Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
File: Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft (raw, json)
Hash identifier: V0c75cLsWPtrkbyVjUVN0RvGeonLdNYT3J4INn+Vzro=
Subject key identifier: 83:8C:B1:38:D5:5D:73:3C:1C:78:40:8D:56:C3:0B:F6:DC:F8:A8:07
Authority key identifier: 67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
Certificate issuer: /CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Certificate serial: 019D333EE5DAE42CF7084A19294C2C31F5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
Manifest number: 13CE
Signing time: Sat 28 Mar 2026 07:00:53 +0000
Manifest this update: Sat 28 Mar 2026 07:00:53 +0000
Manifest next update: Sun 29 Mar 2026 07:00:53 +0000
Files and hashes: 1: Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl (hash: YtlyUU96IWTr+TvD8z+XbrdbvBl0pyPNYoHV57Mi0/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:e5:da:e4:2c:f7:08:4a:19:29:4c:2c:31:f5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Validity
Not Before: Mar 28 07:00:53 2026 GMT
Not After : Mar 29 07:00:53 2026 GMT
Subject: CN=838cb138d55d733c1c78408d56c30bf6dcf8a807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ff:0f:3d:48:cf:90:57:00:d1:43:6d:19:d4:
fa:9c:48:9b:a7:39:ed:e7:42:33:e7:a2:37:77:a4:
21:2b:c6:10:fc:cb:eb:68:1f:05:5f:a5:85:08:0f:
8f:c2:89:5a:ef:c7:41:3a:60:8d:ce:d7:c8:17:1c:
02:8f:9c:5b:55:02:2d:1e:9b:f3:8b:ac:c9:6c:ad:
fb:ec:b0:40:ef:06:62:69:75:db:25:69:8d:aa:a2:
6b:29:4c:18:62:63:1b:16:3c:29:a3:66:1b:83:77:
98:47:ee:24:2e:15:86:ab:1c:75:75:19:71:59:e5:
cc:f6:ce:f3:bf:59:4d:57:cf:17:28:b5:1a:37:c6:
d2:99:5b:53:11:f8:4d:79:13:30:75:20:f8:de:85:
e8:5d:9c:b5:1e:74:02:af:df:d8:83:6c:d1:7d:15:
1f:f1:ad:29:dd:97:0a:60:a5:8d:0a:14:09:76:43:
d6:90:e2:fb:10:78:90:cb:30:6c:ea:ad:e2:bf:45:
5d:a1:5f:86:cf:88:d4:fa:1d:28:e8:61:02:98:73:
5f:a7:c1:b0:23:d7:5d:e2:c6:9f:15:2d:28:af:e6:
7f:da:fe:8d:d7:6f:08:20:6f:c8:6c:1a:8d:ff:00:
ea:25:7d:d0:19:9e:06:d2:6f:00:45:89:1c:71:4f:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8C:B1:38:D5:5D:73:3C:1C:78:40:8D:56:C3:0B:F6:DC:F8:A8:07
X509v3 Authority Key Identifier:
keyid:67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8a:1a:d8:a4:33:1e:66:ab:12:e2:5a:f3:5c:e9:6c:b8:5e:
ce:6f:f1:7f:80:4d:36:44:d9:2f:0a:a4:15:1e:90:67:f4:5e:
bc:36:f9:63:53:5b:d8:50:c1:9b:ae:38:8b:1e:fb:f1:74:92:
70:23:ae:3c:2f:d9:6c:73:ab:8e:e7:79:45:c6:2b:99:ff:1c:
eb:c4:3e:f6:c4:e6:bc:82:da:50:bc:ca:f3:71:11:14:c6:ed:
53:35:ca:7c:90:11:70:5d:37:8e:25:9b:fa:f6:7e:3e:05:e2:
92:2a:29:20:0a:23:5a:a8:3a:93:0f:78:fb:45:ab:39:d8:ad:
5d:bd:45:8a:5b:45:e4:91:ea:4f:74:0a:c5:9a:ac:ec:f1:0f:
94:f2:d4:67:3e:6d:bc:96:27:62:e3:10:78:72:80:f0:25:c4:
27:55:e7:dd:00:b1:9f:92:f5:37:86:46:a6:e9:3a:6b:4e:e4:
ce:3d:22:bd:50:b7:18:7f:78:b6:12:da:6a:12:f9:2c:26:ea:
4e:4e:1a:be:09:b5:9e:fe:74:b7:45:7c:54:26:4a:af:24:2b:
94:8b:31:5b:69:27:b1:72:cf:70:ba:4f:4b:4b:76:12:5f:6a:
d5:1b:50:16:f7:46:ed:88:0d:16:ed:75:3d:d8:ee:ea:09:44:
1c:a8:df:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPuXa5Cz3CEoZKUwsMfXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NzBjOWI5NDA1NzQ4ZDI2NTQ4ZmQ1ZmNhN2E2NGEwMzhk
NTgxMmQwHhcNMjYwMzI4MDcwMDUzWhcNMjYwMzI5MDcwMDUzWjAzMTEwLwYDVQQD
Eyg4MzhjYjEzOGQ1NWQ3MzNjMWM3ODQwOGQ1NmMzMGJmNmRjZjhhODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8P8PPUjPkFcA0UNtGdT6nEibpznt
50Iz56I3d6QhK8YQ/MvraB8FX6WFCA+Pwola78dBOmCNztfIFxwCj5xbVQItHpvz
i6zJbK377LBA7wZiaXXbJWmNqqJrKUwYYmMbFjwpo2Ybg3eYR+4kLhWGqxx1dRlx
WeXM9s7zv1lNV88XKLUaN8bSmVtTEfhNeRMwdSD43oXoXZy1HnQCr9/Yg2zRfRUf
8a0p3ZcKYKWNChQJdkPWkOL7EHiQyzBs6q3iv0VdoV+Gz4jU+h0o6GECmHNfp8Gw
I9dd4safFS0or+Z/2v6N128IIG/IbBqN/wDqJX3QGZ4G0m8ARYkccU8cywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOMsTjVXXM8HHhAjVbDC/bc+KgHMB8GA1UdIwQY
MBaAFGdwyblAV0jSZUj9X8p6ZKA41YEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTU2YzUtYjI4Yy00M2M5LWE0NjUt
MTQ4ODc4NzZhYTBlLzEvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85YTU2YzUtYjI4Yy00M2M5LWE0NjUtMTQ4ODc4NzZhYTBl
LzEvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4oa2KQz
HmarEuJa81zpbLhezm/xf4BNNkTZLwqkFR6QZ/RevDb5Y1Nb2FDBm644ix778XSS
cCOuPC/ZbHOrjud5RcYrmf8c68Q+9sTmvILaULzK83ERFMbtUzXKfJARcF03jiWb
+vZ+PgXikiopIAojWqg6kw94+0WrOditXb1FiltF5JHqT3QKxZqs7PEPlPLUZz5t
vJYnYuMQeHKA8CXEJ1Xn3QCxn5L1N4ZGpuk6a07kzj0ivVC3GH94thLaahL5LCbq
Tk4avgm1nv50t0V8VCZKryQrlIsxW2knsXLPcLpPS0t2El9q1RtQFvdG7YgNFu11
Pdju6glEHKjfwA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:13 2026 by rpki-client