNFz4ullK+c08DVzh/cr1npNcJi3
td10pTCfBM/HPo3np45p6SrfoGGlUwjJQitKbtzer5XO2NZ45dD7Rini++O6d5Ox
OGZKvOiTraJOzgej8YftUZ9KtGq6nfE+iUMKuG0wJRJgDBv3whMa4LaeoB97cJK1
1282wxscS4sxC9D48xkuUsYF/VPCbyoUcOekYtjuT3Y0ZKSM+KjrT5XwNilpwgf2
D3LAqp1Py6BWYqrVSwZM+uubLmfUOzGIWntxLRmVUeG8aWeNJeR7k31HLzw3tty2
OA3jAcysBPTQglbPE+592TlZl9VsA9CDnO9hMpQFHtvDSi7Nrp3U3xtYZwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDVNpgmzoo4iOQBDWar7tujID/naMB8GA1UdIwQY
MBaAFPmVG6VjKTI7TGD2INanOR5we1VWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1aVWJwV01wTWp0TVlQWWcxcWM1SG5CN1ZWWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvOGY1Y2JkLWY1MzktNGZmZi1iNDJm
LTQ3NDVkN2NkOTNmMS8xLzEtWlVicFdNcE1qdE1ZUFlnMXFjNUhuQjdWVlkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VkLzhmNWNiZC1mNTM5LTRmZmYtYjQyZi00NzQ1ZDdjZDkz
ZjEvMS8xLVpVYnBXTXBNanRNWVBZZzFxYzVIbkI3VlZZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjMR
V4fDYHD9GZmwYHq4DE8iqVR0ApyCnvo5gOFe10O0ytedK8k31JsW4Mbhhk5/x0uk
JFuGSo6pbVawgU5ayGkV7Nd7slJzgnpNAznlwfgzoE2DcDS3U78jKQFcw4FHVKZD
Ef2z3odpZ4clY8sg70kaBZOaAAixQcc5cKqDULQKReH31bsh9bpgcz2RKO4kxaAK
nqXm3qjpGqzRnyGZUlby0EQox0pAFiU0eprRUV+ErEnPGbsgFNnzKoE8oWt8w55b
X1zh63cGmv1xuyI8wclNPWe60zfsMlxd7WpiqsViFfCC4VQC4F4KJdAWCSyHQpdP
VfT14Au5+Uv4mKKLcg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:19:12 2026 by rpki-client