Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
File: ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft (raw, json)
Hash identifier: l3lwtO46QgN+hJeYmhQb5xWWFbCKdqJhveOQQn+jJxo=
Subject key identifier: 9E:03:D2:AA:F1:A7:A6:12:E2:1A:14:13:A7:0E:40:FE:25:8D:EE:75
Authority key identifier: 64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
Certificate issuer: /CN=64d4054d1b62158b8335a2019f0548b3872a3443
Certificate serial: 019D33ACF5F38884F9AC731C4D38CAF25D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
Manifest number: AE
Signing time: Sat 28 Mar 2026 09:01:06 +0000
Manifest this update: Sat 28 Mar 2026 09:01:06 +0000
Manifest next update: Sun 29 Mar 2026 09:01:06 +0000
Files and hashes: 1: T7kOnECCHhXaKkkHKCvdyMncTyg.asa (hash: OxvLTxdGV0opdARXIVi3FFKGspBrVw8KchfSlANuVA0=)
2: TVkiRXXbiNeek8u54GLPamoS8ts.asa (hash: 4K43HTfZssyXoWOZbLXPc82k9xpp+VV2pw66WoB3LbU=)
3: ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl (hash: DI5xM5opk0pZ7ugK/u6LPXsFuOiW5fJChnkn9mNjHck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:f5:f3:88:84:f9:ac:73:1c:4d:38:ca:f2:5d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4054d1b62158b8335a2019f0548b3872a3443
Validity
Not Before: Mar 28 09:01:06 2026 GMT
Not After : Mar 29 09:01:06 2026 GMT
Subject: CN=9e03d2aaf1a7a612e21a1413a70e40fe258dee75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:71:bc:f0:88:ac:c0:90:f6:96:50:d3:ce:dd:
f8:95:a7:38:e0:02:a3:ec:a0:b2:2d:7a:51:e5:aa:
41:a8:33:ba:5d:57:3b:28:f5:a0:62:c0:34:7e:9a:
b3:e3:e7:06:e9:fd:1b:15:d1:7e:28:a4:62:c7:62:
75:f7:a5:fd:5c:90:00:18:95:ef:36:9f:00:fd:67:
f9:70:2d:94:f6:ad:e2:b8:a2:8e:f9:4c:96:d1:d7:
74:99:bc:ce:08:db:5e:6c:08:b1:3e:eb:c9:17:ed:
18:56:a4:a7:e6:83:53:2b:44:32:72:e1:74:22:c1:
22:bf:24:4b:a2:e4:35:eb:d2:2f:f0:a4:d0:02:42:
ce:52:31:be:be:1f:c9:c5:bb:5a:34:a4:d0:e0:0e:
21:62:28:2b:54:d9:a0:61:66:5c:5a:41:ef:f7:5f:
bc:1e:5c:d3:88:dd:19:f6:60:f7:95:8c:bf:9e:82:
4a:7f:50:b1:50:6d:f9:a5:31:4b:81:f7:b7:b8:98:
89:76:1b:f2:d7:43:ff:6f:52:b4:5e:2c:51:46:1a:
7a:1c:f1:13:06:fe:f6:87:b2:a9:e4:e5:96:55:f7:
50:7d:07:69:f7:70:21:c5:32:52:8d:71:34:0b:ce:
43:82:b9:b5:3f:f9:50:7a:c6:4a:2c:5a:73:43:d5:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:03:D2:AA:F1:A7:A6:12:E2:1A:14:13:A7:0E:40:FE:25:8D:EE:75
X509v3 Authority Key Identifier:
