Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
File: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft (raw, json)
Hash identifier: DRZFXliC+umqjg/nQE+B8R6o0LbticyS8ugU8RLlnmw=
Subject key identifier: 39:83:E9:26:4D:46:65:14:22:76:31:08:92:BB:F7:5E:7B:5B:D3:D1
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial: 019D37F6F3C2A19378B376463814E6799A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
Manifest number: 102A
Signing time: Sun 29 Mar 2026 05:00:24 +0000
Manifest this update: Sun 29 Mar 2026 05:00:24 +0000
Manifest next update: Mon 30 Mar 2026 05:00:24 +0000
Files and hashes: 1: JZV9Wmscw-_tBZW5yLoO12kB4nI.roa (hash: 9OD9YsHNLfEzpjHohpylUNvgGqpABxz0jPfe6Fwb8Ws=)
2: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl (hash: bhgACZGAKklM1rltt8g1jcNY8AtWcNF2AXcZgjtjHq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f3:c2:a1:93:78:b3:76:46:38:14:e6:79:9a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Validity
Not Before: Mar 29 05:00:24 2026 GMT
Not After : Mar 30 05:00:24 2026 GMT
Subject: CN=3983e9264d4665142276310892bbf75e7b5bd3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:27:d0:f7:72:81:60:ce:e9:89:f0:f8:93:
71:66:94:2e:f4:56:8f:3c:d7:bd:04:59:77:d3:c9:
c0:85:df:e2:89:27:f2:51:f6:dd:5a:8e:18:d5:ff:
1e:9c:08:2e:fd:9f:85:69:c3:bf:3e:39:91:b2:81:
77:89:56:68:b8:50:54:c5:e0:ce:b5:34:7b:02:1b:
04:0a:db:ce:44:07:55:43:84:08:2e:d9:99:bb:9f:
3e:8d:0c:3c:8f:97:52:8f:88:14:9d:f1:b5:8f:61:
7d:f7:93:96:4d:d6:af:c7:a5:84:ba:6c:c5:f8:f9:
94:eb:91:dc:a9:6d:50:7e:da:0a:ae:ca:a0:ba:6a:
76:a2:d4:36:d2:4b:8e:f7:30:58:7b:3d:a2:27:0b:
80:4d:6a:8d:53:12:24:f7:e8:fa:78:c0:17:e3:03:
2d:12:cf:bf:ed:f6:0b:28:5e:c7:4a:13:30:4a:4d:
6f:83:57:a6:d2:38:67:2b:1c:84:35:70:e8:a4:a1:
1b:8e:a9:80:1c:79:c9:35:81:5d:cd:dd:44:aa:21:
89:a0:42:4c:6c:34:dc:a0:e4:3b:82:ca:c6:e9:cb:
08:4e:dd:ae:cf:ab:7b:5b:9f:17:e2:e3:29:c7:38:
dd:fb:6a:97:fa:6f:fb:eb:fd:a5:df:fb:ce:d9:14:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:83:E9:26:4D:46:65:14:22:76:31:08:92:BB:F7:5E:7B:5B:D3:D1
X509v3 Authority Key Identifier:
keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:cb:6d:93:70:19:f5:9d:79:2f:c8:ba:9d:18:dd:5b:34:65:
a5:f7:b3:41:95:fd:7b:05:ea:73:bf:ed:a4:4d:8a:2c:05:a0:
a2:fe:90:fe:8f:eb:fd:1f:1c:78:cb:90:57:a3:ee:51:27:47:
1b:31:0e:a3:d0:6a:38:59:a8:50:cc:01:89:38:e0:27:1d:b4:
f6:e4:5d:82:18:68:5e:26:74:c3:80:b0:4c:c9:0a:8d:c4:2b:
5c:a7:6e:e0:fd:50:b7:c2:85:4d:92:71:5c:17:7a:c7:46:cb:
e0:c7:7b:dc:c0:a1:23:66:94:fd:c8:2f:13:53:e3:48:0c:30:
76:dd:a1:d0:52:f4:43:5a:c1:02:bc:e2:1e:f4:3f:4d:e1:8c:
35:f0:1a:8d:3d:11:39:31:7c:e7:55:34:d8:0a:e7:06:19:7b:
69:c8:d0:ec:28:c1:35:2b:0c:cb:5c:ff:5c:f0:09:41:08:0d:
8c:82:ca:00:ce:36:da:2c:5d:ae:0a:a6:b0:2b:1a:ab:3b:70:
4d:8e:6f:01:ff:a3:9f:bf:d5:d6:d9:18:20:98:16:46:2b:ae:
3d:22:81:a0:2a:4c:51:1f:b8:a9:d5:f0:cc:98:5c:b0:b7:8f:
a1:8d:d4:ff:bf:80:35:06:6d:bb:44:cf:b9:dc:f5:eb:2b:b7:
a3:a4:79:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039vPCoZN4s3ZGOBTmeZoaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MDQ3Yjk4N2JlOTc0Mjc4NWJhOGU4YjMzYWMwNzdiZjlj
N2EyMjIwHhcNMjYwMzI5MDUwMDI0WhcNMjYwMzMwMDUwMDI0WjAzMTEwLwYDVQQD
EygzOTgzZTkyNjRkNDY2NTE0MjI3NjMxMDg5MmJiZjc1ZTdiNWJkM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQMn0PdygWDO6Ynw+JNxZpQu9FaP
PNe9BFl308nAhd/iiSfyUfbdWo4Y1f8enAgu/Z+FacO/PjmRsoF3iVZouFBUxeDO
tTR7AhsECtvORAdVQ4QILtmZu58+jQw8j5dSj4gUnfG1j2F995OWTdavx6WEumzF
+PmU65HcqW1QftoKrsqgump2otQ20kuO9zBYez2iJwuATWqNUxIk9+j6eMAX4wMt
Es+/7fYLKF7HShMwSk1vg1em0jhnKxyENXDopKEbjqmAHHnJNYFdzd1EqiGJoEJM
bDTcoOQ7gsrG6csITt2uz6t7W58X4uMpxzjd+2qX+m/76/2l3/vO2RR6xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmD6SZNRmUUInYxCJK79157W9PRMB8GA1UdIwQY
MBaAFGcEe5h76XQnhbqOizOsB3v5x6IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYt
ZThlZGYyOTI0NWMwLzEvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYtZThlZGYyOTI0NWMw
LzEvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcttk3AZ
9Z15L8i6nRjdWzRlpfezQZX9ewXqc7/tpE2KLAWgov6Q/o/r/R8ceMuQV6PuUSdH
GzEOo9BqOFmoUMwBiTjgJx209uRdghhoXiZ0w4CwTMkKjcQrXKdu4P1Qt8KFTZJx
XBd6x0bL4Md73MChI2aU/cgvE1PjSAwwdt2h0FL0Q1rBArziHvQ/TeGMNfAajT0R
OTF851U02ArnBhl7acjQ7CjBNSsMy1z/XPAJQQgNjILKAM422ixdrgqmsCsaqztw
TY5vAf+jn7/V1tkYIJgWRiuuPSKBoCpMUR+4qdXwzJhcsLePoY3U/7+ANQZtu0TP
udz16yu3o6R5Tg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:10 2026 by rpki-client