Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
File: Zur1u0vnZQbp7F5pTYtYUKmOciM.mft (raw, json)
Hash identifier: CQPv3fdYHISiPkY2Pe3PLeg2dgitsHO4fi2VLW6iP3A=
Subject key identifier: 9A:DE:4A:94:78:E5:AB:2C:E1:38:59:61:BD:EA:93:F2:B9:05:0A:2D
Authority key identifier: 66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
Certificate issuer: /CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Certificate serial: 019D984FFAAF9DB0EA0FCDC97E16C596EE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
Manifest number: 0F2D
Signing time: Thu 16 Apr 2026 22:01:11 +0000
Manifest this update: Thu 16 Apr 2026 22:01:11 +0000
Manifest next update: Fri 17 Apr 2026 22:01:11 +0000
Files and hashes: 1: Zur1u0vnZQbp7F5pTYtYUKmOciM.crl (hash: OZ1naiuqqh80SLFUJF0caVbNWt/dmYEzcO6Kmb7vYIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:fa:af:9d:b0:ea:0f:cd:c9:7e:16:c5:96:ee:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223
Validity
Not Before: Apr 16 22:01:11 2026 GMT
Not After : Apr 17 22:01:11 2026 GMT
Subject: CN=9ade4a9478e5ab2ce1385961bdea93f2b9050a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:18:5f:ec:d7:f8:c6:e0:12:b5:47:f1:fe:
dc:f0:5d:db:5f:f6:2e:27:92:31:d8:1d:70:66:d2:
8a:9a:70:e3:45:64:91:4e:fd:e0:92:3c:dd:ec:6e:
0a:36:a7:70:8a:d4:f2:ce:37:a8:4e:8b:58:c7:c3:
87:93:3e:33:b9:5f:bc:a8:e1:32:79:a6:c3:e7:09:
b9:7c:ce:f1:eb:de:98:d6:2d:0b:d9:19:b3:1e:a0:
2f:48:9e:48:f5:fc:bf:58:8e:ea:47:31:ba:18:b5:
56:b7:29:3f:2b:86:16:b9:4b:24:84:d5:13:62:8d:
01:a5:ed:94:53:0e:f7:60:ed:dd:4d:5f:44:0b:a8:
7a:18:d6:3d:21:da:c9:60:da:52:55:d7:76:23:00:
a6:f4:c3:30:e3:4a:be:98:81:80:9c:6d:a8:c0:78:
98:63:6b:d2:45:2f:7c:57:69:0e:15:42:83:17:49:
ee:09:14:14:74:f0:52:d6:52:0a:f0:2d:54:66:94:
3a:d2:62:f2:a7:b7:19:79:98:1a:f4:81:20:65:45:
a7:d7:5f:aa:2e:85:e3:f8:38:39:bf:35:c6:5d:6f:
1c:d7:59:ee:2e:90:63:f4:8e:26:e2:f7:9a:87:8a:
1b:12:9b:c9:ff:93:02:01:55:98:7c:8c:ee:8d:c8:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DE:4A:94:78:E5:AB:2C:E1:38:59:61:BD:EA:93:F2:B9:05:0A:2D
X509v3 Authority Key Identifier:
keyid:66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9b:6f:01:a9:d7:a9:4c:a9:bd:7e:9d:dc:61:b2:43:0b:88:
49:0e:33:39:61:73:49:58:8f:9a:d3:4d:42:bb:41:ec:57:6d:
44:ef:19:c1:9a:db:36:ec:9c:37:8a:67:4d:fb:34:71:2c:5e:
f4:32:1e:83:8c:b7:2e:5e:c3:bc:84:35:e8:f8:85:78:94:3a:
10:8d:30:e0:a4:06:23:57:2c:fc:8c:4e:25:17:c5:d8:58:0d:
8c:6e:f3:1b:47:19:ff:35:c6:ca:0b:19:73:0b:bf:fa:48:b6:
f5:d3:ca:b4:6f:02:7f:78:2d:0d:c3:25:42:81:a7:af:16:0e:
26:53:6a:65:b3:ac:6d:5c:98:77:3d:3e:ed:26:d7:37:fc:f8:
79:dd:c9:eb:e5:ac:36:f8:b9:0a:21:67:22:78:8d:3c:07:b1:
ad:34:4d:59:4e:1d:12:36:99:63:d4:d9:10:5f:3d:de:fb:bd:
2e:a2:91:64:fa:ad:31:4f:33:24:73:5f:a0:cc:42:47:71:c2:
4c:11:c0:cd:15:a1:ee:01:ad:33:3f:2d:7c:78:c8:25:76:1f:
35:b9:77:d7:7f:4b:c5:a8:ac:d4:e2:73:84:75:d9:ed:5e:78:
bb:33:54:2b:87:57:0d:8c:6c:27:3b:1f:cc:a0:92:bb:e9:f7:
dd:33:7f:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT/qvnbDqD83JfhbFlu6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWFmNWJiNGJlNzY1MDZlOWVjNWU2OTRkOGI1ODUwYTk4
ZTcyMjMwHhcNMjYwNDE2MjIwMTExWhcNMjYwNDE3MjIwMTExWjAzMTEwLwYDVQQD
Eyg5YWRlNGE5NDc4ZTVhYjJjZTEzODU5NjFiZGVhOTNmMmI5MDUwYTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOQYX+zX+MbgErVH8f7c8F3bX/Yu
J5Ix2B1wZtKKmnDjRWSRTv3gkjzd7G4KNqdwitTyzjeoTotYx8OHkz4zuV+8qOEy
eabD5wm5fM7x696Y1i0L2RmzHqAvSJ5I9fy/WI7qRzG6GLVWtyk/K4YWuUskhNUT
Yo0Bpe2UUw73YO3dTV9EC6h6GNY9IdrJYNpSVdd2IwCm9MMw40q+mIGAnG2owHiY
Y2vSRS98V2kOFUKDF0nuCRQUdPBS1lIK8C1UZpQ60mLyp7cZeZga9IEgZUWn11+q
LoXj+Dg5vzXGXW8c11nuLpBj9I4m4veah4obEpvJ/5MCAVWYfIzujcidVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJreSpR45ass4ThZYb3qk/K5BQotMB8GA1UdIwQY
MBaAFGbq9btL52UG6exeaU2LWFCpjnIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iYjYxMGQtNmQ0Zi00NmFlLWIwZDgt
OWExZjgyZTBkYmY1LzEvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iYjYxMGQtNmQ0Zi00NmFlLWIwZDgtOWExZjgyZTBkYmY1
LzEvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmptvAanX
qUypvX6d3GGyQwuISQ4zOWFzSViPmtNNQrtB7FdtRO8ZwZrbNuycN4pnTfs0cSxe
9DIeg4y3Ll7DvIQ16PiFeJQ6EI0w4KQGI1cs/IxOJRfF2FgNjG7zG0cZ/zXGygsZ
cwu/+ki29dPKtG8Cf3gtDcMlQoGnrxYOJlNqZbOsbVyYdz0+7SbXN/z4ed3J6+Ws
Nvi5CiFnIniNPAexrTRNWU4dEjaZY9TZEF893vu9LqKRZPqtMU8zJHNfoMxCR3HC
TBHAzRWh7gGtMz8tfHjIJXYfNbl3139Lxais1OJzhHXZ7V54uzNUK4dXDYxsJzsf
zKCSu+n33TN/cg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:36 2026 by rpki-client