Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
File: ZZbw3BZbfNIJAispZINMRedNISw.mft (raw, json)
Hash identifier: k12jyMqljqqsiRZYfRz/IKy6ug/QUGDfv+lMuxQ/KPQ=
Subject key identifier: 53:D9:43:A2:CF:8F:96:DA:6B:99:DA:EF:5C:4C:C1:34:AC:3F:B8:E7
Authority key identifier: 65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
Certificate issuer: /CN=6596f0dc165b7cd209022b2964834c45e74d212c
Certificate serial: 019D3789683A3C97FFCF4597C34166A0F370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:45 +0000
Manifest this update: Sun 29 Mar 2026 03:00:45 +0000
Manifest next update: Mon 30 Mar 2026 03:00:45 +0000
Files and hashes: 1: 1-RWTcjebB00EEPXrCQe14UhdpaU.roa (hash: xcBiWpi6+uT5sbN5EOtc0NeFtZPbsGISgJTOn56/et0=)
2: 43BDuYzZKT6GuNcPCdD6yFXu9KU.roa (hash: BR04tqYW3l6HUM2rcLyj1VGl9Tid3trcvH2fcQ2YbBo=)
3: 8auuTFL6tParorXPR_FX7n5-sMo.roa (hash: EPBMa3bgDg4K8XqsoSkRoxiHXy+VyA8XAgJy5cRLejw=)
4: ZZbw3BZbfNIJAispZINMRedNISw.crl (hash: eOLz9ou4BPWowfgphGqgJtjj0Z1UnETyWp/fsDBS/j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:68:3a:3c:97:ff:cf:45:97:c3:41:66:a0:f3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596f0dc165b7cd209022b2964834c45e74d212c
Validity
Not Before: Mar 29 03:00:45 2026 GMT
Not After : Mar 30 03:00:45 2026 GMT
Subject: CN=53d943a2cf8f96da6b99daef5c4cc134ac3fb8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:ed:fd:55:5d:86:b7:ee:2b:f0:3f:0d:d7:
46:7f:1e:e1:13:33:44:dd:d3:2e:4b:3e:fd:0f:43:
05:bc:f0:65:82:2a:56:64:7f:d9:54:69:46:c0:cf:
a4:3c:4d:71:7b:42:48:a1:72:b3:32:07:15:c7:a4:
fa:6f:65:67:5e:cb:ef:20:c7:38:f7:75:24:0d:71:
5c:ad:fd:6e:a0:7b:6d:85:5b:89:f6:43:f8:1c:5a:
75:4b:3e:7d:63:08:16:4e:85:24:b0:48:70:73:63:
45:c1:d4:3f:54:de:6e:ea:fb:c5:40:16:c3:fb:2a:
8f:c3:6f:24:ad:56:0c:ae:16:9e:10:7d:66:62:7e:
bb:d7:e6:6f:e8:c3:46:24:b2:1d:66:59:32:d1:2d:
bd:c5:3c:7c:e0:b9:12:c4:6f:04:3f:c7:33:7b:9d:
e0:f6:05:58:21:20:af:d7:3f:13:62:45:a8:e0:68:
04:d7:86:f9:fc:b4:76:af:b6:d9:2d:7c:b0:8d:06:
06:5b:96:c8:93:0a:97:0a:51:48:a9:50:d4:32:42:
0a:62:8f:c3:cf:a9:07:14:39:23:99:15:13:90:57:
7c:43:2e:9e:20:39:33:15:45:5e:2a:b2:1c:8b:fe:
1a:02:2d:3d:9a:12:af:a2:02:b0:a5:ba:75:54:70:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D9:43:A2:CF:8F:96:DA:6B:99:DA:EF:5C:4C:C1:34:AC:3F:B8:E7
X509v3 Authority Key Identifier:
keyid:65:96:F0:DC:16:5B:7C:D2:09:02:2B:29:64:83:4C:45:E7:4D:21:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZbw3BZbfNIJAispZINMRedNISw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9904b3-8ca0-4946-8766-2d13cf9b45c0/1/ZZbw3BZbfNIJAispZINMRedNISw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b6:53:39:f3:2d:9f:ca:71:da:f2:1e:64:90:f1:21:02:90:
