Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: /nSgt/wzA0B1D6UtLeQiRbP+wAo35qPU1GjNxrb6VuQ=
Subject key identifier: FB:FE:7C:2E:93:C1:2E:85:24:36:D1:56:60:48:67:14:4B:24:BD:34
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 019D38656A91E9B541F6342841962F48FA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:03 +0000
Manifest this update: Sun 29 Mar 2026 07:01:03 +0000
Manifest next update: Mon 30 Mar 2026 07:01:03 +0000
Files and hashes: 1: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: EW/6mMqwQqSSnylgbEl7TKBIbS12+q1iGGnvCA/eSuU=)
2: tLzYTCMgcEaSpA6pqJ49xM0mJhg.roa (hash: v1AukhZWCgWLe1okLFBBNkZmMt/d4/1gGQHfd9186v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6a:91:e9:b5:41:f6:34:28:41:96:2f:48:fa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Mar 29 07:01:03 2026 GMT
Not After : Mar 30 07:01:03 2026 GMT
Subject: CN=fbfe7c2e93c12e852436d156604867144b24bd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:9f:15:4e:85:96:77:b3:a0:a1:81:c2:60:
4d:4d:88:89:7f:5c:91:4b:5c:42:b8:ab:ea:0d:70:
24:d9:7a:e2:a3:60:3a:f7:4c:35:f2:10:bc:36:e2:
5d:c7:dd:4c:e6:ca:7a:99:57:f5:60:51:41:dc:56:
5e:ac:ec:9b:d6:87:4a:5a:70:41:4e:a1:72:96:e0:
bf:b0:5f:4b:e4:1c:80:1c:62:95:e8:53:36:ef:44:
38:1d:94:10:b3:1e:11:5d:bd:99:dc:08:58:bd:ed:
c8:12:42:d9:ea:f5:2f:03:18:1e:82:e4:ac:a8:f6:
c6:e0:69:7d:20:f9:d8:83:e3:0c:c2:b1:62:e2:7d:
bc:a9:d4:7a:38:15:b3:0b:4d:d0:de:80:f6:5f:dd:
48:6a:ac:67:de:08:ed:7b:1a:b9:e6:45:33:2f:85:
d6:8e:07:b8:89:43:bc:8a:af:22:b4:c4:7c:10:10:
43:db:45:26:ef:7b:dc:67:a2:14:ae:c9:d0:54:17:
62:e6:80:14:4d:64:37:48:42:c5:40:8e:2f:ca:fb:
92:a7:07:a2:19:c9:1b:29:13:23:36:67:66:04:93:
21:38:52:b0:e3:15:9a:fb:d1:33:80:3b:3b:45:89:
c1:c2:9c:61:96:88:8b:38:0e:ad:b9:49:43:08:b0:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FE:7C:2E:93:C1:2E:85:24:36:D1:56:60:48:67:14:4B:24:BD:34
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3d:98:16:f6:82:a8:7f:1c:67:0e:23:07:02:63:47:3e:ca:
b6:52:64:f7:cf:1b:7f:d8:a7:13:a9:36:51:db:79:66:f8:dd:
91:1b:38:09:ad:cb:1b:b4:f5:b3:7c:b7:80:ff:de:3a:7d:63:
90:ca:d4:40:01:53:6f:b5:a4:4d:3b:6f:76:f6:e5:ce:d9:b4:
e0:5f:2c:de:48:c2:42:91:aa:56:9f:73:7d:43:ed:b4:85:18:
23:75:bc:c0:31:c0:07:1a:9c:af:b3:63:73:20:ba:6d:57:be:
0f:64:58:b0:81:0c:3a:4e:00:b2:71:87:64:64:da:c4:76:48:
44:6f:e8:69:37:d9:ab:82:f7:7b:23:3c:33:68:6d:8a:a3:e7:
8d:2b:2c:cb:54:46:87:e7:06:30:a9:fd:20:31:60:98:8f:d0:
35:e2:d8:ad:78:e4:09:87:b1:97:eb:03:69:51:f3:2d:14:3b:
75:ad:ec:7e:3f:33:5d:f9:f9:04:d3:71:5e:e9:8e:a2:0d:de:
3b:3e:ac:34:76:0a:1c:96:72:78:c5:e5:81:63:80:87:d3:41:
b5:03:28:94:8b:3f:c9:2d:d6:83:bd:06:cb:c0:d4:a5:57:39:
a7:8b:d5:58:c6:1f:84:cb:12:16:64:0c:e8:66:26:17:c6:cf:
a9:1e:a1:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZWqR6bVB9jQoQZYvSPptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YzI5MzM4MGJjNDFmNTJkOTEzMTU4NWE4NTgwMDM4Zjky
ZjVkY2MwHhcNMjYwMzI5MDcwMTAzWhcNMjYwMzMwMDcwMTAzWjAzMTEwLwYDVQQD
EyhmYmZlN2MyZTkzYzEyZTg1MjQzNmQxNTY2MDQ4NjcxNDRiMjRiZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul2fFU6FlnezoKGBwmBNTYiJf1yR
S1xCuKvqDXAk2Xrio2A690w18hC8NuJdx91M5sp6mVf1YFFB3FZerOyb1odKWnBB
TqFyluC/sF9L5ByAHGKV6FM270Q4HZQQsx4RXb2Z3AhYve3IEkLZ6vUvAxgeguSs
qPbG4Gl9IPnYg+MMwrFi4n28qdR6OBWzC03Q3oD2X91Iaqxn3gjtexq55kUzL4XW
jge4iUO8iq8itMR8EBBD20Um73vcZ6IUrsnQVBdi5oAUTWQ3SELFQI4vyvuSpwei
GckbKRMjNmdmBJMhOFKw4xWa+9EzgDs7RYnBwpxhloiLOA6tuUlDCLC/0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPv+fC6TwS6FJDbRVmBIZxRLJL00MB8GA1UdIwQY
MBaAFGXCkzgLxB9S2RMVhahYADj5L13MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYt
ZmU2ZGMxNzU4M2UzLzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYtZmU2ZGMxNzU4M2Uz
LzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYj2YFvaC
qH8cZw4jBwJjRz7KtlJk988bf9inE6k2Udt5ZvjdkRs4Ca3LG7T1s3y3gP/eOn1j
kMrUQAFTb7WkTTtvdvblztm04F8s3kjCQpGqVp9zfUPttIUYI3W8wDHABxqcr7Nj
cyC6bVe+D2RYsIEMOk4AsnGHZGTaxHZIRG/oaTfZq4L3eyM8M2htiqPnjSssy1RG
h+cGMKn9IDFgmI/QNeLYrXjkCYexl+sDaVHzLRQ7da3sfj8zXfn5BNNxXumOog3e
Oz6sNHYKHJZyeMXlgWOAh9NBtQMolIs/yS3Wg70Gy8DUpVc5p4vVWMYfhMsSFmQM
6GYmF8bPqR6hrg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:33 2026 by rpki-client