Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
File: ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft (raw, json)
Hash identifier: UtC1R29NspeV0smeEc0sZBIpu/a0k8R286XCr3AKgyg=
Subject key identifier: D9:3B:76:66:FD:4A:C5:89:4F:E8:1D:7E:85:5F:63:5E:94:64:AE:06
Authority key identifier: 64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
Certificate issuer: /CN=64d4054d1b62158b8335a2019f0548b3872a3443
Certificate serial: 019CED87404B1DB70524F382DE054AC10168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
Manifest number: 87
Signing time: Sat 14 Mar 2026 18:06:29 +0000
Manifest this update: Sat 14 Mar 2026 18:06:29 +0000
Manifest next update: Sun 15 Mar 2026 18:06:29 +0000
Files and hashes: 1: ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl (hash: 3l7t1eWXhH9QB1a9GLEYOSn06Hqi04tWEXpio/nLatA=)
2: qeUHZtnPD-NmkCbhWl9Z3Vhbpuk.asa (hash: UOGMmIzeH+bgLM/5CJEFkq46ttFJLEICvgKfPJi3WNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:87:40:4b:1d:b7:05:24:f3:82:de:05:4a:c1:01:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4054d1b62158b8335a2019f0548b3872a3443
Validity
Not Before: Mar 14 18:06:29 2026 GMT
Not After : Mar 15 18:06:29 2026 GMT
Subject: CN=d93b7666fd4ac5894fe81d7e855f635e9464ae06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:28:90:53:b9:36:1d:6f:e6:24:65:8e:12:
7c:ec:a1:ca:ea:70:e3:32:e0:51:39:d5:45:4b:95:
18:08:5c:b5:4d:d0:ad:b8:bb:9e:63:9d:43:7a:0e:
72:ea:19:25:53:5b:5f:15:7f:11:c8:ac:52:a4:cd:
34:40:5c:5b:5a:d7:05:70:90:70:25:11:46:6a:63:
7e:a1:cc:0b:60:cd:30:9f:07:ac:3e:4a:58:43:cb:
71:06:92:ad:1e:cc:60:d0:a7:1d:57:47:cd:5d:0d:
15:39:5a:b1:1b:07:03:db:83:d9:7e:59:3d:7e:ba:
c6:99:97:46:44:1e:08:68:d8:41:65:e8:e4:02:d4:
0e:e8:fe:97:73:3a:c7:91:9d:0b:a2:80:32:f8:45:
0b:79:f8:ad:33:b5:30:28:9d:9b:2c:67:95:f7:12:
a5:a4:c1:26:19:1b:b7:dd:42:c6:cf:fa:07:0c:41:
cb:a9:22:b5:14:81:60:eb:9e:a8:90:f7:28:cf:14:
79:bf:6f:50:4f:b1:ae:1f:52:aa:a3:19:71:29:80:
53:cc:4e:7a:7b:21:ed:44:95:96:35:72:1a:6e:e2:
51:1b:40:d9:3d:a8:18:87:5a:93:1b:8b:f6:4b:9b:
e5:8b:8f:1f:50:1b:91:47:98:a6:03:3a:ed:ec:e5:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3B:76:66:FD:4A:C5:89:4F:E8:1D:7E:85:5F:63:5E:94:64:AE:06
X509v3 Authority Key Identifier:
keyid:64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a9:73:9b:16:af:10:bd:87:31:95:31:0c:f0:fc:41:89:b5:
8d:9e:44:b3:97:4e:38:cd:34:71:68:f4:91:d6:bf:ce:7d:2d:
b8:05:c8:f8:11:aa:a7:e7:fe:10:a4:11:c7:de:ce:dc:cd:8e:
ca:0c:4c:7c:09:3c:80:54:0d:05:84:d5:5d:47:6e:24:87:ff:
b2:06:9f:62:2e:48:fb:b5:be:52:1b:40:bd:f5:3d:35:6b:6f:
d2:1f:da:e5:47:9a:cf:3c:28:6a:47:6d:76:a9:5c:7a:31:e9:
59:af:86:fc:c9:51:9a:32:45:a4:3e:16:f6:38:f0:4c:c7:14:
a0:93:e0:89:45:2d:27:c1:0a:be:29:67:09:48:fa:c9:99:17:
9b:63:d0:01:bc:58:ca:fa:29:cd:f3:d9:a4:71:55:3e:92:e5:
e0:3f:81:04:25:96:67:17:45:06:f1:d3:fb:0d:84:88:f9:15:
c7:52:ef:7e:aa:ef:99:86:8c:51:22:cc:71:99:4b:bb:7f:bc:
51:d5:0c:22:57:e9:1d:64:64:1b:86:1f:9d:a7:25:6b:85:26:
04:c7:e3:20:3f:dc:4a:5a:e8:21:87:7e:b9:2e:68:df:ab:0c:
7d:3e:be:91:1d:e6:15:34:98:d1:44:cb:0b:3e:38:d9:bd:46:
c6:0d:f3:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzth0BLHbcFJPOC3gVKwQFoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDQwNTRkMWI2MjE1OGI4MzM1YTIwMTlmMDU0OGIzODcy
YTM0NDMwHhcNMjYwMzE0MTgwNjI5WhcNMjYwMzE1MTgwNjI5WjAzMTEwLwYDVQQD
EyhkOTNiNzY2NmZkNGFjNTg5NGZlODFkN2U4NTVmNjM1ZTk0NjRhZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojAokFO5Nh1v5iRljhJ87KHK6nDj
MuBROdVFS5UYCFy1TdCtuLueY51Deg5y6hklU1tfFX8RyKxSpM00QFxbWtcFcJBw
JRFGamN+ocwLYM0wnwesPkpYQ8txBpKtHsxg0KcdV0fNXQ0VOVqxGwcD24PZflk9
frrGmZdGRB4IaNhBZejkAtQO6P6XczrHkZ0LooAy+EULefitM7UwKJ2bLGeV9xKl
pMEmGRu33ULGz/oHDEHLqSK1FIFg656okPcozxR5v29QT7GuH1KqoxlxKYBTzE56
eyHtRJWWNXIabuJRG0DZPagYh1qTG4v2S5vli48fUBuRR5imAzrt7OU0YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNk7dmb9SsWJT+gdfoVfY16UZK4GMB8GA1UdIwQY
MBaAFGTUBU0bYhWLgzWiAZ8FSLOHKjRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMDBkNGUtNzUyOC00ZjVlLWIzNjUt
NmI0ODUyNTcwYjhhLzEvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMDBkNGUtNzUyOC00ZjVlLWIzNjUtNmI0ODUyNTcwYjhh
LzEvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKlzmxav
EL2HMZUxDPD8QYm1jZ5Es5dOOM00cWj0kda/zn0tuAXI+BGqp+f+EKQRx97O3M2O
ygxMfAk8gFQNBYTVXUduJIf/sgafYi5I+7W+UhtAvfU9NWtv0h/a5Ueazzwoakdt
dqlcejHpWa+G/MlRmjJFpD4W9jjwTMcUoJPgiUUtJ8EKvilnCUj6yZkXm2PQAbxY
yvopzfPZpHFVPpLl4D+BBCWWZxdFBvHT+w2EiPkVx1LvfqrvmYaMUSLMcZlLu3+8
UdUMIlfpHWRkG4Yfnacla4UmBMfjID/cSlroIYd+uS5o36sMfT6+kR3mFTSY0UTL
Cz442b1Gxg3zBw==
-----END CERTIFICATE-----
Generated at Sat Mar 14 22:30:42 2026 by rpki-client