33:d4:13:b8:73:a7:23:3d:2f:ce:b6:fd:1b:21:ca:f3:26:fa:
56:3a:23:fe:3f:3a:c7:9a:12:f4:50:30:01:cd:d9:51:ec:90:
fd:5a:1a:cb:c5:79:f8:29:ac:88:07:60:c9:3f:08:a0:1a:52:
be:e4:78:23:87:1c:8f:e0:1d:16:f1:3d:0d:6f:1f:f0:6f:e4:
73:b8:13:e2:53:a7:3c:11:75:f1:ed:a5:46:eb:c3:f0:d7:61:
7a:52:08:16:24:8b:eb:23:c2:69:90:8d:54:87:1d:a7:35:d0:
61:78:0a:b4:11:88:08:84:84:43:8c:e7:89:19:5c:ad:1f:36:
34:32:1e:53:f2:35:88:70:f5:71:b9:da:65:83:56:1b:d1:f4:
6f:74:54:6c:5d:ef:41:a0:9e:d1:58:16:86:83:b5:63:05:27:
73:1d:f1:1f:0b:ae:43:97:9b:2d:4f:60:f8:5f:d8:e3:8e:43:
02:3c:26:ee:73:4e:06:8c:8c:82:69:51:e3:39:db:4f:fe:76:
20:0e:15:d2:e6:3c:1c:aa:d6:b6:b9:a2:b3:c5:f5:91:48:e0:
11:6d:7a:cd:1c:33:aa:cf:60:88:9c:7b:62:41:0a:f2:83:65:
b6:ce:1e:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iWg6PJf/z0WXw0FmoPNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OTZmMGRjMTY1YjdjZDIwOTAyMmIyOTY0ODM0YzQ1ZTc0
ZDIxMmMwHhcNMjYwMzI5MDMwMDQ1WhcNMjYwMzMwMDMwMDQ1WjAzMTEwLwYDVQQD
Eyg1M2Q5NDNhMmNmOGY5NmRhNmI5OWRhZWY1YzRjYzEzNGFjM2ZiOGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtDt/VVdhrfuK/A/DddGfx7hEzNE
3dMuSz79D0MFvPBlgipWZH/ZVGlGwM+kPE1xe0JIoXKzMgcVx6T6b2VnXsvvIMc4
93UkDXFcrf1uoHtthVuJ9kP4HFp1Sz59YwgWToUksEhwc2NFwdQ/VN5u6vvFQBbD
+yqPw28krVYMrhaeEH1mYn671+Zv6MNGJLIdZlky0S29xTx84LkSxG8EP8cze53g
9gVYISCv1z8TYkWo4GgE14b5/LR2r7bZLXywjQYGW5bIkwqXClFIqVDUMkIKYo/D
z6kHFDkjmRUTkFd8Qy6eIDkzFUVeKrIci/4aAi09mhKvogKwpbp1VHC95QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPZQ6LPj5baa5na71xMwTSsP7jnMB8GA1UdIwQY
MBaAFGWW8NwWW3zSCQIrKWSDTEXnTSEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpidzNCWmJmTklKQWlzcFpJTk1SZWROSVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85OTA0YjMtOGNhMC00OTQ2LTg3NjYt
MmQxM2NmOWI0NWMwLzEvWlpidzNCWmJmTklKQWlzcFpJTk1SZWROSVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85OTA0YjMtOGNhMC00OTQ2LTg3NjYtMmQxM2NmOWI0NWMw
LzEvWlpidzNCWmJmTklKQWlzcFpJTk1SZWROSVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbZTOfMt
n8px2vIeZJDxIQKQM9QTuHOnIz0vzrb9GyHK8yb6Vjoj/j86x5oS9FAwAc3ZUeyQ
/Voay8V5+CmsiAdgyT8IoBpSvuR4I4ccj+AdFvE9DW8f8G/kc7gT4lOnPBF18e2l
RuvD8NdhelIIFiSL6yPCaZCNVIcdpzXQYXgKtBGICISEQ4zniRlcrR82NDIeU/I1
iHD1cbnaZYNWG9H0b3RUbF3vQaCe0VgWhoO1YwUncx3xHwuuQ5ebLU9g+F/Y445D
Ajwm7nNOBoyMgmlR4znbT/52IA4V0uY8HKrWtrmis8X1kUjgEW16zRwzqs9giJx7
YkEK8oNlts4e0Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:03 2026 by rpki-client