Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: lI3rgJrJ2YQ0S1S/bt8Nk7oqP+hesIgnkISwvAUNuUg=
Subject key identifier: E9:14:A9:7B:0A:AD:2C:06:CC:F9:BA:30:9F:FA:D1:A2:E4:AB:81:24
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 019CDCC5878CBF0229512A51D311F480AB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 185E
Signing time: Wed 11 Mar 2026 12:00:58 +0000
Manifest this update: Wed 11 Mar 2026 12:00:58 +0000
Manifest next update: Thu 12 Mar 2026 12:00:58 +0000
Files and hashes: 1: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: w4MrdOvocgfQwV0C1oPu8OHee/tHiP14T1UaYonG49Q=)
2: jq3mq-50R-JOu-sxSGPaEm55e08.roa (hash: taGtXrf0l3O9eeA97Wyzm9CoWyPxNXpqgCP99+lV8Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:c5:87:8c:bf:02:29:51:2a:51:d3:11:f4:80:ab:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Mar 11 12:00:58 2026 GMT
Not After : Mar 12 12:00:58 2026 GMT
Subject: CN=e914a97b0aad2c06ccf9ba309ffad1a2e4ab8124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:42:d7:c6:39:27:46:ae:c2:57:27:4a:f5:
3a:95:6d:65:ef:16:be:07:74:9c:a9:76:c1:56:d4:
5c:f7:36:05:3e:dc:bb:81:5b:53:cb:86:e2:94:f7:
9c:c5:eb:6f:02:24:1b:42:78:f8:9f:b7:11:d8:87:
f7:73:54:78:80:a3:e4:05:ca:1f:76:eb:9f:76:23:
a3:e2:0d:aa:da:02:6e:74:52:eb:aa:2f:10:94:fa:
1d:fd:ae:6a:20:b4:7d:4b:29:88:3e:89:e8:7a:17:
5c:78:9b:59:a9:85:b3:77:9a:a2:dd:53:96:8e:3b:
20:aa:0f:28:c2:4b:a6:f3:77:13:ab:53:db:7e:7f:
d7:81:9e:f4:49:47:2b:a4:ff:52:32:d1:9f:23:98:
69:66:9a:b6:76:41:31:c1:75:ca:07:4f:4e:47:a0:
00:69:a7:d6:4b:55:e7:5e:9c:9d:a5:8d:80:b9:32:
e8:7a:a8:9b:6d:7f:b1:04:c0:87:22:9e:45:b2:09:
5e:c8:5d:43:82:39:52:92:3e:b3:dd:e5:6f:79:bd:
7c:68:e0:8e:ec:f9:21:61:a3:32:87:3a:cd:63:72:
af:34:17:4f:f3:1f:3b:bd:d8:56:3e:c7:9d:78:9c:
ad:d6:bc:da:a4:8a:f3:31:08:0a:c3:1a:aa:93:48:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:14:A9:7B:0A:AD:2C:06:CC:F9:BA:30:9F:FA:D1:A2:E4:AB:81:24
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1c:fd:7e:93:69:65:6d:dc:f3:25:65:08:8d:38:85:60:46:
c3:b4:42:2e:4f:7a:de:c8:f7:61:b4:db:ad:4d:88:c7:ad:5d:
82:07:86:05:95:ea:be:ae:d9:e4:99:c9:20:9d:81:95:92:5b:
df:00:1d:45:de:f6:a1:ab:bf:e7:e1:9a:f8:f0:bc:f0:70:be:
bb:34:fd:d7:90:88:6a:b2:a4:cf:c7:08:1b:9b:ac:1c:61:40:
de:f6:e9:c6:66:ab:ec:66:c8:5a:3e:88:80:0f:f7:ab:3b:7a:
93:78:39:0b:f2:08:22:46:ee:ea:99:69:92:76:47:93:03:32:
57:f5:92:c2:bd:8d:1b:ef:8e:66:82:a7:40:76:d2:c2:18:e6:
70:ec:7d:5d:b1:50:67:d2:6e:4e:b8:ea:74:ee:cc:4f:86:f7:
0f:30:d3:30:6d:87:6e:71:21:65:96:63:61:6b:07:5a:8b:8c:
ae:2b:6f:dd:dc:4a:81:c1:44:e4:be:ff:09:49:9e:4d:7b:df:
5c:05:65:89:52:0f:84:a9:a5:6f:4b:14:a1:7d:09:e3:a1:b3:
c7:80:4c:b0:1c:80:07:ba:06:d4:18:fb:7e:ff:19:c7:db:e6:
48:05:ad:55:7c:05:67:96:22:ed:7f:5e:d9:1d:bb:44:e7:e1:
28:b2:03:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzcxYeMvwIpUSpR0xH0gKtqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTlmNzFlMTVjMGYzOGNlYmEyNTdkMzAzMDRlZDQ0YmVh
ODdjNTAwHhcNMjYwMzExMTIwMDU4WhcNMjYwMzEyMTIwMDU4WjAzMTEwLwYDVQQD
EyhlOTE0YTk3YjBhYWQyYzA2Y2NmOWJhMzA5ZmZhZDFhMmU0YWI4MTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IVC18Y5J0auwlcnSvU6lW1l7xa+
B3ScqXbBVtRc9zYFPty7gVtTy4bilPecxetvAiQbQnj4n7cR2If3c1R4gKPkBcof
duufdiOj4g2q2gJudFLrqi8QlPod/a5qILR9SymIPonoehdceJtZqYWzd5qi3VOW
jjsgqg8owkum83cTq1Pbfn/XgZ70SUcrpP9SMtGfI5hpZpq2dkExwXXKB09OR6AA
aafWS1XnXpydpY2AuTLoeqibbX+xBMCHIp5FsgleyF1DgjlSkj6z3eVveb18aOCO
7PkhYaMyhzrNY3KvNBdP8x87vdhWPsedeJyt1rzapIrzMQgKwxqqk0jkoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkUqXsKrSwGzPm6MJ/60aLkq4EkMB8GA1UdIwQY
MBaAFGSZ9x4VwPOM66JX0wME7US+qHxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi80ZjUxZWYtYWRjNi00YTFjLTgyZDct
NTc4NWIxNTczYTY5LzEvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi80ZjUxZWYtYWRjNi00YTFjLTgyZDctNTc4NWIxNTczYTY5
LzEvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahz9fpNp
ZW3c8yVlCI04hWBGw7RCLk963sj3YbTbrU2Ix61dggeGBZXqvq7Z5JnJIJ2BlZJb
3wAdRd72oau/5+Ga+PC88HC+uzT915CIarKkz8cIG5usHGFA3vbpxmar7GbIWj6I
gA/3qzt6k3g5C/IIIkbu6plpknZHkwMyV/WSwr2NG++OZoKnQHbSwhjmcOx9XbFQ
Z9JuTrjqdO7MT4b3DzDTMG2HbnEhZZZjYWsHWouMritv3dxKgcFE5L7/CUmeTXvf
XAVliVIPhKmlb0sUoX0J46Gzx4BMsByAB7oG1Bj7fv8Zx9vmSAWtVXwFZ5Yi7X9e
2R27ROfhKLIDPg==
-----END CERTIFICATE-----
Generated at Wed Mar 11 15:31:28 2026 by rpki-client