Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
File: zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft (raw, json)
Hash identifier: fC4k3wRiVgpViPowEMcHpkD4lXSBchJq4MZxFW59Vv4=
Subject key identifier: C0:50:D3:1C:9A:16:E9:39:7B:93:20:3D:1A:D1:BB:3C:A0:67:9E:16
Authority key identifier: CE:81:E2:D5:6F:D9:F1:93:2D:BC:0F:21:63:29:94:2F:E2:3F:75:5A
Certificate issuer: /CN=ce81e2d56fd9f1932dbc0f216329942fe23f755a
Certificate serial: 019CABD97B8758EBE1BC811150D38287E61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
Manifest number: 0455
Signing time: Mon 02 Mar 2026 00:01:22 +0000
Manifest this update: Mon 02 Mar 2026 00:01:22 +0000
Manifest next update: Tue 03 Mar 2026 00:01:22 +0000
Files and hashes: 1: zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl (hash: VmaDvjWLY2Uh4pD55fxJ1N6JHh2zX92rAIuiLSXCV88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7b:87:58:eb:e1:bc:81:11:50:d3:82:87:e6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce81e2d56fd9f1932dbc0f216329942fe23f755a
Validity
Not Before: Mar 2 00:01:22 2026 GMT
Not After : Mar 3 00:01:22 2026 GMT
Subject: CN=c050d31c9a16e9397b93203d1ad1bb3ca0679e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:52:63:3a:99:7a:4e:e3:82:10:8b:e7:35:
da:3a:82:2c:8b:e2:ce:85:b7:bf:db:3b:a1:85:61:
65:36:48:09:c9:ea:43:df:6d:59:05:b0:86:6d:1a:
56:de:58:e4:3e:45:5c:c8:f9:82:f2:77:9b:b6:18:
22:90:b5:d7:09:f5:3e:3b:c3:de:7a:60:de:ca:cf:
24:a6:b6:94:5b:16:6c:24:f2:e0:56:7e:5a:28:35:
f4:4f:0a:70:3e:c6:a4:32:94:ae:b6:cd:e1:3f:cb:
b9:44:fb:27:c8:43:94:65:3d:b1:ec:6d:14:64:f0:
d5:0f:11:bc:e0:bd:0b:f6:12:25:95:c3:9a:39:5f:
a0:ff:9f:3f:f2:9b:38:58:1a:0a:82:5b:49:7c:e2:
ef:8a:bd:a7:63:ec:f5:6a:d6:19:47:89:16:25:69:
f3:e0:89:6c:71:51:0b:21:3d:18:d9:ca:da:d4:61:
55:6b:b2:a0:e2:3b:61:65:2e:be:d7:3a:9d:c5:09:
bf:be:64:9c:e1:fa:0a:6b:7d:49:cc:cb:e4:47:d6:
c0:d0:0a:d7:43:35:3e:cc:77:21:d2:d5:ea:e8:fa:
5e:77:51:8e:af:77:8d:62:2a:52:30:5e:99:da:26:
cd:53:a7:4f:38:98:a3:32:fc:69:ec:f0:18:1c:06:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:50:D3:1C:9A:16:E9:39:7B:93:20:3D:1A:D1:BB:3C:A0:67:9E:16
X509v3 Authority Key Identifier:
keyid:CE:81:E2:D5:6F:D9:F1:93:2D:BC:0F:21:63:29:94:2F:E2:3F:75:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c20cdc-b1a6-498b-8ccc-9493a74b5f75/1/zoHi1W_Z8ZMtvA8hYymUL-I_dVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:51:fd:0a:43:28:79:f9:5d:5c:55:89:a2:98:12:16:a9:13:
73:e2:0e:70:b6:a7:f6:1b:f2:13:5b:55:42:dd:0e:8a:7d:b0:
17:d3:2b:de:f7:f3:ee:d5:9d:9f:33:bc:c3:c7:d7:91:b1:05:
54:2a:78:e8:26:be:f9:a4:d5:23:02:aa:41:90:72:01:fa:ce:
c5:f9:79:57:ca:db:13:58:2c:49:d3:a8:20:4a:de:07:10:31:
af:ad:7b:31:9d:5b:ba:e1:30:d9:67:67:bb:06:e8:18:9a:4a:
ca:ed:d1:23:e6:9d:34:a9:49:ec:18:92:3b:03:f3:0e:da:a1:
a1:a8:61:76:ba:4c:2f:a5:b2:c2:15:00:9a:6d:63:a0:c5:63:
c4:00:4b:b5:26:45:05:70:c0:56:d3:06:0a:1a:e1:32:36:ae:
f8:ed:9c:c0:4a:e2:f3:32:1b:cf:cc:57:b8:3b:5c:6b:9b:6d:
ce:0a:48:e2:4e:eb:50:a7:3b:6c:73:24:0a:74:a8:11:32:6a:
30:06:41:59:f7:bd:e7:0b:68:32:b4:c6:b3:4f:98:da:db:f4:
05:72:a2:51:30:81:ec:3e:e8:3c:4a:17:a6:8d:0a:c0:f9:52:
7f:94:9c:e4:f2:5a:05:84:be:7d:c6:3c:25:a6:d8:be:cb:15:
05:c5:43:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2XuHWOvhvIERUNOCh+YdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlODFlMmQ1NmZkOWYxOTMyZGJjMGYyMTYzMjk5NDJmZTIz
Zjc1NWEwHhcNMjYwMzAyMDAwMTIyWhcNMjYwMzAzMDAwMTIyWjAzMTEwLwYDVQQD
EyhjMDUwZDMxYzlhMTZlOTM5N2I5MzIwM2QxYWQxYmIzY2EwNjc5ZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqdSYzqZek7jghCL5zXaOoIsi+LO
hbe/2zuhhWFlNkgJyepD321ZBbCGbRpW3ljkPkVcyPmC8nebthgikLXXCfU+O8Pe
emDeys8kpraUWxZsJPLgVn5aKDX0TwpwPsakMpSuts3hP8u5RPsnyEOUZT2x7G0U
ZPDVDxG84L0L9hIllcOaOV+g/58/8ps4WBoKgltJfOLvir2nY+z1atYZR4kWJWnz
4IlscVELIT0Y2cra1GFVa7Kg4jthZS6+1zqdxQm/vmSc4foKa31JzMvkR9bA0ArX
QzU+zHch0tXq6Pped1GOr3eNYipSMF6Z2ibNU6dPOJijMvxp7PAYHAZiywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBQ0xyaFuk5e5MgPRrRuzygZ54WMB8GA1UdIwQY
MBaAFM6B4tVv2fGTLbwPIWMplC/iP3VaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem9IaTFXX1o4Wk10dkE4aFl5bVVMLUlfZFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jMjBjZGMtYjFhNi00OThiLThjY2Mt
OTQ5M2E3NGI1Zjc1LzEvem9IaTFXX1o4Wk10dkE4aFl5bVVMLUlfZFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9jMjBjZGMtYjFhNi00OThiLThjY2MtOTQ5M2E3NGI1Zjc1
LzEvem9IaTFXX1o4Wk10dkE4aFl5bVVMLUlfZFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblH9CkMo
efldXFWJopgSFqkTc+IOcLan9hvyE1tVQt0Oin2wF9Mr3vfz7tWdnzO8w8fXkbEF
VCp46Ca++aTVIwKqQZByAfrOxfl5V8rbE1gsSdOoIEreBxAxr617MZ1buuEw2Wdn
uwboGJpKyu3RI+adNKlJ7BiSOwPzDtqhoahhdrpML6WywhUAmm1joMVjxABLtSZF
BXDAVtMGChrhMjau+O2cwEri8zIbz8xXuDtca5ttzgpI4k7rUKc7bHMkCnSoETJq
MAZBWfe95wtoMrTGs0+Y2tv0BXKiUTCB7D7oPEoXpo0KwPlSf5Sc5PJaBYS+fcY8
JabYvssVBcVD0Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:34 2026 by rpki-client