Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: GoR6uZg/balhFOwe8d2cM1SHtAFTV84mvqvB7nH0glc=
Subject key identifier: 79:09:44:AE:D9:EC:71:25:A9:79:16:43:D6:FD:05:76:42:A5:9C:91
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019D3940C7907B4311E835B149CAC6D14AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 06EF
Signing time: Sun 29 Mar 2026 11:00:39 +0000
Manifest this update: Sun 29 Mar 2026 11:00:39 +0000
Manifest next update: Mon 30 Mar 2026 11:00:39 +0000
Files and hashes: 1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: ZNakWuvteY9kjuKrKTj3VoXH2G6omFqfTCT4WcBEszU=)
4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c7:90:7b:43:11:e8:35:b1:49:ca:c6:d1:4a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Mar 29 11:00:39 2026 GMT
Not After : Mar 30 11:00:39 2026 GMT
Subject: CN=790944aed9ec7125a9791643d6fd057642a59c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:0a:01:46:c4:30:66:f7:74:40:1d:bf:5d:
b0:cf:0b:bb:a3:78:c5:c6:7a:f8:91:5e:58:2d:00:
69:bf:27:8f:60:1e:9a:3a:33:c0:b5:0c:b3:81:87:
3a:df:d7:19:8a:07:d4:c3:9d:e7:e2:4d:8f:a7:5f:
70:f7:a2:85:17:44:ec:09:4f:29:79:d7:8c:6d:8b:
e3:e8:e3:9f:0c:3f:eb:5e:1f:8a:4f:16:fc:70:68:
f3:0d:41:bb:d4:c3:0a:a4:5a:7f:be:39:76:66:fb:
e5:4a:b3:9c:f9:bb:ad:e0:62:84:ec:05:c3:c1:94:
0a:cd:14:4a:a5:8e:95:46:d5:d8:bc:dd:8a:31:96:
29:43:79:ee:da:ef:8a:c6:97:99:33:68:1c:51:a8:
da:60:b1:72:62:98:d4:fd:5d:c7:28:92:45:bf:ca:
53:68:8c:33:7d:59:5b:f0:52:6a:52:6e:29:68:c9:
cd:34:cc:8c:69:6d:92:ca:7f:1b:b9:ef:23:21:0b:
da:da:4a:ce:60:3e:3a:6e:42:82:45:4b:ca:71:b7:
49:60:50:43:6f:af:e9:8c:3a:2c:e0:82:d0:95:91:
5d:3d:00:34:78:93:fe:b6:21:a5:61:69:1d:a7:4d:
73:17:40:b2:99:62:b9:c5:e8:7f:85:76:55:b1:ab:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:44:AE:D9:EC:71:25:A9:79:16:43:D6:FD:05:76:42:A5:9C:91
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5a:d7:30:ee:70:a0:d0:00:03:f6:b2:a5:0b:3a:c7:60:eb:
db:9f:3d:9b:b2:6b:8c:1b:44:00:49:86:a2:8e:f1:78:c4:6a:
cf:b0:a9:7c:65:6d:00:90:2b:7d:34:47:f4:04:6e:cb:0f:23:
31:13:ee:d7:39:d0:38:e7:4e:db:28:c3:66:8e:c3:88:4d:6d:
05:fa:49:f5:97:51:28:69:e4:a0:48:d1:4f:49:4b:3c:cd:84:
f6:20:f4:06:3a:3a:85:de:44:b5:81:0b:b8:7d:ab:13:45:8d:
a4:83:64:5d:0b:de:6e:b0:8c:e1:71:3e:62:73:10:a5:a8:37:
6c:fe:98:53:45:18:99:d9:cb:d3:82:78:f6:6a:97:3e:58:cb:
da:d3:fc:7a:da:8d:22:7a:2f:41:32:86:ba:23:13:47:0b:ec:
cd:49:7d:a5:6c:8c:90:0e:07:c0:d0:a1:d9:e7:4b:c3:ab:48:
98:5a:1d:8a:16:5d:6d:c6:9c:b1:a3:b1:62:a4:5e:e0:b2:46:
90:7e:b7:96:b6:f1:b0:5b:dd:cf:d5:a3:9b:5c:18:17:78:4d:
e3:9d:a1:73:18:a2:d3:4f:82:1b:c2:0b:98:8a:b0:78:af:b1:
a6:a4:47:3a:88:24:d9:fb:73:81:ae:d2:58:cf:de:4e:04:4e:
e4:8b:68:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QMeQe0MR6DWxScrG0UroMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MGU2MDc3OWYzY2Q0ZDAzZDVlNTA3ODQwZjVmYTJhMzFh
NmFiOGQwHhcNMjYwMzI5MTEwMDM5WhcNMjYwMzMwMTEwMDM5WjAzMTEwLwYDVQQD
Eyg3OTA5NDRhZWQ5ZWM3MTI1YTk3OTE2NDNkNmZkMDU3NjQyYTU5YzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeYKAUbEMGb3dEAdv12wzwu7o3jF
xnr4kV5YLQBpvyePYB6aOjPAtQyzgYc639cZigfUw53n4k2Pp19w96KFF0TsCU8p
edeMbYvj6OOfDD/rXh+KTxb8cGjzDUG71MMKpFp/vjl2ZvvlSrOc+but4GKE7AXD
wZQKzRRKpY6VRtXYvN2KMZYpQ3nu2u+KxpeZM2gcUajaYLFyYpjU/V3HKJJFv8pT
aIwzfVlb8FJqUm4paMnNNMyMaW2Syn8bue8jIQva2krOYD46bkKCRUvKcbdJYFBD
b6/pjDos4ILQlZFdPQA0eJP+tiGlYWkdp01zF0CymWK5xeh/hXZVsas0cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkJRK7Z7HElqXkWQ9b9BXZCpZyRMB8GA1UdIwQY
MBaAFGcOYHefPNTQPV5QeED1+ioxpquNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUt
MzUwMDRhNjcxZWIzLzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUtMzUwMDRhNjcxZWIz
LzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFrXMO5w
oNAAA/aypQs6x2Dr2589m7JrjBtEAEmGoo7xeMRqz7CpfGVtAJArfTRH9ARuyw8j
MRPu1znQOOdO2yjDZo7DiE1tBfpJ9ZdRKGnkoEjRT0lLPM2E9iD0Bjo6hd5EtYEL
uH2rE0WNpINkXQvebrCM4XE+YnMQpag3bP6YU0UYmdnL04J49mqXPljL2tP8etqN
InovQTKGuiMTRwvszUl9pWyMkA4HwNCh2edLw6tImFodihZdbcacsaOxYqRe4LJG
kH63lrbxsFvdz9Wjm1wYF3hN452hcxii00+CG8ILmIqweK+xpqRHOogk2ftzga7S
WM/eTgRO5Ito4w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:09 2026 by rpki-client