Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
File: ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft (raw, json)
Hash identifier: Ec+QUDXiwubpniMUYBXBF5kodmrDbNXWX9CYoBzsOwQ=
Subject key identifier: 94:07:81:F7:BF:09:30:C9:BA:AB:BC:DB:90:F5:60:83:D2:9B:75:38
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial: 019D3752D547923B9DF545995CCB0DAC6915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
Manifest number: 0B1C
Signing time: Sun 29 Mar 2026 02:01:08 +0000
Manifest this update: Sun 29 Mar 2026 02:01:08 +0000
Manifest next update: Mon 30 Mar 2026 02:01:08 +0000
Files and hashes: 1: TuuctTXsnDfzjdp1XhJCuSQCZBE.roa (hash: lL87XCaQxmWdIfEo3Mlnj0oxnulHe23ylI5Y0lZ+hHA=)
2: ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl (hash: +ZUV2hdwjzf2gbQYAFRUXcWFERkcmlORuNVrQraUFxk=)
3: k5dogf-BFW_dvSXrkiHgEtagTVo.roa (hash: JTI2nYP0LahJQKoGJLojDrE8fYXChxKujAnQaXvPJgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d5:47:92:3b:9d:f5:45:99:5c:cb:0d:ac:69:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Validity
Not Before: Mar 29 02:01:08 2026 GMT
Not After : Mar 30 02:01:08 2026 GMT
Subject: CN=940781f7bf0930c9baabbcdb90f56083d29b7538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:74:10:1c:e7:6c:7d:34:85:56:f7:70:f7:
8b:54:0a:77:86:de:7c:38:23:c6:03:09:bf:b2:fb:
fe:25:e3:b2:81:73:a2:69:b1:1d:80:5f:f5:f2:a9:
87:82:47:aa:c4:8b:85:20:0b:b3:75:07:6f:c4:fe:
43:23:b2:17:51:b2:a2:05:25:fc:6b:67:c1:c7:62:
f9:e0:91:9a:f2:b4:aa:31:50:ce:17:9d:38:0a:50:
a3:4a:a3:0b:53:ff:25:9f:68:8d:42:32:b7:51:0a:
0d:8f:1d:32:a4:23:a4:bb:1c:c8:69:32:ab:cf:5b:
88:4d:03:22:97:c1:12:2f:ee:76:7a:1b:16:b6:51:
0c:fc:39:b0:a1:b5:31:a7:80:3a:6f:5c:ed:3e:de:
7c:51:3d:fe:62:4c:56:3b:5e:00:d1:af:6d:5d:33:
4d:8d:fe:2f:3b:8b:54:bc:47:cf:92:51:f5:5b:2f:
e2:be:58:6c:1c:f5:46:3e:31:d3:62:af:b2:b7:5b:
5e:6f:81:0b:3e:bd:4a:46:cf:97:51:f2:29:a5:0c:
fd:90:f8:8d:36:ba:39:13:d1:3c:43:58:33:2e:8a:
8f:c0:9c:e1:6c:fa:ea:d1:ba:2a:03:0e:25:30:06:
f7:06:1b:dd:bb:17:ee:61:43:68:1b:03:c0:82:e0:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:07:81:F7:BF:09:30:C9:BA:AB:BC:DB:90:F5:60:83:D2:9B:75:38
X509v3 Authority Key Identifier:
keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:be:66:b8:57:4f:9b:5f:7c:3b:c1:cc:dc:70:1a:76:62:25:
47:fb:a2:15:e6:ae:f6:30:4f:7f:04:ad:88:53:a7:6c:49:cc:
9e:33:7f:31:e6:6e:c1:65:d3:ae:27:97:db:26:5f:cc:d8:9f:
3d:61:4a:fd:8a:52:1d:d6:06:c8:02:c1:bb:bc:75:30:e7:e6:
aa:b2:a7:16:88:ce:d7:fa:43:85:68:83:5f:27:2c:f9:8e:47:
7a:26:4d:56:76:a8:3b:2c:9d:55:ae:bd:95:7b:04:9a:9b:67:
e8:0b:dc:33:f1:1d:e5:56:20:f4:4d:aa:d6:5d:0e:db:27:93:
f0:42:b6:b7:22:2b:c2:f2:d1:49:8c:ea:54:28:a8:d4:dd:63:
2b:62:7e:63:21:d4:af:b0:75:ba:f3:4c:a7:a7:21:97:d2:1d:
4c:a8:be:3c:89:bd:d4:51:71:13:79:5b:cb:90:d9:9d:58:6f:
55:92:d3:80:b3:8e:f7:37:38:b6:30:b5:db:69:3c:70:2e:a3:
06:f3:63:d5:99:58:c9:bf:bc:e6:63:75:82:ec:85:4e:88:e4:
b5:5f:b7:1b:b3:5c:5b:18:e2:45:08:80:28:33:e6:4e:58:e4:
4a:84:c0:df:ae:28:22:b5:8a:63:06:1c:0b:f3:b9:79:c1:fb:
b6:7d:90:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UtVHkjud9UWZXMsNrGkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGM1MGQxZGFkZjhiODRiMTc0ZmRiMDU4N2FmYjVmNDJk
ZjhhNWYwHhcNMjYwMzI5MDIwMTA4WhcNMjYwMzMwMDIwMTA4WjAzMTEwLwYDVQQD
Eyg5NDA3ODFmN2JmMDkzMGM5YmFhYmJjZGI5MGY1NjA4M2QyOWI3NTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkN0EBznbH00hVb3cPeLVAp3ht58
OCPGAwm/svv+JeOygXOiabEdgF/18qmHgkeqxIuFIAuzdQdvxP5DI7IXUbKiBSX8
a2fBx2L54JGa8rSqMVDOF504ClCjSqMLU/8ln2iNQjK3UQoNjx0ypCOkuxzIaTKr
z1uITQMil8ESL+52ehsWtlEM/DmwobUxp4A6b1ztPt58UT3+YkxWO14A0a9tXTNN
jf4vO4tUvEfPklH1Wy/ivlhsHPVGPjHTYq+yt1teb4ELPr1KRs+XUfIppQz9kPiN
Nro5E9E8Q1gzLoqPwJzhbPrq0boqAw4lMAb3BhvduxfuYUNoGwPAguCyIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQHgfe/CTDJuqu825D1YIPSm3U4MB8GA1UdIwQY
MBaAFGRMUNHa34uEsXT9sFh6+19C34pfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yOGJkZTMtYTRjYS00ODhkLTgwNjEt
ZDM4ZDg0M2JmYTFkLzEvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yOGJkZTMtYTRjYS00ODhkLTgwNjEtZDM4ZDg0M2JmYTFk
LzEvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMr5muFdP
m198O8HM3HAadmIlR/uiFeau9jBPfwStiFOnbEnMnjN/MeZuwWXTrieX2yZfzNif
PWFK/YpSHdYGyALBu7x1MOfmqrKnFojO1/pDhWiDXycs+Y5HeiZNVnaoOyydVa69
lXsEmptn6AvcM/Ed5VYg9E2q1l0O2yeT8EK2tyIrwvLRSYzqVCio1N1jK2J+YyHU
r7B1uvNMp6chl9IdTKi+PIm91FFxE3lby5DZnVhvVZLTgLOO9zc4tjC122k8cC6j
BvNj1ZlYyb+85mN1guyFTojktV+3G7NcWxjiRQiAKDPmTljkSoTA364oIrWKYwYc
C/O5ecH7tn2Q8A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:19 2026 by rpki-client