Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: IJpt3Tl8hPClTbkLNxu3QMDf3u8nUa/n+TzQX4FCiiI=
Subject key identifier: 29:30:B4:FB:89:96:17:10:4F:9B:C1:16:C4:61:07:CA:86:6D:7B:E8
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 019D284E6D692E5A47C9ED1640CB9F58F7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0EF6
Signing time: Thu 26 Mar 2026 04:02:01 +0000
Manifest this update: Thu 26 Mar 2026 04:02:01 +0000
Manifest next update: Fri 27 Mar 2026 04:02:01 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: RPv+I2lJ0XoXBnRCMgjLKOmjMARonZ7Ep/UPZtHev7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:6d:69:2e:5a:47:c9:ed:16:40:cb:9f:58:f7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: Mar 26 04:02:01 2026 GMT
Not After : Mar 27 04:02:01 2026 GMT
Subject: CN=2930b4fb899617104f9bc116c46107ca866d7be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:32:64:b6:a4:cd:93:b2:b8:a5:ca:0b:db:
18:76:ff:8b:90:51:f3:a6:a0:56:7b:52:75:3e:ba:
c4:33:93:c9:0d:1e:60:62:fb:1c:36:a1:09:a0:34:
4a:43:e6:31:af:d8:a3:8b:28:49:ed:3f:81:06:f0:
76:ed:a9:2d:5c:00:1f:18:ee:4a:1a:c3:c1:e0:bb:
ab:20:06:f5:1d:98:89:98:a2:e8:fd:4b:de:5c:24:
69:d7:3b:b5:ee:ec:d1:2b:1a:0e:27:99:18:ea:ef:
37:9a:fa:82:3c:8a:de:dd:4e:bc:a2:fa:f8:a3:bf:
ca:35:3d:78:10:13:7f:a3:cb:c9:e9:2a:90:3d:e2:
3f:c1:24:7d:37:dc:1f:63:f0:64:5d:de:48:9e:6b:
b4:3a:0e:68:83:e0:9c:33:62:c8:af:93:95:e3:2b:
05:aa:97:86:ea:52:99:eb:90:18:ba:00:81:a3:3d:
84:ef:4c:cc:45:1b:12:dc:2b:c0:39:5a:95:60:e6:
5c:8f:2a:54:76:a5:5c:71:a3:b2:b2:32:ff:9f:a0:
59:8a:77:6a:fb:77:5d:54:a0:13:6f:6a:8c:0b:2b:
88:a0:ef:e7:fa:09:df:a1:19:cd:7b:3e:9a:f9:39:
51:6f:f3:3b:ac:63:15:c7:01:97:b6:71:9c:bf:45:
21:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:30:B4:FB:89:96:17:10:4F:9B:C1:16:C4:61:07:CA:86:6D:7B:E8
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:05:62:eb:7d:62:b8:cb:65:bc:5b:fc:3b:c1:18:01:65:9c:
c3:39:67:37:47:99:41:28:7a:d4:87:b6:07:0c:e9:3c:c6:1c:
ea:d1:e1:07:b9:5c:a4:31:3e:d2:04:ce:ac:c2:6c:03:c8:09:
0a:e8:da:16:e9:b4:ed:4d:6e:8c:b4:5c:ae:b5:1b:1e:30:b4:
a2:11:b6:8f:ad:d4:6f:65:40:8e:d6:b0:97:4e:8e:e5:45:b9:
da:67:d0:66:1b:30:62:c6:7d:19:71:3b:56:f1:31:72:b7:60:
39:e9:4c:a9:51:ff:2a:71:e0:47:01:35:c0:52:bb:d3:03:b9:
19:6c:7f:14:a1:56:de:e9:4a:e3:73:f9:bb:1b:24:08:48:fd:
07:df:f4:10:99:df:cc:18:f8:09:5d:8b:a7:f7:d7:2c:b9:c8:
5a:d1:3a:97:44:03:06:74:6e:0d:92:77:25:70:66:ea:20:0d:
5b:2b:aa:41:5c:08:c3:c6:6d:77:42:ed:ab:f3:a6:cd:51:ff:
01:93:d2:5d:a0:be:58:c2:e4:fa:5d:8f:ce:f8:88:9b:34:61:
af:8f:88:41:7e:6e:f0:98:5f:13:85:ed:33:27:e2:aa:6c:6e:
33:ac:de:38:a0:97:e0:d7:d8:24:b2:36:46:76:93:eb:10:60:
0f:19:a1:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTm1pLlpHye0WQMufWPeoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MjE0NzBkNTkyMjI5OGVkMDQ2ODVlMWRmMGVmZGZkZDJh
NjY2MDcwHhcNMjYwMzI2MDQwMjAxWhcNMjYwMzI3MDQwMjAxWjAzMTEwLwYDVQQD
EygyOTMwYjRmYjg5OTYxNzEwNGY5YmMxMTZjNDYxMDdjYTg2NmQ3YmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyScyZLakzZOyuKXKC9sYdv+LkFHz
pqBWe1J1PrrEM5PJDR5gYvscNqEJoDRKQ+Yxr9ijiyhJ7T+BBvB27aktXAAfGO5K
GsPB4LurIAb1HZiJmKLo/UveXCRp1zu17uzRKxoOJ5kY6u83mvqCPIre3U68ovr4
o7/KNT14EBN/o8vJ6SqQPeI/wSR9N9wfY/BkXd5Inmu0Og5og+CcM2LIr5OV4ysF
qpeG6lKZ65AYugCBoz2E70zMRRsS3CvAOVqVYOZcjypUdqVccaOysjL/n6BZindq
+3ddVKATb2qMCyuIoO/n+gnfoRnNez6a+TlRb/M7rGMVxwGXtnGcv0UhXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkwtPuJlhcQT5vBFsRhB8qGbXvoMB8GA1UdIwQY
MBaAFGQhRw1ZIimO0EaF4d8O/f3SpmYHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkNGSERWa2lLWTdRUm9YaDN3NzlfZEttWmdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zYTUwY2QtM2U2YS00ZmQ0LTkzOTct
NThkNTdjZDM2MGE5LzEvWkNGSERWa2lLWTdRUm9YaDN3NzlfZEttWmdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zYTUwY2QtM2U2YS00ZmQ0LTkzOTctNThkNTdjZDM2MGE5
LzEvWkNGSERWa2lLWTdRUm9YaDN3NzlfZEttWmdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgVi631i
uMtlvFv8O8EYAWWcwzlnN0eZQSh61Ie2BwzpPMYc6tHhB7lcpDE+0gTOrMJsA8gJ
CujaFum07U1ujLRcrrUbHjC0ohG2j63Ub2VAjtawl06O5UW52mfQZhswYsZ9GXE7
VvExcrdgOelMqVH/KnHgRwE1wFK70wO5GWx/FKFW3ulK43P5uxskCEj9B9/0EJnf
zBj4CV2Lp/fXLLnIWtE6l0QDBnRuDZJ3JXBm6iANWyuqQVwIw8Ztd0Ltq/OmzVH/
AZPSXaC+WMLk+l2PzviImzRhr4+IQX5u8JhfE4XtMyfiqmxuM6zeOKCX4NfYJLI2
RnaT6xBgDxmh4g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:29 2026 by rpki-client