Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: VQqFzqV6wtDciCwEyMWSIwgtRcPR8gr1gsldF3Dr8Bo=
Subject key identifier: 58:B9:FF:87:38:7F:B0:7A:53:59:FD:42:CE:04:1A:F5:56:65:30:F6
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 019D39779CD4CF16D0FBFCEAF225EBD5188D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 04A3
Signing time: Sun 29 Mar 2026 12:00:33 +0000
Manifest this update: Sun 29 Mar 2026 12:00:33 +0000
Manifest next update: Mon 30 Mar 2026 12:00:33 +0000
Files and hashes: 1: PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa (hash: kJSRxmzdiI7BIFbxUX/bJ1SrkVhLp4C99F6EL5K5kVE=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: AdG+b0vKglxhCy96gKk5IxZtHl7l0yeoj39gnpNwH8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:9c:d4:cf:16:d0:fb:fc:ea:f2:25:eb:d5:18:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Mar 29 12:00:33 2026 GMT
Not After : Mar 30 12:00:33 2026 GMT
Subject: CN=58b9ff87387fb07a5359fd42ce041af5566530f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3f:21:14:3e:fa:8d:1f:a3:d7:44:5a:69:95:
ea:35:7d:0e:bb:9b:6d:80:c5:16:6a:e6:cd:17:14:
16:5e:59:f9:48:b5:c8:fc:e2:20:ce:b1:3b:35:15:
c8:bc:ea:37:81:3d:db:80:26:96:be:33:19:67:f1:
5d:d0:24:33:3f:84:e6:a6:45:c5:e2:b6:fb:a4:c7:
00:b4:1a:c1:4c:6e:81:94:dc:39:c9:85:3c:b9:a7:
55:0b:8d:57:06:4f:a1:74:a5:b7:45:b8:20:d6:64:
45:5c:68:26:36:8c:33:23:fd:c5:d2:56:0f:d4:0d:
b2:31:df:8a:90:d2:c0:f9:80:4c:fb:39:71:6e:d9:
0e:55:77:e2:ff:6b:5c:60:ae:6d:38:2c:bf:7d:57:
ba:a8:c2:3d:0f:6e:65:9b:ad:ae:c8:13:16:5e:7b:
72:f1:6b:1f:61:75:cc:fd:4e:97:3c:92:d5:10:a9:
db:52:5f:d4:53:80:17:0e:07:39:a9:cf:7c:a5:b7:
96:c1:69:80:7f:ae:b5:66:e0:a4:3e:4b:84:7b:d1:
45:3c:70:36:ff:60:e9:ce:b3:62:a5:85:c6:8d:d2:
2d:38:de:91:fb:e1:ed:4b:25:0c:dd:eb:8a:9a:7e:
e4:c7:96:09:19:1d:e0:6b:06:f1:b9:47:d0:d4:b9:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B9:FF:87:38:7F:B0:7A:53:59:FD:42:CE:04:1A:F5:56:65:30:F6
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ae:ec:2b:93:ac:02:03:b8:19:5a:c9:52:06:ae:b5:2c:ae:
c5:39:14:b5:2d:0f:7f:e3:d3:05:ff:78:5f:b3:a7:7c:7e:bb:
bf:ba:c4:c9:f1:9e:85:1d:a9:61:f6:a7:0f:68:fa:de:be:39:
59:c2:31:86:a7:ab:f4:19:62:0b:b3:60:a7:5f:78:1d:b1:1b:
45:a3:62:13:f1:2f:ed:13:86:6c:a8:62:ce:4f:d2:a2:a5:fd:
df:86:85:9c:67:3d:1f:d5:1e:16:22:78:a8:6f:af:b1:46:f6:
36:aa:e5:f0:a1:70:9f:d2:96:7f:24:cf:1d:30:dd:90:f5:5e:
44:ea:48:6b:28:ed:fa:ba:bc:4c:cf:4f:16:60:bb:d6:ac:f5:
57:7b:43:53:19:63:ee:0a:75:96:ba:12:50:1d:b0:20:b7:bb:
d7:77:3c:32:0b:38:9c:4a:6d:a7:a7:31:0f:7f:5c:9c:b4:a5:
98:2e:43:d2:52:4f:88:94:22:d6:d5:f4:59:0a:4a:91:f8:5e:
71:4f:1d:59:37:ef:bc:59:73:a7:ce:e0:48:f0:1d:43:3e:a8:
e8:fe:60:47:ac:b8:37:de:1c:e8:9e:78:2b:b1:67:ff:7a:60:
6d:45:f0:81:eb:80:b5:fd:47:d4:be:27:27:77:38:39:23:1b:
c8:5f:53:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d5zUzxbQ+/zq8iXr1RiNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTI4MDExOWY0NDBlYjk5YzFlNjRkNzM1ZjJkYjFlZmNm
OTM4MjcwHhcNMjYwMzI5MTIwMDMzWhcNMjYwMzMwMTIwMDMzWjAzMTEwLwYDVQQD
Eyg1OGI5ZmY4NzM4N2ZiMDdhNTM1OWZkNDJjZTA0MWFmNTU2NjUzMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3T8hFD76jR+j10RaaZXqNX0Ou5tt
gMUWaubNFxQWXln5SLXI/OIgzrE7NRXIvOo3gT3bgCaWvjMZZ/Fd0CQzP4TmpkXF
4rb7pMcAtBrBTG6BlNw5yYU8uadVC41XBk+hdKW3Rbgg1mRFXGgmNowzI/3F0lYP
1A2yMd+KkNLA+YBM+zlxbtkOVXfi/2tcYK5tOCy/fVe6qMI9D25lm62uyBMWXnty
8WsfYXXM/U6XPJLVEKnbUl/UU4AXDgc5qc98pbeWwWmAf661ZuCkPkuEe9FFPHA2
/2DpzrNipYXGjdItON6R++HtSyUM3euKmn7kx5YJGR3gawbxuUfQ1LkX/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFi5/4c4f7B6U1n9Qs4EGvVWZTD2MB8GA1UdIwQY
MBaAFM8SgBGfRA65nB5k1zXy2x78+TgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDIt
ZDIzNmQ5NmNjMmFmLzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDItZDIzNmQ5NmNjMmFm
LzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAda7sK5Os
AgO4GVrJUgautSyuxTkUtS0Pf+PTBf94X7OnfH67v7rEyfGehR2pYfanD2j63r45
WcIxhqer9BliC7Ngp194HbEbRaNiE/Ev7ROGbKhizk/SoqX934aFnGc9H9UeFiJ4
qG+vsUb2Nqrl8KFwn9KWfyTPHTDdkPVeROpIayjt+rq8TM9PFmC71qz1V3tDUxlj
7gp1lroSUB2wILe713c8Mgs4nEptp6cxD39cnLSlmC5D0lJPiJQi1tX0WQpKkfhe
cU8dWTfvvFlzp87gSPAdQz6o6P5gR6y4N94c6J54K7Fn/3pgbUXwgeuAtf1H1L4n
J3c4OSMbyF9T2g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:31:55 2026 by rpki-client