keyid:64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2f:68:dd:57:d9:13:62:f9:62:77:4d:d1:f3:83:20:c7:5e:
ce:dc:18:ec:ca:41:ac:46:d4:a4:69:a0:20:07:a5:fe:9b:70:
59:11:da:96:cb:ed:17:15:5c:6a:35:2d:87:fe:f6:03:66:1a:
10:b7:d2:1f:8a:32:50:00:f2:57:54:8e:03:cb:ed:78:2a:d7:
c7:f2:f6:79:08:96:34:aa:03:39:33:dc:0c:59:b4:17:22:d1:
89:3c:ee:05:9b:19:19:ad:ea:d9:75:f1:75:4b:97:d8:15:78:
43:29:67:2b:11:eb:3c:66:4d:12:6d:f9:4f:97:4a:2b:72:67:
e9:eb:60:f1:ba:14:fa:ae:77:b8:c6:2c:97:46:8f:49:2d:35:
98:e2:52:85:af:30:42:3f:3c:03:d4:f7:b6:f0:13:cc:67:97:
b4:2f:66:4d:f8:ac:ea:64:a0:ed:b8:d2:8f:df:03:de:cb:79:
80:72:f7:ca:1c:0b:2b:c0:20:19:1b:b5:f2:84:33:21:ca:c5:
c5:46:03:e0:38:3f:99:ba:9f:0b:34:cd:5a:dd:e9:9d:78:18:
e7:47:23:1a:e9:0e:03:ff:69:72:fa:07:86:a6:2c:f9:0f:6a:
18:c9:d7:4a:02:be:65:c2:72:f7:1c:60:eb:88:ec:52:75:97:
fd:9c:a9:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zrPXziIT5rHMcTTjK8l1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDQwNTRkMWI2MjE1OGI4MzM1YTIwMTlmMDU0OGIzODcy
YTM0NDMwHhcNMjYwMzI4MDkwMTA2WhcNMjYwMzI5MDkwMTA2WjAzMTEwLwYDVQQD
Eyg5ZTAzZDJhYWYxYTdhNjEyZTIxYTE0MTNhNzBlNDBmZTI1OGRlZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63G88IiswJD2llDTzt34lac44AKj
7KCyLXpR5apBqDO6XVc7KPWgYsA0fpqz4+cG6f0bFdF+KKRix2J196X9XJAAGJXv
Np8A/Wf5cC2U9q3iuKKO+UyW0dd0mbzOCNtebAixPuvJF+0YVqSn5oNTK0QycuF0
IsEivyRLouQ169Iv8KTQAkLOUjG+vh/JxbtaNKTQ4A4hYigrVNmgYWZcWkHv91+8
HlzTiN0Z9mD3lYy/noJKf1CxUG35pTFLgfe3uJiJdhvy10P/b1K0XixRRhp6HPET
Bv72h7Kp5OWWVfdQfQdp93AhxTJSjXE0C85Dgrm1P/lQesZKLFpzQ9WDUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4D0qrxp6YS4hoUE6cOQP4lje51MB8GA1UdIwQY
MBaAFGTUBU0bYhWLgzWiAZ8FSLOHKjRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMDBkNGUtNzUyOC00ZjVlLWIzNjUt
NmI0ODUyNTcwYjhhLzEvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMDBkNGUtNzUyOC00ZjVlLWIzNjUtNmI0ODUyNTcwYjhh
LzEvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfy9o3VfZ
E2L5YndN0fODIMdeztwY7MpBrEbUpGmgIAel/ptwWRHalsvtFxVcajUth/72A2Ya
ELfSH4oyUADyV1SOA8vteCrXx/L2eQiWNKoDOTPcDFm0FyLRiTzuBZsZGa3q2XXx
dUuX2BV4QylnKxHrPGZNEm35T5dKK3Jn6etg8boU+q53uMYsl0aPSS01mOJSha8w
Qj88A9T3tvATzGeXtC9mTfis6mSg7bjSj98D3st5gHL3yhwLK8AgGRu18oQzIcrF
xUYD4Dg/mbqfCzTNWt3pnXgY50cjGukOA/9pcvoHhqYs+Q9qGMnXSgK+ZcJy9xxg
64jsUnWX/Zyp4g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:34:57 2026 by rpki-client