Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
File: Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft (raw, json)
Hash identifier: JvLiHRLvN4AVmGq6JJRBfWCinYM39qMcuOcIvgMdEuQ=
Subject key identifier: 04:4B:6C:0C:3E:10:F7:8E:00:6D:37:95:A1:83:D2:3F:AA:5D:4A:45
Authority key identifier: 67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
Certificate issuer: /CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Certificate serial: 019CAC0FBC639662B3B29FC46760C8643040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
Manifest number: 1388
Signing time: Mon 02 Mar 2026 01:00:38 +0000
Manifest this update: Mon 02 Mar 2026 01:00:38 +0000
Manifest next update: Tue 03 Mar 2026 01:00:38 +0000
Files and hashes: 1: Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl (hash: 8B54rR+aHEbJ+OLIje8/CEdbPiAkzpzNWRq8Wo0s0Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:bc:63:96:62:b3:b2:9f:c4:67:60:c8:64:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Validity
Not Before: Mar 2 01:00:38 2026 GMT
Not After : Mar 3 01:00:38 2026 GMT
Subject: CN=044b6c0c3e10f78e006d3795a183d23faa5d4a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4d:c0:e3:1d:78:ce:b5:49:72:44:f1:15:f4:
a8:04:24:c3:25:f2:b3:81:21:4b:95:5f:7b:a3:4f:
81:3a:e3:4f:ba:3d:80:b6:1d:c0:e2:35:28:85:20:
0c:d1:30:57:33:b5:2c:65:c8:e2:4e:6f:34:38:9d:
90:70:aa:2c:b4:6c:8b:ff:17:d9:9d:f0:4a:9c:6d:
b0:c2:eb:db:fd:f8:ce:ff:6a:8d:74:02:75:6e:6b:
26:e9:5d:12:42:cf:37:88:98:f6:36:44:c9:bd:69:
ee:96:18:49:a2:1b:b6:85:93:7a:bd:d5:e8:3a:5c:
83:dc:de:73:9e:43:57:a8:fe:bb:0f:b5:3f:4f:dc:
cf:34:45:77:fd:9b:96:0f:c8:7b:90:7a:57:1b:b1:
9a:13:03:60:49:67:42:3f:5f:0e:cf:d9:62:e3:b2:
6e:3e:c7:4e:22:2c:ca:93:b8:0f:9b:e8:f9:70:31:
95:cd:14:ea:5c:14:67:ea:8d:98:63:1d:22:81:cc:
84:5c:fc:87:6b:80:2a:95:0d:90:b2:ae:8a:09:39:
e2:72:65:55:51:df:81:42:55:3c:4a:00:ad:b1:19:
fc:3b:4f:cb:ad:bd:0a:7e:2f:4e:d1:c1:5f:65:b4:
3c:c6:25:0b:fd:85:54:b0:ef:85:f6:69:32:23:08:
65:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:6C:0C:3E:10:F7:8E:00:6D:37:95:A1:83:D2:3F:AA:5D:4A:45
X509v3 Authority Key Identifier:
keyid:67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:88:25:25:7e:ba:1d:a0:3a:ce:f6:ae:2d:32:50:ef:cb:04:
7b:74:ce:b4:87:90:31:87:fb:fc:05:4b:a7:fd:1a:1e:d7:2d:
5d:36:44:09:32:fc:39:b1:34:6e:f9:2f:74:05:6b:31:7a:31:
c2:de:b5:06:81:0e:b9:5b:2e:ec:0a:3b:e2:3c:52:96:59:ea:
2d:d3:33:5b:48:a0:c9:be:22:1f:de:e8:0d:56:6f:ea:a5:18:
50:7c:e4:37:2c:d8:74:86:01:60:ed:60:85:47:ba:27:8f:35:
46:ea:3b:15:7b:75:ce:35:f3:11:e4:a9:40:30:be:ff:bb:d2:
02:06:5b:7b:89:f6:89:a6:2e:fc:af:58:60:20:73:d9:7e:75:
a6:05:98:2d:fc:57:b3:ba:50:90:3e:1a:5a:d6:f1:e1:69:43:
3b:e9:10:88:9a:60:a4:e6:51:d0:10:25:10:cf:d5:16:d1:7e:
f1:33:bf:62:49:29:2a:c4:7a:7f:0b:be:e8:50:45:ad:bc:26:
04:f4:29:29:1e:f8:bf:7f:16:06:d2:2d:7c:a4:3a:70:60:a5:
52:b2:86:33:de:08:ab:39:33:4e:64:5e:c5:6f:c1:87:1e:b1:
c7:38:ad:8b:5e:75:1e:3a:94:05:fd:e8:7d:90:45:0d:19:76:
77:2e:ed:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD7xjlmKzsp/EZ2DIZDBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NzBjOWI5NDA1NzQ4ZDI2NTQ4ZmQ1ZmNhN2E2NGEwMzhk
NTgxMmQwHhcNMjYwMzAyMDEwMDM4WhcNMjYwMzAzMDEwMDM4WjAzMTEwLwYDVQQD
EygwNDRiNmMwYzNlMTBmNzhlMDA2ZDM3OTVhMTgzZDIzZmFhNWQ0YTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6k3A4x14zrVJckTxFfSoBCTDJfKz
gSFLlV97o0+BOuNPuj2Ath3A4jUohSAM0TBXM7UsZcjiTm80OJ2QcKostGyL/xfZ
nfBKnG2wwuvb/fjO/2qNdAJ1bmsm6V0SQs83iJj2NkTJvWnulhhJohu2hZN6vdXo
OlyD3N5znkNXqP67D7U/T9zPNEV3/ZuWD8h7kHpXG7GaEwNgSWdCP18Oz9li47Ju
PsdOIizKk7gPm+j5cDGVzRTqXBRn6o2YYx0igcyEXPyHa4AqlQ2Qsq6KCTnicmVV
Ud+BQlU8SgCtsRn8O0/Lrb0Kfi9O0cFfZbQ8xiUL/YVUsO+F9mkyIwhlWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARLbAw+EPeOAG03laGD0j+qXUpFMB8GA1UdIwQY
MBaAFGdwyblAV0jSZUj9X8p6ZKA41YEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTU2YzUtYjI4Yy00M2M5LWE0NjUt
MTQ4ODc4NzZhYTBlLzEvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85YTU2YzUtYjI4Yy00M2M5LWE0NjUtMTQ4ODc4NzZhYTBl
LzEvWjNESnVVQlhTTkpsU1AxZnlucGtvRGpWZ1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4glJX66
HaA6zvauLTJQ78sEe3TOtIeQMYf7/AVLp/0aHtctXTZECTL8ObE0bvkvdAVrMXox
wt61BoEOuVsu7Ao74jxSllnqLdMzW0igyb4iH97oDVZv6qUYUHzkNyzYdIYBYO1g
hUe6J481Ruo7FXt1zjXzEeSpQDC+/7vSAgZbe4n2iaYu/K9YYCBz2X51pgWYLfxX
s7pQkD4aWtbx4WlDO+kQiJpgpOZR0BAlEM/VFtF+8TO/YkkpKsR6fwu+6FBFrbwm
BPQpKR74v38WBtItfKQ6cGClUrKGM94IqzkzTmRexW/Bhx6xxziti151HjqUBf3o
fZBFDRl2dy7tUQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:26 2026 by rpki-client