Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: clDTT59RQ65FF2GyLzYBru5murPTXXRL+/hOqJNrXeo=
Subject key identifier: 24:A3:BB:6B:69:E5:54:82:67:0A:C7:AF:16:C3:B2:F0:D2:22:E2:EA
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 019D39AECEFC76516A1AE89E291E25B0CD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 0BD3
Signing time: Sun 29 Mar 2026 13:00:50 +0000
Manifest this update: Sun 29 Mar 2026 13:00:50 +0000
Manifest next update: Mon 30 Mar 2026 13:00:50 +0000
Files and hashes: 1: 2Wyxez9lwJjrigvZyDwF8uAZSJc.roa (hash: WXXGeEGJ4mJ3r+j3BB1vcRuu9R5jmSbFBlSKzGyw5vo=)
2: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: 0VgmFgo3HQE+AUe6MBho+1HEgX8CT9ijw5HL4xdJuvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ce:fc:76:51:6a:1a:e8:9e:29:1e:25:b0:cd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Mar 29 13:00:50 2026 GMT
Not After : Mar 30 13:00:50 2026 GMT
Subject: CN=24a3bb6b69e55482670ac7af16c3b2f0d222e2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8e:51:1d:c2:44:ed:02:0c:0c:91:c8:2f:1e:
e7:e4:71:fc:a9:83:60:3a:8c:04:de:07:01:36:1b:
cd:17:6c:77:5c:9e:01:be:ce:31:1d:1d:d0:71:5d:
da:94:66:33:aa:6d:af:a3:6f:7e:16:7f:db:d3:0d:
35:00:ea:80:55:02:c2:83:11:55:18:45:bf:62:99:
b9:02:47:bc:55:d4:91:99:00:0a:a9:fa:59:52:7f:
b3:8f:28:67:63:36:c7:7a:75:46:ff:e2:15:1e:69:
7a:49:d6:06:70:6f:cb:9e:3c:93:2f:35:88:db:b9:
22:78:2a:8f:5d:9f:30:fa:1f:9b:bf:07:ef:f8:c4:
95:22:34:d4:bd:fa:3b:e4:4a:ec:a4:16:7e:2c:de:
62:ee:af:4f:76:51:2a:02:df:0b:4a:32:b5:c5:7d:
be:63:9f:3b:6d:1b:db:62:b4:af:65:a4:64:03:2e:
47:37:f0:4f:c6:81:b3:2f:ad:97:68:fd:85:d8:7a:
38:33:fd:28:93:4c:cf:50:67:e0:b3:06:57:81:2d:
4e:39:37:9c:47:55:bb:eb:0e:6d:35:ac:7d:e9:11:
46:e9:68:93:f9:34:11:5b:9d:1c:d2:89:dc:c8:7b:
08:42:8a:7f:e7:1e:c2:cc:30:8a:a8:98:0a:35:2a:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A3:BB:6B:69:E5:54:82:67:0A:C7:AF:16:C3:B2:F0:D2:22:E2:EA
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:79:3d:c3:4f:f1:0a:a2:6a:74:13:73:c0:8b:84:c1:b9:3c:
a6:91:f3:a8:b4:83:7e:71:54:77:02:2f:ec:60:9f:1c:d7:a0:
12:ba:cc:6d:17:e0:0c:36:1b:12:32:ee:57:69:b2:ff:ec:b4:
38:b2:d8:b6:fa:a0:45:0e:c0:83:1f:25:79:7a:70:4f:24:b6:
ba:08:79:cd:33:ab:be:03:df:73:c8:57:1c:a9:25:f4:ff:dd:
72:7e:a5:c0:29:cb:2a:d1:bf:eb:15:63:49:9e:49:78:6b:0c:
d9:d9:18:8d:63:89:77:9d:1b:ab:c3:14:9f:64:f7:a7:92:63:
06:9e:82:37:c8:27:e7:34:5f:0c:82:8b:49:c7:b3:26:3e:20:
45:29:54:25:61:ce:8e:6e:45:f6:27:09:c2:a1:47:98:dc:fe:
65:7d:da:b3:82:f2:ee:72:c7:e6:28:26:fb:27:05:cd:d6:f3:
95:fc:95:d0:33:6f:cd:1e:9a:5f:db:b2:aa:bf:24:eb:63:33:
43:a7:52:81:73:0f:9c:4e:6e:c0:3a:71:07:27:2d:76:92:1c:
a0:e7:09:08:df:5b:ac:28:d0:79:b1:68:b9:f7:55:36:69:64:
c6:a2:78:35:92:c8:77:ff:88:14:69:1b:f6:7d:84:32:06:f6:
0f:04:79:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rs78dlFqGuieKR4lsM2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MmM3YTRlOWYwMmIyZjRlNjY0ZDdkMGQ3MmE1MmU1MTI2
MWRlNTQwHhcNMjYwMzI5MTMwMDUwWhcNMjYwMzMwMTMwMDUwWjAzMTEwLwYDVQQD
EygyNGEzYmI2YjY5ZTU1NDgyNjcwYWM3YWYxNmMzYjJmMGQyMjJlMmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY5RHcJE7QIMDJHILx7n5HH8qYNg
OowE3gcBNhvNF2x3XJ4Bvs4xHR3QcV3alGYzqm2vo29+Fn/b0w01AOqAVQLCgxFV
GEW/Ypm5Ake8VdSRmQAKqfpZUn+zjyhnYzbHenVG/+IVHml6SdYGcG/LnjyTLzWI
27kieCqPXZ8w+h+bvwfv+MSVIjTUvfo75ErspBZ+LN5i7q9PdlEqAt8LSjK1xX2+
Y587bRvbYrSvZaRkAy5HN/BPxoGzL62XaP2F2Ho4M/0ok0zPUGfgswZXgS1OOTec
R1W76w5tNax96RFG6WiT+TQRW50c0oncyHsIQop/5x7CzDCKqJgKNSrEhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSju2tp5VSCZwrHrxbDsvDSIuLqMB8GA1UdIwQY
MBaAFGQsek6fArL05mTX0NcqUuUSYd5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYt
NWUwMmM0NjUzZTUwLzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYtNWUwMmM0NjUzZTUw
LzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXk9w0/x
CqJqdBNzwIuEwbk8ppHzqLSDfnFUdwIv7GCfHNegErrMbRfgDDYbEjLuV2my/+y0
OLLYtvqgRQ7Agx8leXpwTyS2ugh5zTOrvgPfc8hXHKkl9P/dcn6lwCnLKtG/6xVj
SZ5JeGsM2dkYjWOJd50bq8MUn2T3p5JjBp6CN8gn5zRfDIKLScezJj4gRSlUJWHO
jm5F9icJwqFHmNz+ZX3as4Ly7nLH5igm+ycFzdbzlfyV0DNvzR6aX9uyqr8k62Mz
Q6dSgXMPnE5uwDpxByctdpIcoOcJCN9brCjQebFoufdVNmlkxqJ4NZLId/+IFGkb
9n2EMgb2DwR5LA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:04 2026 by rpki-client