Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier: rFSrd87mqXqPdeQzKwAWtlfKgN90wJ01hI6XoYPfmtI=
Subject key identifier: 3B:73:4E:9F:3C:9C:6E:AB:16:DA:4A:94:AD:7C:A3:78:A9:EE:28:47
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 019D37C0F3F736C8DC69D814D42B6DC82B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number: 15D6
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: 4Vb2Z58skB5iaPHsQ2kB44NxzFQ.roa (hash: 5A5FJnxgAX+cotWcxBj+MU91tiU2mlONPgMHabpzNSY=)
2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: VeUOqrQQL9H7FW6pSkwXv3YyYg4qVXkUlcSS9frBul8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f3:f7:36:c8:dc:69:d8:14:d4:2b:6d:c8:2b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=3b734e9f3c9c6eab16da4a94ad7ca378a9ee2847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:6e:19:b8:a0:e5:69:04:db:b1:0f:f0:4b:
21:e7:4d:a7:fe:83:03:ee:87:b3:d4:60:00:47:9a:
ab:f7:0f:1f:1e:b2:3b:91:4e:54:7d:0d:02:a5:04:
fc:1a:c1:5d:a1:86:e7:68:23:c2:23:7e:06:8e:bf:
6e:fd:00:64:ed:94:09:63:33:dd:91:01:0b:7a:c1:
57:72:3b:ef:88:c4:31:a5:7a:39:d0:24:93:e6:a1:
bb:46:83:88:86:c0:32:20:e2:c0:2e:fc:ec:1c:be:
5c:c9:7a:7a:87:1f:57:a7:20:a9:96:4f:73:a1:53:
2a:4c:4e:bf:5f:9f:f8:20:93:d9:26:92:3d:30:f3:
66:64:ab:7e:35:8f:b2:a0:26:3c:09:6d:e2:8b:c2:
3a:15:43:00:7f:7a:2a:cb:6c:77:c6:1e:a5:5b:09:
a0:7e:7d:18:ec:6c:c9:cd:ab:e8:bc:16:49:ef:04:
10:ae:fe:cc:b8:f9:24:f5:24:1a:3c:af:65:5e:bc:
b6:b7:92:28:eb:50:45:b5:42:c0:2c:ef:53:aa:1d:
51:03:09:10:27:7d:08:7c:f9:e8:6e:c6:6e:64:53:
d3:04:7b:9d:99:19:9c:94:6c:be:d5:cc:dc:5b:e1:
84:d5:30:e9:6a:24:01:97:c7:ef:49:96:e0:01:49:
f1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:73:4E:9F:3C:9C:6E:AB:16:DA:4A:94:AD:7C:A3:78:A9:EE:28:47
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a1:7c:7c:fb:d1:d3:1d:02:d8:29:f9:f6:07:ca:36:ec:09:
0a:7e:cb:89:79:5f:d7:17:0f:0c:29:a3:58:0b:49:ae:38:53:
2c:60:44:fc:09:21:55:2a:ba:35:63:7f:47:8f:7e:6a:74:e1:
5a:97:4c:59:a9:b3:6b:46:a7:e8:03:86:7b:69:90:04:5b:50:
1c:64:93:01:21:28:e7:2b:bf:2f:eb:70:3d:ae:38:e1:07:51:
40:9e:4d:fd:a5:d3:5e:86:9d:1d:90:c2:ee:60:14:87:5c:63:
33:3e:87:43:3f:76:3d:a2:f0:2d:f1:ab:14:3c:1b:91:1a:34:
ce:16:9d:e3:92:2b:52:0c:18:42:e2:3d:f6:5d:71:22:b9:38:
f2:7f:ad:f1:3c:54:b7:06:9f:4f:bb:eb:c6:f7:7e:6a:50:b8:
78:43:81:93:e3:e9:44:d6:68:c5:2f:02:6a:b2:c9:08:78:fe:
43:c4:9b:96:27:b5:c3:04:4d:32:50:9c:66:47:34:04:bf:72:
9c:09:61:41:7a:2d:4c:1c:81:7b:1f:fc:fd:e7:1d:9d:63:21:
bd:de:e5:b7:ed:bd:c6:b4:bd:77:3c:e7:72:41:61:a2:b0:e2:
a3:00:30:5f:f9:9f:5d:a8:92:9b:0a:c9:50:bd:87:8f:10:61:
2a:c4:93:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wPP3NsjcadgU1CttyCsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmY1NWQzNzcxMjdmMjhjZTI2Yjc4ZmQ4M2JlY2Y0MWJl
Y2FkNGIwHhcNMjYwMzI5MDQwMTI1WhcNMjYwMzMwMDQwMTI1WjAzMTEwLwYDVQQD
EygzYjczNGU5ZjNjOWM2ZWFiMTZkYTRhOTRhZDdjYTM3OGE5ZWUyODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/VuGbig5WkE27EP8Esh502n/oMD
7oez1GAAR5qr9w8fHrI7kU5UfQ0CpQT8GsFdoYbnaCPCI34Gjr9u/QBk7ZQJYzPd
kQELesFXcjvviMQxpXo50CST5qG7RoOIhsAyIOLALvzsHL5cyXp6hx9XpyCplk9z
oVMqTE6/X5/4IJPZJpI9MPNmZKt+NY+yoCY8CW3ii8I6FUMAf3oqy2x3xh6lWwmg
fn0Y7GzJzavovBZJ7wQQrv7MuPkk9SQaPK9lXry2t5Io61BFtULALO9Tqh1RAwkQ
J30IfPnobsZuZFPTBHudmRmclGy+1czcW+GE1TDpaiQBl8fvSZbgAUnxywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtzTp88nG6rFtpKlK18o3ip7ihHMB8GA1UdIwQY
MBaAFGYvVdN3En8ozia3j9g77PQb7K1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zODhjNzAtZTRjNy00MjBkLTgxODgt
OGJlMTQ2MjUzMzU2LzEvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zODhjNzAtZTRjNy00MjBkLTgxODgtOGJlMTQ2MjUzMzU2
LzEvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6F8fPvR
0x0C2Cn59gfKNuwJCn7LiXlf1xcPDCmjWAtJrjhTLGBE/AkhVSq6NWN/R49+anTh
WpdMWamza0an6AOGe2mQBFtQHGSTASEo5yu/L+twPa444QdRQJ5N/aXTXoadHZDC
7mAUh1xjMz6HQz92PaLwLfGrFDwbkRo0zhad45IrUgwYQuI99l1xIrk48n+t8TxU
twafT7vrxvd+alC4eEOBk+PpRNZoxS8CarLJCHj+Q8Sblie1wwRNMlCcZkc0BL9y
nAlhQXotTByBex/8/ecdnWMhvd7lt+29xrS9dzznckFhorDiowAwX/mfXaiSmwrJ
UL2HjxBhKsSTpw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:15 2026 by rpki-client