Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json)
Hash identifier: s7PqpZAVlS7oLXlYCgF52pz9D4Iooz7gq2WUqSPxKRA=
Subject key identifier: 43:51:86:B0:12:EA:48:33:59:83:6A:A2:47:4D:09:CD:FB:C7:C2:00
Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
Certificate issuer: /CN=65d2b2f54ca1718cfd38293111415666cc34e262
Certificate serial: 019CAC0FAA290578D6F13A662676FC13ABD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
Manifest number: 13EF
Signing time: Mon 02 Mar 2026 01:00:33 +0000
Manifest this update: Mon 02 Mar 2026 01:00:33 +0000
Manifest next update: Tue 03 Mar 2026 01:00:33 +0000
Files and hashes: 1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: gDiB+ijXFVd/hSEEO0YUG/YDZ1vpTxTxbh5ftUU9KAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:aa:29:05:78:d6:f1:3a:66:26:76:fc:13:ab:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262
Validity
Not Before: Mar 2 01:00:33 2026 GMT
Not After : Mar 3 01:00:33 2026 GMT
Subject: CN=435186b012ea483359836aa2474d09cdfbc7c200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:07:c9:e4:8b:30:1a:99:38:fb:ae:46:db:
8d:97:6a:20:fd:10:38:04:c8:c2:95:b8:9f:2e:e2:
a0:1a:49:3e:66:83:69:51:20:0c:6d:e2:78:43:2d:
61:d3:28:56:05:65:90:7b:01:56:20:99:87:cf:ea:
fb:21:d7:05:e1:68:67:f9:34:c2:17:ef:6b:e2:af:
10:ff:ef:7a:7d:f1:f3:50:db:cc:11:be:e3:f1:39:
90:af:42:c8:50:75:62:d0:a6:20:f8:ff:c0:80:73:
93:eb:4d:4b:22:ca:80:72:49:f7:5f:24:11:90:1b:
78:89:3d:8d:9f:b4:be:fd:12:1d:ee:97:46:0b:29:
e2:45:e3:58:b1:e4:4b:6c:c1:a8:21:0a:dd:66:0d:
de:40:26:af:4c:d2:da:f8:94:e2:f9:b2:18:aa:1e:
df:62:03:b2:d0:8f:88:5b:cd:a4:d8:ea:62:00:41:
22:ac:5a:47:66:5e:ef:0d:e1:59:65:b9:aa:d9:2b:
2b:37:fd:8f:6a:d4:f7:c0:9d:fb:b1:3f:ec:bc:95:
78:53:e9:f0:c8:e1:cc:2e:9a:a5:6f:76:f1:86:f2:
42:ca:2b:ef:74:b7:cb:05:1f:ae:33:e5:f3:f4:f8:
54:63:03:ab:0f:9b:3f:c8:14:5c:8e:02:c2:14:87:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:51:86:B0:12:EA:48:33:59:83:6A:A2:47:4D:09:CD:FB:C7:C2:00
X509v3 Authority Key Identifier:
keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:85:96:26:79:ae:28:34:06:9a:b3:ba:39:b8:56:b7:88:45:
a6:70:13:79:48:d4:09:ee:2b:23:f8:13:5c:b0:02:ff:a1:a1:
d1:b4:bc:86:a0:e1:a3:3d:ed:97:a5:5e:69:0e:68:58:9b:37:
e6:c7:d4:cc:4b:9f:d5:2c:a6:4d:dd:0e:bd:e1:13:bd:98:ee:
ea:e2:b6:1c:63:09:10:fa:23:86:99:47:88:b0:3d:b5:f6:1b:
cb:02:77:c4:2e:ab:53:4f:69:a8:a2:10:7a:3e:f9:8c:a8:55:
77:d1:7d:6c:75:aa:eb:7e:60:fd:f6:2e:77:14:3b:c4:2e:b6:
54:09:f8:f8:c7:fd:0a:00:34:0d:5b:a1:c1:64:50:89:43:2e:
14:73:0c:45:9d:f0:cf:b8:fa:60:6d:cd:89:2f:ff:f2:49:22:
b1:36:01:02:d5:6b:36:ce:b6:92:26:65:53:4c:41:af:de:b2:
aa:c8:75:49:8b:5f:49:eb:5f:79:93:7a:cf:45:cb:0d:6e:fb:
22:08:67:e6:d1:41:46:cc:2a:22:ee:91:7a:a2:94:e5:ec:8c:
dd:05:57:25:b7:10:7a:66:c5:1a:cd:7b:8a:b9:dc:9c:17:ba:
e7:bf:43:76:09:7d:c1:d2:c8:ae:45:87:37:4e:9c:98:f9:29:
52:8f:e1:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD6opBXjW8TpmJnb8E6vQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDJiMmY1NGNhMTcxOGNmZDM4MjkzMTExNDE1NjY2Y2Mz
NGUyNjIwHhcNMjYwMzAyMDEwMDMzWhcNMjYwMzAzMDEwMDMzWjAzMTEwLwYDVQQD
Eyg0MzUxODZiMDEyZWE0ODMzNTk4MzZhYTI0NzRkMDljZGZiYzdjMjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKwHyeSLMBqZOPuuRtuNl2og/RA4
BMjClbifLuKgGkk+ZoNpUSAMbeJ4Qy1h0yhWBWWQewFWIJmHz+r7IdcF4Whn+TTC
F+9r4q8Q/+96ffHzUNvMEb7j8TmQr0LIUHVi0KYg+P/AgHOT601LIsqAckn3XyQR
kBt4iT2Nn7S+/RId7pdGCyniReNYseRLbMGoIQrdZg3eQCavTNLa+JTi+bIYqh7f
YgOy0I+IW82k2OpiAEEirFpHZl7vDeFZZbmq2SsrN/2PatT3wJ37sT/svJV4U+nw
yOHMLpqlb3bxhvJCyivvdLfLBR+uM+Xz9PhUYwOrD5s/yBRcjgLCFIf43QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENRhrAS6kgzWYNqokdNCc37x8IAMB8GA1UdIwQY
MBaAFGXSsvVMoXGM/TgpMRFBVmbMNOJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMzE3NjYtNGQyNy00YzQ4LTllNmIt
ZWY2NWRjYmM3YzA5LzEvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMzE3NjYtNGQyNy00YzQ4LTllNmItZWY2NWRjYmM3YzA5
LzEvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4WWJnmu
KDQGmrO6ObhWt4hFpnATeUjUCe4rI/gTXLAC/6Gh0bS8hqDhoz3tl6VeaQ5oWJs3
5sfUzEuf1SymTd0OveETvZju6uK2HGMJEPojhplHiLA9tfYbywJ3xC6rU09pqKIQ
ej75jKhVd9F9bHWq635g/fYudxQ7xC62VAn4+Mf9CgA0DVuhwWRQiUMuFHMMRZ3w
z7j6YG3NiS//8kkisTYBAtVrNs62kiZlU0xBr96yqsh1SYtfSetfeZN6z0XLDW77
Ighn5tFBRswqIu6ReqKU5eyM3QVXJbcQembFGs17irncnBe6579Ddgl9wdLIrkWH
N06cmPkpUo/hxA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:37 2026 by rpki-client