Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
File: zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json)
Hash identifier: 01kmBwjKdP06/1JUZ5sca5v9v6f/kaFs+2JV+wSyEDA=
Subject key identifier: FF:85:83:9B:C7:22:82:26:69:DD:66:A9:88:69:58:4A:2D:32:59:11
Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
Certificate issuer: /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Certificate serial: 019D333E77B1AEB8A008B5747CA8A92DD7CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
Manifest number: 162A
Signing time: Sat 28 Mar 2026 07:00:24 +0000
Manifest this update: Sat 28 Mar 2026 07:00:24 +0000
Manifest next update: Sun 29 Mar 2026 07:00:24 +0000
Files and hashes: 1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: 7zITIkgW688Xx/NGsK8INOSm4cQ00avPCbqMFjfcEpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:77:b1:ae:b8:a0:08:b5:74:7c:a8:a9:2d:d7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f
Validity
Not Before: Mar 28 07:00:24 2026 GMT
Not After : Mar 29 07:00:24 2026 GMT
Subject: CN=ff85839bc722822669dd66a98869584a2d325911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fa:9f:3b:55:1c:5d:f6:b6:f9:4e:a9:3b:01:
0f:1c:34:76:3c:83:e9:ba:e0:64:45:eb:e0:7e:aa:
0e:03:0a:b6:72:40:7b:1e:bd:4c:0b:99:2d:a2:29:
f2:f8:cb:3d:10:98:c5:dc:12:de:87:46:e8:b0:a4:
31:a6:e4:6b:ee:c7:5b:6d:5b:b4:01:32:19:c8:28:
af:86:56:01:cb:63:3b:39:2d:11:1a:fa:04:55:2c:
4f:7c:ef:f2:e8:58:11:be:4f:65:f8:80:c3:84:92:
4d:a5:81:b2:8c:82:33:7f:c0:72:d4:27:86:cf:5a:
30:3c:cc:8a:5e:aa:69:89:2e:b2:b1:73:81:fc:b6:
8c:40:07:84:e0:aa:38:38:26:b9:39:0c:33:77:d9:
31:f9:ea:87:0b:1a:e2:db:30:13:97:ec:10:88:61:
f1:81:41:0b:ef:45:56:21:57:fd:ac:2e:b4:a9:af:
49:16:61:76:17:1a:d4:bf:20:44:ee:09:c2:02:e0:
64:59:15:ee:16:5f:7d:db:63:43:4d:89:51:84:9c:
be:dd:f9:d6:6d:32:5c:20:cc:9e:9b:bb:61:e1:6e:
84:cd:2d:7b:cd:75:77:f4:06:82:55:7d:dd:2f:9e:
ea:18:93:82:17:ad:d2:d9:94:97:13:0a:60:d1:3e:
01:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:85:83:9B:C7:22:82:26:69:DD:66:A9:88:69:58:4A:2D:32:59:11
X509v3 Authority Key Identifier:
keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:15:40:ec:37:87:98:64:8c:b9:cb:81:a1:0f:7d:99:92:3f:
79:a0:1c:43:a5:94:40:63:54:d7:c0:00:df:a8:9c:0c:1b:1e:
85:3e:9a:76:08:cb:6a:fb:d3:bd:2f:5a:c6:58:d8:3f:4b:f3:
35:02:24:53:f8:27:86:f0:bb:01:b9:01:f5:14:22:94:d0:9d:
ec:28:37:c4:16:5b:79:13:7e:76:bf:4f:b3:4c:b3:fb:06:59:
3d:ac:3b:3c:e5:05:de:ee:02:68:72:25:a2:7f:ee:e0:2f:99:
57:60:a3:bb:25:45:73:fd:39:49:5f:eb:ec:8a:94:25:be:94:
58:72:f4:de:c4:1b:36:f0:db:01:e9:70:b8:22:1e:a5:72:b9:
3f:96:c9:07:46:26:63:a5:1b:76:43:ab:a1:f5:50:46:43:a8:
1c:ed:50:77:ba:ff:91:39:ed:b5:fa:ca:ef:ed:31:f0:35:8f:
0f:8d:7c:d0:46:f9:b0:aa:d2:fb:9a:ab:b7:57:a1:b2:4e:ff:
0d:a0:2d:00:00:56:8e:70:22:fc:e9:93:9b:5e:50:e6:a7:66:
6a:58:8a:7e:9e:35:90:ba:30:f3:7e:ea:b4:3c:89:98:34:73:
30:6a:29:12:af:17:fc:03:ce:6e:ab:84:62:c8:cb:00:b0:b4:
bf:d7:27:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPnexrrigCLV0fKipLdfPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOWExY2JlOWIwYjRiYTdiNDdkNDJhYWQ2NzI1NzE0ODRl
NTU5NWYwHhcNMjYwMzI4MDcwMDI0WhcNMjYwMzI5MDcwMDI0WjAzMTEwLwYDVQQD
EyhmZjg1ODM5YmM3MjI4MjI2NjlkZDY2YTk4ODY5NTg0YTJkMzI1OTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/qfO1UcXfa2+U6pOwEPHDR2PIPp
uuBkRevgfqoOAwq2ckB7Hr1MC5ktoiny+Ms9EJjF3BLeh0bosKQxpuRr7sdbbVu0
ATIZyCivhlYBy2M7OS0RGvoEVSxPfO/y6FgRvk9l+IDDhJJNpYGyjIIzf8By1CeG
z1owPMyKXqppiS6ysXOB/LaMQAeE4Ko4OCa5OQwzd9kx+eqHCxri2zATl+wQiGHx
gUEL70VWIVf9rC60qa9JFmF2FxrUvyBE7gnCAuBkWRXuFl9922NDTYlRhJy+3fnW
bTJcIMyem7th4W6EzS17zXV39AaCVX3dL57qGJOCF63S2ZSXEwpg0T4BcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+Fg5vHIoImad1mqYhpWEotMlkRMB8GA1UdIwQY
MBaAFM2aHL6bC0untH1CqtZyVxSE5VlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84ZmNiMjQtNjU2ZC00YTBkLWI5ZDgt
N2UxZWYyMTU2NjQ4LzEvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84ZmNiMjQtNjU2ZC00YTBkLWI5ZDgtN2UxZWYyMTU2NjQ4
LzEvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRVA7DeH
mGSMucuBoQ99mZI/eaAcQ6WUQGNU18AA36icDBsehT6adgjLavvTvS9axljYP0vz
NQIkU/gnhvC7AbkB9RQilNCd7Cg3xBZbeRN+dr9Ps0yz+wZZPaw7POUF3u4CaHIl
on/u4C+ZV2CjuyVFc/05SV/r7IqUJb6UWHL03sQbNvDbAelwuCIepXK5P5bJB0Ym
Y6UbdkOrofVQRkOoHO1Qd7r/kTnttfrK7+0x8DWPD4180Eb5sKrS+5qrt1ehsk7/
DaAtAABWjnAi/OmTm15Q5qdmaliKfp41kLow837qtDyJmDRzMGopEq8X/APObquE
YsjLALC0v9cnEQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:38:13 2026 by rpki-client