Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
File: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft (raw, json)
Hash identifier: 6BWMnntV++RhZVygIHpVtrLQEAiKtl79l9FQ9bTg73I=
Subject key identifier: 5C:AB:83:EC:ED:34:D0:2D:64:CF:EF:79:6E:C1:A0:DA:50:78:86:74
Authority key identifier: CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81
Certificate issuer: /CN=cda104577266ec9b146736c8cc9da7366b1d9781
Certificate serial: 019CABD97408062F9C5F847B929EE357922B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 00:01:20 +0000
Manifest this update: Mon 02 Mar 2026 00:01:20 +0000
Manifest next update: Tue 03 Mar 2026 00:01:20 +0000
Files and hashes: 1: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl (hash: pdfljtSItfUrGlniijmcp4JyeZDU/85uQWwj2IzkhS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:74:08:06:2f:9c:5f:84:7b:92:9e:e3:57:92:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda104577266ec9b146736c8cc9da7366b1d9781
Validity
Not Before: Mar 2 00:01:20 2026 GMT
Not After : Mar 3 00:01:20 2026 GMT
Subject: CN=5cab83eced34d02d64cfef796ec1a0da50788674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:c6:d6:36:15:c6:d1:72:3f:43:0c:99:de:
2f:8b:b3:4f:9a:cb:b9:79:60:87:f5:49:e7:a2:7f:
7a:d5:94:50:41:96:ec:c8:71:e1:0f:b0:fb:e2:55:
42:c8:df:9f:0a:8d:a8:c1:13:e6:7a:d5:0f:8a:59:
a4:3b:8b:7e:ee:f0:df:a1:c7:fe:c7:dd:18:64:52:
53:3f:0a:7a:a8:f0:8c:97:8a:b3:e0:15:8c:ff:6c:
d7:c9:b6:f1:7c:36:ed:bc:43:60:ce:54:b7:85:6e:
a1:ec:f8:5b:3e:bd:4e:27:9d:fd:bb:c4:3f:d6:a4:
2e:5f:97:a4:01:98:32:72:8b:c9:a8:f3:39:cd:06:
4c:5d:48:28:2c:f1:e7:c8:32:18:08:21:16:a4:be:
d7:e2:cd:11:0e:93:d2:3a:a0:72:76:18:00:db:f3:
30:ea:f3:13:3d:45:84:cb:93:81:e3:38:84:fb:a8:
4f:81:b2:84:21:f6:4f:38:77:a3:6d:81:ab:d9:f9:
5e:1d:59:62:a8:d2:62:71:83:dd:f8:b2:50:cd:57:
8e:41:c7:4c:38:bc:0b:ff:45:9f:53:53:a6:ee:63:
d6:fa:cb:cc:15:a8:69:33:3c:81:c6:c8:d7:b5:3a:
db:db:d7:63:ab:1b:04:5c:37:5c:75:2b:fb:f7:f0:
f9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AB:83:EC:ED:34:D0:2D:64:CF:EF:79:6E:C1:A0:DA:50:78:86:74
X509v3 Authority Key Identifier:
keyid:CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:05:89:d3:6b:17:f9:ef:2a:74:f0:9a:1d:cf:99:b0:f6:e1:
f5:32:06:c0:e8:6d:91:b9:ae:9e:d7:c5:b9:d7:e0:ca:b4:5d:
ec:aa:17:56:73:f6:b0:74:d6:9b:f4:30:fd:83:ff:b7:17:83:
e7:b3:64:ba:c6:86:9f:d5:4d:a4:b6:3d:65:a5:80:c8:05:16:
d5:b8:43:5f:17:8f:91:74:3a:7f:5a:ba:8c:cf:d2:00:0e:8b:
3d:d1:34:18:8e:b8:6a:0f:e5:77:9e:5a:3c:71:f5:b6:48:bb:
e6:c4:04:9b:c2:a3:88:a8:bc:f8:e6:0a:b0:74:f2:8b:c9:48:
00:73:b6:3d:60:dc:43:2b:57:c9:fd:d9:e6:b8:40:b3:0b:1f:
e1:7b:d9:2c:92:a1:62:54:1d:13:a0:cc:2a:33:e1:df:67:c2:
08:2b:6f:28:c7:c8:b1:0b:8a:69:f8:e7:49:16:f7:53:6c:db:
56:d6:2b:23:83:16:ba:d7:f2:29:69:0d:fd:69:02:b0:fd:9b:
45:dd:3a:b5:12:b5:da:49:43:41:e1:d1:19:7d:39:97:46:3c:
02:9c:a4:fd:2c:6e:02:a2:98:6e:54:f7:eb:19:c3:39:75:22:
2e:64:5f:0c:01:12:cb:48:0c:68:8e:db:46:4c:f2:5c:23:1e:
91:6b:4b:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2XQIBi+cX4R7kp7jV5IrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYTEwNDU3NzI2NmVjOWIxNDY3MzZjOGNjOWRhNzM2NmIx
ZDk3ODEwHhcNMjYwMzAyMDAwMTIwWhcNMjYwMzAzMDAwMTIwWjAzMTEwLwYDVQQD
Eyg1Y2FiODNlY2VkMzRkMDJkNjRjZmVmNzk2ZWMxYTBkYTUwNzg4Njc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe3G1jYVxtFyP0MMmd4vi7NPmsu5
eWCH9Unnon961ZRQQZbsyHHhD7D74lVCyN+fCo2owRPmetUPilmkO4t+7vDfocf+
x90YZFJTPwp6qPCMl4qz4BWM/2zXybbxfDbtvENgzlS3hW6h7PhbPr1OJ539u8Q/
1qQuX5ekAZgycovJqPM5zQZMXUgoLPHnyDIYCCEWpL7X4s0RDpPSOqBydhgA2/Mw
6vMTPUWEy5OB4ziE+6hPgbKEIfZPOHejbYGr2fleHVliqNJicYPd+LJQzVeOQcdM
OLwL/0WfU1Om7mPW+svMFahpMzyBxsjXtTrb29djqxsEXDdcdSv79/D5bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyrg+ztNNAtZM/veW7BoNpQeIZ0MB8GA1UdIwQY
MBaAFM2hBFdyZuybFGc2yMydpzZrHZeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xZDI2NWEtNmE1Ny00Y2VkLWJkZjYt
NWZiMDlmMjFjNjA3LzEvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xZDI2NWEtNmE1Ny00Y2VkLWJkZjYtNWZiMDlmMjFjNjA3
LzEvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxgWJ02sX
+e8qdPCaHc+ZsPbh9TIGwOhtkbmuntfFudfgyrRd7KoXVnP2sHTWm/Qw/YP/txeD
57NkusaGn9VNpLY9ZaWAyAUW1bhDXxePkXQ6f1q6jM/SAA6LPdE0GI64ag/ld55a
PHH1tki75sQEm8KjiKi8+OYKsHTyi8lIAHO2PWDcQytXyf3Z5rhAswsf4XvZLJKh
YlQdE6DMKjPh32fCCCtvKMfIsQuKafjnSRb3U2zbVtYrI4MWutfyKWkN/WkCsP2b
Rd06tRK12klDQeHRGX05l0Y8Apyk/SxuAqKYblT36xnDOXUiLmRfDAESy0gMaI7b
RkzyXCMekWtLRA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:25:38 2026 by rpki-client