Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
File: zqedzVo97kUOrz-TFS7W2oBrv3E.mft (raw, json)
Hash identifier: /bXleO7TL+0y95ROtm1ca90B1IBsZ7W0HXHx/R4/Xag=
Subject key identifier: A8:CD:86:4B:C0:05:81:D7:FE:14:85:D4:75:97:E7:68:BE:50:9C:95
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Certificate issuer: /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial: 019D394141376CFF1FE3625295B296E17B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
Manifest number: 03AA
Signing time: Sun 29 Mar 2026 11:01:10 +0000
Manifest this update: Sun 29 Mar 2026 11:01:10 +0000
Manifest next update: Mon 30 Mar 2026 11:01:10 +0000
Files and hashes: 1: SJnvGTH7bR41e5sWsYIQeWDc_EA.roa (hash: 2jW13TfSzXoQtuBntu6l4+b+fs69bx4ZNVoFcIWRCOo=)
2: TGdsEBW0dA1vBlmQUvr6OCjcRdA.roa (hash: DkyX51xLuQvm/HIMS5Gk0Y7OjI/mNozxguG8FiDw6c4=)
3: kTM5AwyuwsmweHVqh4Sx5C7l3lk.roa (hash: 9Ex97t0Gq70q6AwRnqwBR36JInydAPypzTvDsdOkxbE=)
4: lmqA3qKbM2Ln4wNDV7bOP2KNIjw.roa (hash: xyC0OirskdCSUadmtCeoUwblgPmS4gYDwVr6k8DHX9w=)
5: zqedzVo97kUOrz-TFS7W2oBrv3E.crl (hash: wqc2XIS/8MpXbmd5nGJG9EyGBVjUkTvp9cENzA49IMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:41:37:6c:ff:1f:e3:62:52:95:b2:96:e1:7b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Validity
Not Before: Mar 29 11:01:10 2026 GMT
Not After : Mar 30 11:01:10 2026 GMT
Subject: CN=a8cd864bc00581d7fe1485d47597e768be509c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:d1:fa:7f:b3:dc:4a:42:cc:7e:53:2d:38:
f0:81:43:91:f4:63:ab:17:8a:ce:b4:8b:30:74:81:
53:5d:ff:63:d1:19:d8:3a:45:1a:c4:f3:8d:b7:46:
1d:d0:92:6e:4a:a9:6f:a6:f0:c1:a9:ed:fa:94:27:
31:9a:06:14:8d:1e:17:80:f0:e3:08:7c:01:91:90:
34:2a:80:2e:0e:51:2f:55:2a:d0:e5:b6:5c:e9:3c:
57:f0:75:23:de:93:04:f3:34:51:68:03:9e:48:79:
95:e6:53:05:3e:69:22:1c:5e:6d:52:6c:ee:98:e4:
90:e5:e3:1e:83:83:01:40:cc:b9:91:ef:d4:0f:41:
af:37:96:b8:11:3f:a8:fc:20:32:8f:ea:b5:af:7f:
e7:9a:05:9d:02:e7:61:9e:dd:73:62:19:33:88:ec:
15:42:26:af:38:e1:56:64:f5:c4:3c:50:f6:31:e1:
f5:11:f3:02:0c:22:00:6b:af:4f:b2:b4:ca:f3:f2:
26:83:60:44:42:8b:d1:6d:48:c1:11:0f:a5:07:fc:
83:39:40:42:1d:db:dd:4e:f9:6f:f9:d2:5e:ca:50:
02:6a:5c:62:78:ef:7f:34:52:71:18:10:82:20:3b:
cd:23:6c:fe:e2:a6:54:bd:0a:9e:22:28:b8:2b:92:
1f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CD:86:4B:C0:05:81:D7:FE:14:85:D4:75:97:E7:68:BE:50:9C:95
X509v3 Authority Key Identifier:
keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8b:1d:52:44:23:f2:44:22:a4:e5:4e:b7:46:ee:bd:4c:c1:
