Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: YPP9/NPGSKjPNJO82oQyoUnacTEk7TEIqhC/9EI1+x0=
Subject key identifier: FA:A0:48:52:AB:89:EF:FF:1C:95:25:C3:45:B3:39:02:19:8F:D4:F4
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 019CE6DB3E165E5E0A9EBBCD51D8807441BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 111A
Signing time: Fri 13 Mar 2026 11:00:53 +0000
Manifest this update: Fri 13 Mar 2026 11:00:53 +0000
Manifest next update: Sat 14 Mar 2026 11:00:53 +0000
Files and hashes: 1: 4MqnD80Bm4Q9Vwi3gClRgRwhb2o.roa (hash: x1GbrEL07BjOEaho/RiiT61nbrPNpOtoeGwW3Ksg7ps=)
2: QVoMIPeCUFrk5bxFsPoRfsrvGSw.roa (hash: eQ5qNmayw3NJjRPGsMleqFUXeNcmfxmEvvPybtQSVss=)
3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: uBg9yed6hwPrlstnqNEHfJYH9EFGN4mA1j1F46xRnpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:3e:16:5e:5e:0a:9e:bb:cd:51:d8:80:74:41:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Mar 13 11:00:53 2026 GMT
Not After : Mar 14 11:00:53 2026 GMT
Subject: CN=faa04852ab89efff1c9525c345b33902198fd4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:32:b1:14:a6:3e:1e:4b:5b:0a:2b:93:e1:
13:34:9e:de:9d:95:e6:e3:27:4b:4c:11:d6:e7:01:
1f:cc:2d:66:4c:dd:db:c3:dd:74:d5:13:9f:c0:dd:
2c:f6:f0:d2:60:3d:a8:d2:0d:c6:89:fe:d3:93:8c:
94:33:d9:db:21:97:2d:d3:e3:ab:cf:fc:d5:28:ad:
f8:9f:4d:e3:22:ae:61:e8:67:02:60:ec:03:9a:ba:
c6:0f:ff:7f:b7:c8:91:ab:2c:e3:16:00:53:94:45:
5e:b6:2d:4f:71:c4:3e:62:87:2b:15:3c:30:31:58:
71:92:00:4d:b0:93:22:b0:81:b9:e7:3c:59:b1:49:
6d:39:90:0b:59:4a:ae:87:a1:27:0a:93:1a:2a:2b:
78:0a:03:83:b4:7c:7b:51:85:99:51:e1:70:88:f0:
99:4d:ea:5a:69:f1:f8:07:e9:c6:ff:7e:a4:d8:b3:
e2:6b:93:d9:28:c9:3a:d2:aa:25:20:ba:94:a9:5a:
f7:21:d1:3c:db:6c:41:5b:92:6b:e5:8e:60:b1:e6:
ac:16:43:0e:c6:ae:50:59:4b:aa:0a:66:e5:35:68:
59:66:a3:1f:91:a2:eb:d1:21:47:5d:d8:0c:7d:6b:
b6:4d:af:33:f1:ca:ba:23:07:3a:d8:a3:52:ed:a6:
9c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A0:48:52:AB:89:EF:FF:1C:95:25:C3:45:B3:39:02:19:8F:D4:F4
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a2:00:96:40:12:0f:cb:4a:f1:26:50:96:da:57:d2:fd:cd:
1e:de:23:d8:6a:d7:42:b2:4d:49:45:dc:3a:ec:3e:43:b8:db:
a4:f4:27:c9:97:7c:44:f3:29:9f:bc:5b:f4:70:b7:7d:53:fe:
c8:10:c0:6c:f9:57:ec:2f:92:b8:8a:95:dd:cd:f6:fa:86:22:
1f:19:46:6b:52:3d:86:7e:57:b1:6f:6e:c0:b6:f7:7c:0c:7a:
f3:04:a3:cd:d1:e0:68:e4:e6:11:16:a4:71:47:8b:2a:9c:12:
09:54:b4:c3:33:ea:ca:19:64:c8:2f:2c:a3:43:a9:c5:8d:a5:
72:26:3c:74:32:e8:ae:c3:c6:68:be:6b:7f:1c:0f:80:3a:51:
59:b4:2e:eb:33:93:3d:6e:3d:66:bf:9f:fb:af:f3:8f:56:af:
c7:ee:db:32:27:79:d7:51:e8:b5:66:41:8c:9e:35:3c:3e:59:
bb:03:50:f4:69:f7:8e:6d:be:32:ed:12:39:cb:20:31:c4:07:
33:40:14:f4:a6:f9:4e:8d:0f:60:52:b0:3c:30:6a:62:07:5e:
ea:64:02:2d:08:a7:3f:0f:0c:92:91:74:64:68:cb:2c:f1:c6:
7b:b2:3a:d6:d0:3b:b1:4b:22:4a:a9:d6:18:b9:71:dc:3d:44:
46:7c:0e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:30:16 2026 by rpki-client