Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
File: Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft (raw, json)
Hash identifier: cdFokZUrnTk9CX9Sp4hyfIzWC2Cc4WFG4TanTwiSyYk=
Subject key identifier: E7:8B:38:20:FE:B1:08:9B:9E:CA:80:CB:A6:E8:0B:E4:01:97:8F:94
Authority key identifier: 67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8
Certificate issuer: /CN=679bd78e3819770c116e577bacfad1993392bdb8
Certificate serial: 019CAA586B0F931486ABA89BA27D9D6BD73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
Manifest number: 12A4
Signing time: Sun 01 Mar 2026 17:00:47 +0000
Manifest this update: Sun 01 Mar 2026 17:00:47 +0000
Manifest next update: Mon 02 Mar 2026 17:00:47 +0000
Files and hashes: 1: Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl (hash: wqgirrQxyJWFplT+idCqwgDoSxP5Wf8rwazsqUuMQ8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:6b:0f:93:14:86:ab:a8:9b:a2:7d:9d:6b:d7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679bd78e3819770c116e577bacfad1993392bdb8
Validity
Not Before: Mar 1 17:00:47 2026 GMT
Not After : Mar 2 17:00:47 2026 GMT
Subject: CN=e78b3820feb1089b9eca80cba6e80be401978f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:e8:7f:c8:47:df:22:47:99:5d:ca:b5:10:
e2:28:18:ee:ef:95:c7:98:43:a9:a6:92:c0:74:11:
ab:d0:73:ad:3c:39:b0:7a:e5:11:f5:fc:87:bd:5d:
11:1f:df:77:6d:b0:e7:b7:a8:85:12:4f:94:46:c2:
76:e7:b8:97:1d:98:1a:f5:64:55:98:58:63:a9:4d:
65:dd:63:7f:5e:28:1c:25:92:21:e1:da:49:a4:5b:
d6:1b:27:2a:5a:c1:3e:7b:a2:71:7d:16:a1:db:68:
44:d2:73:ad:64:31:cb:8d:04:b8:ee:7f:a7:f0:53:
60:03:82:fa:72:f9:f2:e0:60:ad:61:aa:ca:9a:14:
9b:50:d4:a7:66:ac:b7:67:87:16:85:f1:69:60:26:
ea:3a:07:a8:5c:e0:64:dc:12:5a:24:68:12:4c:60:
a5:2f:6c:15:2b:99:ec:a5:7d:ce:c2:3c:b4:6c:2a:
15:ba:d7:64:b5:f0:35:b5:14:24:6b:e7:8f:79:2a:
3c:d1:f9:44:d3:96:38:1a:5b:1b:36:f3:0f:59:66:
99:a4:24:08:ca:8f:2d:a0:67:32:41:9f:c0:6f:25:
d4:a0:64:b8:4d:43:af:ad:2e:a6:16:04:49:5c:36:
ad:6e:a5:e6:8c:65:b6:9b:c8:75:47:9e:db:21:1d:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8B:38:20:FE:B1:08:9B:9E:CA:80:CB:A6:E8:0B:E4:01:97:8F:94
X509v3 Authority Key Identifier:
keyid:67:9B:D7:8E:38:19:77:0C:11:6E:57:7B:AC:FA:D1:99:33:92:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5vXjjgZdwwRbld7rPrRmTOSvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e6f18d-f775-4438-95cb-afb558a5e841/1/Z5vXjjgZdwwRbld7rPrRmTOSvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5f:9b:4b:e5:f5:1f:34:b5:b9:c8:dd:07:f1:5a:07:1f:bd:
bc:5a:5a:ef:e7:1f:79:7a:0d:72:ec:b6:3c:82:ed:c8:7a:94:
ac:ea:ec:d0:fd:05:5f:ac:f9:82:75:dd:53:3c:68:51:02:5f:
c7:10:de:ad:26:4c:ab:b4:92:b7:9e:a9:f5:99:27:4b:d0:00:
12:1b:17:09:b5:e7:be:f9:91:8d:53:04:3c:ec:cd:4f:aa:9b:
ca:d8:14:5c:66:c6:bd:75:1a:ce:5b:cf:53:2a:db:58:f2:9c:
1a:bb:e7:4d:12:b3:4b:1e:2b:9a:f2:9e:17:11:1c:ca:2e:26:
0e:c4:ef:d8:df:3c:b7:db:4d:60:36:40:69:e1:c1:d8:90:83:
29:b1:b4:37:07:8f:6f:6b:5a:ff:d6:36:d6:e8:34:8f:6f:87:
11:b1:3b:6c:86:8c:30:46:fc:21:63:d6:92:3e:a5:2f:cc:28:
e8:74:b8:20:68:5c:67:ea:51:c9:58:93:ee:42:5c:c1:cb:20:
36:85:27:cd:7d:3c:2a:1c:36:ea:af:01:73:f4:57:b2:53:23:
a2:1d:3f:93:72:6e:81:da:01:fc:31:8e:c8:e3:36:df:b7:11:
ae:2e:74:f5:9c:cc:03:5c:74:08:0b:a8:1b:2f:80:9a:20:dc:
4e:01:d2:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWGsPkxSGq6ibon2da9c/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OWJkNzhlMzgxOTc3MGMxMTZlNTc3YmFjZmFkMTk5MzM5
MmJkYjgwHhcNMjYwMzAxMTcwMDQ3WhcNMjYwMzAyMTcwMDQ3WjAzMTEwLwYDVQQD
EyhlNzhiMzgyMGZlYjEwODliOWVjYTgwY2JhNmU4MGJlNDAxOTc4Zjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdPof8hH3yJHmV3KtRDiKBju75XH
mEOpppLAdBGr0HOtPDmweuUR9fyHvV0RH993bbDnt6iFEk+URsJ257iXHZga9WRV
mFhjqU1l3WN/XigcJZIh4dpJpFvWGycqWsE+e6JxfRah22hE0nOtZDHLjQS47n+n
8FNgA4L6cvny4GCtYarKmhSbUNSnZqy3Z4cWhfFpYCbqOgeoXOBk3BJaJGgSTGCl
L2wVK5nspX3Owjy0bCoVutdktfA1tRQka+ePeSo80flE05Y4GlsbNvMPWWaZpCQI
yo8toGcyQZ/AbyXUoGS4TUOvrS6mFgRJXDatbqXmjGW2m8h1R57bIR1ktQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeLOCD+sQibnsqAy6boC+QBl4+UMB8GA1UdIwQY
MBaAFGeb1444GXcMEW5Xe6z60Zkzkr24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNmYxOGQtZjc3NS00NDM4LTk1Y2It
YWZiNTU4YTVlODQxLzEvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lNmYxOGQtZjc3NS00NDM4LTk1Y2ItYWZiNTU4YTVlODQx
LzEvWjV2WGpqZ1pkd3dSYmxkN3JQclJtVE9TdmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1+bS+X1
HzS1ucjdB/FaBx+9vFpa7+cfeXoNcuy2PILtyHqUrOrs0P0FX6z5gnXdUzxoUQJf
xxDerSZMq7SSt56p9ZknS9AAEhsXCbXnvvmRjVMEPOzNT6qbytgUXGbGvXUazlvP
UyrbWPKcGrvnTRKzSx4rmvKeFxEcyi4mDsTv2N88t9tNYDZAaeHB2JCDKbG0NweP
b2ta/9Y21ug0j2+HEbE7bIaMMEb8IWPWkj6lL8wo6HS4IGhcZ+pRyViT7kJcwcsg
NoUnzX08Khw26q8Bc/RXslMjoh0/k3JugdoB/DGOyOM237cRri509ZzMA1x0CAuo
Gy+AmiDcTgHS2A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:28 2026 by rpki-client