57:c2:15:39:2e:04:16:cf:fe:6f:1b:56:e1:d0:46:91:9f:c8:
31:af:d3:d4:74:f9:07:05:0c:59:d7:16:b3:b8:5f:23:97:3d:
78:60:a9:56:97:ae:31:06:0c:e8:dd:2b:ef:39:73:1e:cc:3b:
a8:27:8f:50:57:ba:28:d9:72:2f:34:16:97:67:e6:99:bf:72:
11:90:41:a6:7b:41:c8:aa:2c:bc:55:df:82:dd:4f:cb:66:79:
00:2d:8e:73:ec:e2:30:f3:bd:97:e5:b5:be:16:b9:9f:e6:65:
ba:d8:28:a6:3b:98:bb:66:0d:b5:07:f0:da:e6:dd:68:ff:e5:
79:a5:eb:d8:8c:4c:c8:90:06:92:1d:9e:21:86:a4:2f:3a:0d:
5f:0f:b1:04:e4:28:4a:05:81:03:c9:4c:8b:b8:48:50:ee:b0:
f4:dd:95:1d:92:64:8c:94:bd:89:51:48:0c:29:29:6c:d8:09:
28:c8:db:47:67:e5:d8:ec:ed:98:5a:ec:ea:67:d7:7f:89:5d:
cd:41:05:3b:95:c2:79:bb:47:07:44:8a:4f:03:ad:9e:5a:9f:
66:e9:29:e9:5c:8a:c0:fd:d6:30:18:67:48:51:45:35:9d:dd:
57:55:ae:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QUE3bP8f42JSlbKW4XtwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTc5ZGNkNWEzZGVlNDUwZWFmM2Y5MzE1MmVkNmRhODA2
YmJmNzEwHhcNMjYwMzI5MTEwMTEwWhcNMjYwMzMwMTEwMTEwWjAzMTEwLwYDVQQD
EyhhOGNkODY0YmMwMDU4MWQ3ZmUxNDg1ZDQ3NTk3ZTc2OGJlNTA5Yzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/nR+n+z3EpCzH5TLTjwgUOR9GOr
F4rOtIswdIFTXf9j0RnYOkUaxPONt0Yd0JJuSqlvpvDBqe36lCcxmgYUjR4XgPDj
CHwBkZA0KoAuDlEvVSrQ5bZc6TxX8HUj3pME8zRRaAOeSHmV5lMFPmkiHF5tUmzu
mOSQ5eMeg4MBQMy5ke/UD0GvN5a4ET+o/CAyj+q1r3/nmgWdAudhnt1zYhkziOwV
QiavOOFWZPXEPFD2MeH1EfMCDCIAa69PsrTK8/Img2BEQovRbUjBEQ+lB/yDOUBC
HdvdTvlv+dJeylACalxieO9/NFJxGBCCIDvNI2z+4qZUvQqeIii4K5IfdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjNhkvABYHX/hSF1HWX52i+UJyVMB8GA1UdIwQY
MBaAFM6nnc1aPe5FDq8/kxUu1tqAa79xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFlZHpWbzk3a1VPcnotVEZTN1cyb0JydjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mODE5Y2MtYjI5NC00NjBlLThiZTQt
ODZlMjQyNjA1MTZmLzEvenFlZHpWbzk3a1VPcnotVEZTN1cyb0JydjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mODE5Y2MtYjI5NC00NjBlLThiZTQtODZlMjQyNjA1MTZm
LzEvenFlZHpWbzk3a1VPcnotVEZTN1cyb0JydjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdosdUkQj
8kQipOVOt0buvUzBV8IVOS4EFs/+bxtW4dBGkZ/IMa/T1HT5BwUMWdcWs7hfI5c9
eGCpVpeuMQYM6N0r7zlzHsw7qCePUFe6KNlyLzQWl2fmmb9yEZBBpntByKosvFXf
gt1Py2Z5AC2Oc+ziMPO9l+W1vha5n+ZlutgopjuYu2YNtQfw2ubdaP/leaXr2IxM
yJAGkh2eIYakLzoNXw+xBOQoSgWBA8lMi7hIUO6w9N2VHZJkjJS9iVFIDCkpbNgJ
KMjbR2fl2OztmFrs6mfXf4ldzUEFO5XCebtHB0SKTwOtnlqfZukp6VyKwP3WMBhn
SFFFNZ3dV1WumA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:22 2026 by rpki-client