Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json)
Hash identifier: lCdeRcFJEHELh/DZOTe+eMsyUi1EW7NBE5RxXqBEiq0=
Subject key identifier: 29:CB:13:6A:CA:3E:88:33:F5:19:53:24:ED:D7:50:00:09:B0:E8:29
Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Certificate serial: 019D37F70413E4D24733BCF7C0F932F2D658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
Manifest number: 113E
Signing time: Sun 29 Mar 2026 05:00:28 +0000
Manifest this update: Sun 29 Mar 2026 05:00:28 +0000
Manifest next update: Mon 30 Mar 2026 05:00:28 +0000
Files and hashes: 1: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: PqpCFSWPNv1agUrFk+KkT9lc5jkHnXFlXcBF38LYpsM=)
2: cMLXGA_6lhirTspoM9xrh1-1Z2c.roa (hash: tb3jenRFfrVxLNPvDmSsDeJNfF95+Hv8OEEMT0bRA9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:04:13:e4:d2:47:33:bc:f7:c0:f9:32:f2:d6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Validity
Not Before: Mar 29 05:00:28 2026 GMT
Not After : Mar 30 05:00:28 2026 GMT
Subject: CN=29cb136aca3e8833f5195324edd7500009b0e829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:a1:4a:d9:fd:34:2f:6f:f5:19:24:11:ec:
1f:0d:d7:15:f1:20:bc:f6:c3:43:d9:cb:ec:1e:cf:
e7:2b:84:50:6c:ae:a7:eb:c8:a4:14:a3:93:d9:f1:
1a:9a:95:2e:b1:dd:7f:83:ff:f9:7c:6e:e3:23:6d:
79:8f:2b:30:ac:b6:1c:35:9e:6b:ec:6b:3c:95:50:
02:48:89:4b:36:e3:b3:1f:af:dc:eb:fc:8d:80:6f:
67:d9:62:cf:b1:e2:66:ce:00:1e:8b:2c:7d:30:c6:
35:9a:00:73:3b:97:d0:58:99:ff:e8:41:2e:c7:b9:
f7:28:5e:95:ca:6f:27:57:26:74:bf:61:f4:46:5b:
5f:a0:75:de:8a:61:08:e7:2b:05:65:06:57:b7:21:
57:e3:02:6c:1b:23:2f:c7:32:d6:70:9c:1b:1b:71:
5f:9c:b0:3e:d8:64:41:40:3d:1a:56:53:4f:01:e3:
6d:49:ab:01:5c:e5:65:ce:a7:e4:4f:fc:db:48:57:
a4:02:30:c9:34:db:d3:d4:5d:53:51:dc:b3:aa:72:
02:7d:ac:a3:0a:99:4f:7f:9f:67:4d:65:ba:38:e4:
91:88:27:14:42:b0:9d:86:cf:64:56:6c:cc:69:58:
13:72:7e:45:70:f6:fe:3a:9a:c6:d5:bb:38:9e:1f:
9c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CB:13:6A:CA:3E:88:33:F5:19:53:24:ED:D7:50:00:09:B0:E8:29
X509v3 Authority Key Identifier:
keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b6:eb:67:57:75:a5:a4:cd:f3:16:3e:d7:09:85:04:87:0c:
30:d4:91:2f:d3:b8:05:10:75:52:39:e1:ca:2f:05:ff:10:4c:
ee:68:ce:72:ab:4c:2f:8e:d0:ea:aa:6e:e8:10:07:70:e3:a9:
83:4b:8e:50:fe:40:b3:6d:cb:fe:71:86:25:e1:9d:86:8e:61:
f4:56:06:aa:21:a2:aa:6f:9a:dc:58:29:7d:9d:89:11:e2:f1:
25:04:52:9a:28:ac:88:03:c1:ad:57:c1:22:00:de:7a:53:c8:
68:54:02:3c:80:4b:d7:a2:9d:73:a0:ee:1b:3a:57:c5:2a:2a:
63:28:a3:0c:b0:ac:db:2f:0a:69:9b:20:70:28:17:ce:d1:44:
55:00:e1:0b:2c:ce:07:c8:0e:6e:8f:d8:5b:5e:c7:c4:e7:9c:
bf:c2:7d:ca:a5:1b:ab:98:a3:0c:a0:5f:ed:28:fd:78:2e:ae:
06:93:e6:34:8a:11:c1:a1:6e:2a:39:47:f7:27:e0:34:cf:2a:
50:ba:41:a2:20:99:78:12:c6:5d:01:64:74:8e:0a:0f:91:d4:
30:fe:c4:32:17:f9:bc:d9:a3:89:c8:c3:ee:ce:b6:b8:4e:d3:
0e:ad:cd:72:7c:f3:4d:1c:26:a8:74:5a:e3:84:e3:48:dd:c1:
0c:07:dd:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039wQT5NJHM7z3wPky8tZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YTcxNTZiOGFhODlmNzZlNGQzOGFmMmMxMDlmYmMxNDkx
N2IwODYwHhcNMjYwMzI5MDUwMDI4WhcNMjYwMzMwMDUwMDI4WjAzMTEwLwYDVQQD
EygyOWNiMTM2YWNhM2U4ODMzZjUxOTUzMjRlZGQ3NTAwMDA5YjBlODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub+hStn9NC9v9RkkEewfDdcV8SC8
9sND2cvsHs/nK4RQbK6n68ikFKOT2fEampUusd1/g//5fG7jI215jyswrLYcNZ5r
7Gs8lVACSIlLNuOzH6/c6/yNgG9n2WLPseJmzgAeiyx9MMY1mgBzO5fQWJn/6EEu
x7n3KF6Vym8nVyZ0v2H0RltfoHXeimEI5ysFZQZXtyFX4wJsGyMvxzLWcJwbG3Ff
nLA+2GRBQD0aVlNPAeNtSasBXOVlzqfkT/zbSFekAjDJNNvT1F1TUdyzqnICfayj
CplPf59nTWW6OOSRiCcUQrCdhs9kVmzMaVgTcn5FcPb+OprG1bs4nh+ctQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnLE2rKPogz9RlTJO3XUAAJsOgpMB8GA1UdIwQY
MBaAFGSnFWuKqJ925NOK8sEJ+8FJF7CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zZGY2MmQtNWQ1Ny00ZDdlLTk0NDQt
NTM1MWYxYmRlNzJmLzEvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zZGY2MmQtNWQ1Ny00ZDdlLTk0NDQtNTM1MWYxYmRlNzJm
LzEvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7brZ1d1
paTN8xY+1wmFBIcMMNSRL9O4BRB1Ujnhyi8F/xBM7mjOcqtML47Q6qpu6BAHcOOp
g0uOUP5As23L/nGGJeGdho5h9FYGqiGiqm+a3FgpfZ2JEeLxJQRSmiisiAPBrVfB
IgDeelPIaFQCPIBL16Kdc6DuGzpXxSoqYyijDLCs2y8KaZsgcCgXztFEVQDhCyzO
B8gObo/YW17HxOecv8J9yqUbq5ijDKBf7Sj9eC6uBpPmNIoRwaFuKjlH9yfgNM8q
ULpBoiCZeBLGXQFkdI4KD5HUMP7EMhf5vNmjicjD7s62uE7TDq3NcnzzTRwmqHRa
44TjSN3BDAfdbQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:34 2026 by rpki-client