Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
File: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft (raw, json)
Hash identifier: o8QU/rkxDoT/p7BfrFhi0GxLlUtnTxVyI7rtF0XM2j8=
Subject key identifier: 43:93:3A:19:48:3C:56:A1:7F:60:3A:35:E4:E6:75:BC:44:B1:61:30
Authority key identifier: 67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
Certificate issuer: /CN=67864477fe948bf47b9179718c3698eeff58111d
Certificate serial: 019CACB51D970963C3E8B1E00D55CAEBAE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 04:01:16 +0000
Manifest this update: Mon 02 Mar 2026 04:01:16 +0000
Manifest next update: Tue 03 Mar 2026 04:01:16 +0000
Files and hashes: 1: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl (hash: WHlf1Kw8lLxAIMvSSr6w1+H8Eio/4/ezA+tV3rD4/w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:1d:97:09:63:c3:e8:b1:e0:0d:55:ca:eb:ae:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67864477fe948bf47b9179718c3698eeff58111d
Validity
Not Before: Mar 2 04:01:16 2026 GMT
Not After : Mar 3 04:01:16 2026 GMT
Subject: CN=43933a19483c56a17f603a35e4e675bc44b16130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:7b:4b:ab:52:03:93:5f:d4:e3:74:e4:7e:
b0:c0:0c:26:22:1b:d4:a2:07:84:86:4d:4c:23:9b:
38:5f:34:20:0a:20:26:06:33:8a:26:c4:51:ee:31:
29:0b:95:53:bf:56:17:74:ba:a6:a8:36:e5:0a:ab:
36:a9:64:57:fd:63:10:02:47:c9:4c:ac:cd:b4:a3:
db:c4:62:f8:28:82:bd:3a:71:91:05:c9:d7:98:f1:
75:84:af:5f:2a:12:0a:cd:ec:4d:d1:3a:27:1a:66:
1f:64:f1:97:07:8a:5b:bf:e0:b3:9e:57:61:13:4b:
f9:a0:0e:0f:e2:26:23:1e:04:7e:b7:97:17:6e:4b:
2e:c0:a2:7c:41:1e:ca:d9:fc:5b:90:ee:52:69:20:
79:6d:70:44:03:4d:bf:10:14:81:9d:10:d9:ee:a1:
fa:5b:fb:60:4c:52:0f:f8:47:27:ac:dc:5e:06:c5:
e4:2b:c4:67:c1:eb:70:6c:cf:82:33:cc:1b:63:ac:
96:aa:b8:4f:3c:6e:ed:c9:b9:ab:d0:13:4b:35:a5:
12:f4:df:0d:e6:a7:6e:60:61:0c:7d:5a:42:a2:6a:
4d:b0:7e:b1:62:5d:e6:06:4f:0b:2c:d3:ee:a8:1c:
bb:df:4c:cc:29:8d:57:13:05:86:89:ff:a9:ab:54:
3c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:93:3A:19:48:3C:56:A1:7F:60:3A:35:E4:E6:75:BC:44:B1:61:30
X509v3 Authority Key Identifier:
keyid:67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:59:09:d0:cc:49:d8:37:74:b7:02:44:a3:91:0b:e1:15:4d:
c9:ad:cb:11:e6:c6:c0:f1:c8:00:b8:86:3c:0c:98:54:f3:24:
ae:48:18:06:ef:fe:a5:f6:b6:9c:1f:cb:2c:db:b3:72:03:98:
74:60:63:f1:96:e4:85:82:88:98:93:2b:49:c3:67:ec:41:b6:
53:ef:2d:79:27:e3:84:f2:11:b8:6c:f9:4b:b6:ae:1f:36:50:
76:b9:b3:9a:0a:6f:6f:4b:2b:5f:9d:f3:8c:2d:85:4b:1a:de:
9d:ba:2f:6b:63:af:9e:2b:ad:f9:a6:61:c1:a2:31:69:8d:8e:
28:a2:8a:1f:c1:e4:99:49:38:36:8a:60:76:7a:94:ae:e8:2f:
f9:7d:73:97:8c:68:6a:68:c8:94:62:36:18:ce:5c:54:89:11:
7f:aa:ab:82:c2:94:ca:05:46:5f:3c:f0:33:19:48:eb:c8:91:
45:c5:19:58:6c:c9:0f:21:cf:e3:e4:29:60:3c:29:91:e9:32:
72:82:29:56:48:38:bb:0d:8c:fe:97:60:2e:f9:1b:12:64:aa:
f0:50:63:d8:9a:f3:d8:bd:ae:46:1f:c7:95:d2:ef:29:10:bd:
62:c0:39:ab:31:97:b9:55:e0:d1:91:56:66:0e:ec:79:fa:9d:
a9:4f:05:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystR2XCWPD6LHgDVXK665mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ODY0NDc3ZmU5NDhiZjQ3YjkxNzk3MThjMzY5OGVlZmY1
ODExMWQwHhcNMjYwMzAyMDQwMTE2WhcNMjYwMzAzMDQwMTE2WjAzMTEwLwYDVQQD
Eyg0MzkzM2ExOTQ4M2M1NmExN2Y2MDNhMzVlNGU2NzViYzQ0YjE2MTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSB7S6tSA5Nf1ON05H6wwAwmIhvU
ogeEhk1MI5s4XzQgCiAmBjOKJsRR7jEpC5VTv1YXdLqmqDblCqs2qWRX/WMQAkfJ
TKzNtKPbxGL4KIK9OnGRBcnXmPF1hK9fKhIKzexN0TonGmYfZPGXB4pbv+Cznldh
E0v5oA4P4iYjHgR+t5cXbksuwKJ8QR7K2fxbkO5SaSB5bXBEA02/EBSBnRDZ7qH6
W/tgTFIP+EcnrNxeBsXkK8RnwetwbM+CM8wbY6yWqrhPPG7tybmr0BNLNaUS9N8N
5qduYGEMfVpCompNsH6xYl3mBk8LLNPuqBy730zMKY1XEwWGif+pq1Q8KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOTOhlIPFahf2A6NeTmdbxEsWEwMB8GA1UdIwQY
MBaAFGeGRHf+lIv0e5F5cYw2mO7/WBEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81Yjk2MWItYmMyNS00OTNjLWFmMzgt
ODM0YWU0N2FkNDdiLzEvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81Yjk2MWItYmMyNS00OTNjLWFmMzgtODM0YWU0N2FkNDdi
LzEvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1kJ0MxJ
2Dd0twJEo5EL4RVNya3LEebGwPHIALiGPAyYVPMkrkgYBu/+pfa2nB/LLNuzcgOY
dGBj8ZbkhYKImJMrScNn7EG2U+8teSfjhPIRuGz5S7auHzZQdrmzmgpvb0srX53z
jC2FSxrenbova2Ovniut+aZhwaIxaY2OKKKKH8HkmUk4NopgdnqUrugv+X1zl4xo
amjIlGI2GM5cVIkRf6qrgsKUygVGXzzwMxlI68iRRcUZWGzJDyHP4+QpYDwpkeky
coIpVkg4uw2M/pdgLvkbEmSq8FBj2Jrz2L2uRh/HldLvKRC9YsA5qzGXuVXg0ZFW
Zg7sefqdqU8FWw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:32 2026 by rpki-client