Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
File: ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json)
Hash identifier: gl5qMygR0QczDw9RqA70OPE2TqEiDV0rLmLULdAF/rI=
Subject key identifier: 61:3E:AA:68:41:65:66:97:F4:D7:32:52:AB:F2:12:2A:5F:B3:26:34
Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Certificate issuer: /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Certificate serial: 019D37C10AE1573723786E0A48F8F7754B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
Manifest number: 0E4D
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: 1zk3At_CW_6MtNUlvcs7PWL_MSY.roa (hash: Wx50m0MeMkdSzmVTbDYeihjHelr2/WxDpsYDzzYan64=)
2: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: tVa6Y4Gl3E3rca33T8PGn8I4wgMXMFfUBYrZc0wzG7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0a:e1:57:37:23:78:6e:0a:48:f8:f7:75:4b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=613eaa6841656697f4d73252abf2122a5fb32634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:51:63:13:c9:81:43:04:dc:b9:71:c3:30:
8a:2d:7e:be:8f:a3:0a:57:bd:43:ae:05:43:34:de:
8d:64:d1:6e:98:7f:86:ff:cc:90:c8:31:70:ce:f0:
af:99:df:8c:c9:6b:26:61:12:11:1c:89:df:35:40:
82:90:54:0e:ff:ca:19:bb:35:44:1c:06:4d:e7:96:
6b:73:8e:52:b4:4d:df:24:f1:b3:09:89:b5:17:99:
70:02:87:08:96:34:ed:86:f2:fb:48:38:02:ee:55:
78:9e:af:f3:07:ba:a9:ce:c6:26:c8:b5:69:a5:c5:
7e:09:4c:26:2f:f3:0c:8e:61:72:56:7a:e1:dc:fc:
92:f4:b1:12:6a:79:39:99:fb:75:11:cc:9e:62:83:
3b:45:b3:ce:ae:77:c8:d9:c6:cd:30:1f:92:29:a3:
81:44:ea:b9:73:28:7f:d9:72:d2:29:16:d2:78:67:
0d:1a:1e:59:c3:02:c7:a9:4a:1b:5b:b8:81:a6:dd:
ed:4d:4c:cb:3c:66:cd:29:8d:71:a2:c2:dd:c2:53:
cd:6f:5b:ad:05:67:c3:50:88:d0:e2:97:bb:5d:d8:
c8:b2:f9:59:f3:38:74:16:92:56:bf:51:86:f9:a0:
ce:37:74:1e:59:79:9f:29:35:59:32:3a:82:f5:d1:
3d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3E:AA:68:41:65:66:97:F4:D7:32:52:AB:F2:12:2A:5F:B3:26:34
X509v3 Authority Key Identifier:
keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f2:92:d5:3c:b0:9f:04:2b:ac:5e:8f:4d:ba:98:2a:ce:3f:
bd:5d:1c:f1:ad:bc:37:62:ad:7e:78:59:19:96:78:fc:d6:80:
34:58:4f:b0:79:f9:b4:94:8d:b4:9f:0b:6e:50:0d:15:aa:62:
41:1c:d8:c2:f9:c2:9f:51:7b:f3:e3:cf:56:99:85:74:1e:6b:
18:e9:02:a1:9a:59:c6:a5:c7:47:fd:8f:13:7d:14:4e:a7:75:
95:17:8f:45:16:8f:33:45:9d:0b:2c:2b:d2:a6:d8:85:24:df:
95:7e:8a:b6:c0:bd:fe:38:44:15:fa:79:ef:79:f7:a2:22:52:
7e:7a:ae:43:4d:13:c8:d8:ae:34:ca:12:90:f8:b7:db:d5:7c:
06:76:50:fe:dd:8c:f5:bc:d2:65:8c:d1:bc:7e:6e:4d:16:30:
1f:87:82:42:d5:59:11:a0:33:77:1d:0e:b1:53:1c:a8:71:7e:
2a:c4:b9:70:1d:7a:44:89:bf:07:7c:84:2e:da:0f:c7:95:bd:
14:b9:c5:8e:4d:9f:a3:fb:03:ba:7e:86:37:61:14:38:5f:f2:
2a:31:4b:a9:64:40:8a:b6:65:d3:e0:55:31:9b:03:e7:b7:d8:
cf:95:8b:5b:1c:f4:05:3f:1a:40:1b:4e:9f:26:77:90:b3:82:
2d:2a:e7:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wQrhVzcjeG4KSPj3dUuLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZWI4ZWY0NDE4M2Y4ZTNhOWM4ODdhN2JlMjZiM2YwNzEz
YzEzYmQwHhcNMjYwMzI5MDQwMTMwWhcNMjYwMzMwMDQwMTMwWjAzMTEwLwYDVQQD
Eyg2MTNlYWE2ODQxNjU2Njk3ZjRkNzMyNTJhYmYyMTIyYTVmYjMyNjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAxRYxPJgUME3LlxwzCKLX6+j6MK
V71DrgVDNN6NZNFumH+G/8yQyDFwzvCvmd+MyWsmYRIRHInfNUCCkFQO/8oZuzVE
HAZN55Zrc45StE3fJPGzCYm1F5lwAocIljTthvL7SDgC7lV4nq/zB7qpzsYmyLVp
pcV+CUwmL/MMjmFyVnrh3PyS9LESank5mft1EcyeYoM7RbPOrnfI2cbNMB+SKaOB
ROq5cyh/2XLSKRbSeGcNGh5ZwwLHqUobW7iBpt3tTUzLPGbNKY1xosLdwlPNb1ut
BWfDUIjQ4pe7XdjIsvlZ8zh0FpJWv1GG+aDON3QeWXmfKTVZMjqC9dE9vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGE+qmhBZWaX9NcyUqvyEipfsyY0MB8GA1UdIwQY
MBaAFGXrjvRBg/jjqciHp74ms/BxPBO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEt
YWQ5ZTFhMDUxMGI5LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEtYWQ5ZTFhMDUxMGI5
LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/KS1Tyw
nwQrrF6PTbqYKs4/vV0c8a28N2KtfnhZGZZ4/NaANFhPsHn5tJSNtJ8LblANFapi
QRzYwvnCn1F78+PPVpmFdB5rGOkCoZpZxqXHR/2PE30UTqd1lRePRRaPM0WdCywr
0qbYhSTflX6KtsC9/jhEFfp573n3oiJSfnquQ00TyNiuNMoSkPi329V8BnZQ/t2M
9bzSZYzRvH5uTRYwH4eCQtVZEaAzdx0OsVMcqHF+KsS5cB16RIm/B3yELtoPx5W9
FLnFjk2fo/sDun6GN2EUOF/yKjFLqWRAirZl0+BVMZsD57fYz5WLWxz0BT8aQBtO
nyZ3kLOCLSrnrA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:46 2026 by rpki-client