Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: 6efmLsX/ifyUbzuNKu8zI3+ZQe0XhGSq61U1+edKMEw=
Subject key identifier: A7:FB:E6:F2:9D:62:B5:01:28:E4:59:B4:D3:E8:B7:4D:E2:6E:BE:08
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 019CAAFCF7FFD8D5DD16A4D5897346F95AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: 07A7
Signing time: Sun 01 Mar 2026 20:00:31 +0000
Manifest this update: Sun 01 Mar 2026 20:00:31 +0000
Manifest next update: Mon 02 Mar 2026 20:00:31 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: CeM7xlAsYcbwu+9yvhhnLFZLZuZG0XZUWTIlOSd/dLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f7:ff:d8:d5:dd:16:a4:d5:89:73:46:f9:5a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: Mar 1 20:00:31 2026 GMT
Not After : Mar 2 20:00:31 2026 GMT
Subject: CN=a7fbe6f29d62b50128e459b4d3e8b74de26ebe08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:18:9a:1f:fa:4d:05:af:9a:44:c1:73:85:5a:
27:c0:5c:e3:de:37:c7:b8:f5:bc:de:63:cb:08:f3:
70:24:c5:fd:92:ac:54:c0:3d:e4:28:14:ab:0f:0a:
12:3a:e7:dd:40:b1:a5:6e:d4:8c:eb:dc:14:75:a2:
c3:20:85:f9:54:40:3f:25:2b:31:f2:11:27:10:6c:
be:ec:0c:b9:ef:f5:cf:71:3c:72:c1:23:3d:e1:66:
05:13:d4:9d:35:33:ce:4f:72:91:e9:c9:f1:bb:e1:
ef:43:2a:cc:89:17:23:62:c9:d1:14:06:5b:ab:dd:
5e:e5:bf:d4:52:18:c7:14:a0:b6:2e:4f:65:91:42:
3f:24:ad:15:c5:24:f3:ce:bd:08:8d:dc:b2:52:8d:
43:7d:21:0d:7d:9d:15:43:25:c8:bf:de:8a:38:5b:
12:19:f4:d3:ed:4c:56:d3:a6:b5:50:e7:bf:64:ff:
a0:e6:7f:41:54:48:7f:69:20:e4:1a:7a:be:b2:66:
0d:36:3d:f8:97:4b:f3:a4:1f:07:49:bb:cf:2e:cf:
b4:5b:14:7e:5d:59:51:96:b9:f1:5d:1a:46:8c:66:
a2:ca:fa:5c:83:06:37:51:23:06:f3:b6:0d:c4:11:
c8:b3:2d:4a:c8:33:ef:1d:63:77:4f:66:23:d8:62:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FB:E6:F2:9D:62:B5:01:28:E4:59:B4:D3:E8:B7:4D:E2:6E:BE:08
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0d:97:f4:3a:1d:27:dc:78:b4:16:54:b1:65:bf:35:af:75:
53:f3:cc:f8:c2:db:9a:2f:8c:a9:e9:f4:31:bc:d2:7e:87:c8:
64:50:c7:17:b2:9e:ae:66:21:9b:b1:89:a9:8c:91:6e:c0:83:
96:79:5a:b4:69:dd:49:48:a1:86:ea:eb:f2:b0:77:04:49:9d:
d8:ea:09:3d:95:ab:51:69:c1:ea:39:1a:24:65:ed:b3:42:26:
10:bb:a6:63:e6:79:18:06:a3:f2:cd:48:87:1a:77:2c:0f:19:
3b:5c:49:37:66:4c:fb:b5:40:6e:c4:9c:59:d3:be:ec:8d:e3:
51:96:a7:f5:dc:05:c6:e1:a3:b7:4a:29:ee:57:fb:d4:2a:a6:
f9:a6:fc:4c:e5:e7:ca:93:6a:c2:6d:b6:ab:e1:25:51:f3:e0:
4b:a0:fa:aa:ed:1e:13:85:99:36:cf:8d:d9:56:bf:98:9d:9f:
53:3c:53:4a:10:ac:ec:61:a6:3b:82:86:7c:92:57:d0:2e:a1:
09:dc:07:df:54:a8:4c:2f:17:18:98:4e:d0:f1:6a:88:4e:72:
63:5d:d8:81:bf:c8:98:37:91:ea:92:de:89:15:e1:40:cc:36:
f7:39:13:c7:19:95:d2:fe:57:02:49:87:dc:f1:ad:69:60:20:
84:3c:39:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Pf/2NXdFqTViXNG+VrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDBhNTIzMzJkMTIwMjg2MDQ1MGIyMGU3YWJjNGY3ZTAx
Zjc2NGUwHhcNMjYwMzAxMjAwMDMxWhcNMjYwMzAyMjAwMDMxWjAzMTEwLwYDVQQD
EyhhN2ZiZTZmMjlkNjJiNTAxMjhlNDU5YjRkM2U4Yjc0ZGUyNmViZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xiaH/pNBa+aRMFzhVonwFzj3jfH
uPW83mPLCPNwJMX9kqxUwD3kKBSrDwoSOufdQLGlbtSM69wUdaLDIIX5VEA/JSsx
8hEnEGy+7Ay57/XPcTxywSM94WYFE9SdNTPOT3KR6cnxu+HvQyrMiRcjYsnRFAZb
q91e5b/UUhjHFKC2Lk9lkUI/JK0VxSTzzr0IjdyyUo1DfSENfZ0VQyXIv96KOFsS
GfTT7UxW06a1UOe/ZP+g5n9BVEh/aSDkGnq+smYNNj34l0vzpB8HSbvPLs+0WxR+
XVlRlrnxXRpGjGaiyvpcgwY3USMG87YNxBHIsy1KyDPvHWN3T2Yj2GKu7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKf75vKdYrUBKORZtNPot03ibr4IMB8GA1UdIwQY
MBaAFM0ApSMy0SAoYEULIOerxPfgH3ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMt
NDY3ZmI0MDIyMmE4LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMtNDY3ZmI0MDIyMmE4
LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQw2X9Dod
J9x4tBZUsWW/Na91U/PM+MLbmi+Mqen0MbzSfofIZFDHF7KermYhm7GJqYyRbsCD
lnlatGndSUihhurr8rB3BEmd2OoJPZWrUWnB6jkaJGXts0ImELumY+Z5GAaj8s1I
hxp3LA8ZO1xJN2ZM+7VAbsScWdO+7I3jUZan9dwFxuGjt0op7lf71Cqm+ab8TOXn
ypNqwm22q+ElUfPgS6D6qu0eE4WZNs+N2Va/mJ2fUzxTShCs7GGmO4KGfJJX0C6h
CdwH31SoTC8XGJhO0PFqiE5yY13Ygb/ImDeR6pLeiRXhQMw29zkTxxmV0v5XAkmH
3PGtaWAghDw5TQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:51 2026 by rpki-client