Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: n03Y2/S99dAH0F2aEmgiil4sYCPj0gxqcdMR/WMWo/Q=
Subject key identifier: 03:B4:C6:32:11:B9:65:07:72:FB:E3:DA:CF:C2:D6:88:51:02:C5:0E
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 019D38D3C43101B214FB33B00E31C51008CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0CF7
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: 1-8yART7xM2-_6XMTd_NQPcz65zM.roa (hash: tQW6oVAcsw1dq1koaqtzJ35SlN0zgIfaKPB7+0DEfrg=)
2: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: WI3CpXdqtxIeCoCbLMe4MZE7+GxHLLhptV/tMvfI+SM=)
3: zv8htVuLlM7L27gWdlqS584Hu_g.roa (hash: aUcg7/4honTLftFLDXOy/acZ6va/bYgkctanVBZKlS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c4:31:01:b2:14:fb:33:b0:0e:31:c5:10:08:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=03b4c63211b9650772fbe3dacfc2d6885102c50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:be:97:e4:21:c0:7f:94:a2:5f:4c:cb:e9:e2:
36:16:ab:d8:75:74:75:7c:84:ee:4d:02:ac:50:52:
51:37:9d:63:a7:50:d7:92:81:a5:cf:7d:60:eb:e8:
ba:29:5b:22:bc:a1:ae:9b:6e:12:6e:17:27:6b:7d:
cb:06:fa:ca:28:88:a7:cb:74:18:4c:a2:92:5f:9b:
ee:b5:f5:22:b9:b7:85:ac:fd:f4:fc:0c:f0:ff:dd:
2b:8b:f9:0b:ec:e9:52:c0:b3:f6:14:12:a3:c5:37:
31:94:3f:3d:61:95:d1:f1:07:b6:b9:e8:01:26:57:
64:3c:41:b1:f3:6c:c1:4d:e6:d5:af:06:d9:8b:96:
40:ad:a5:d7:f5:b8:d0:a7:18:e2:26:cc:36:69:7e:
1a:01:6a:51:bf:b1:b8:fb:a4:69:54:3c:f0:ca:96:
b7:e3:bc:db:89:12:27:f1:44:34:c8:00:62:88:df:
61:d0:45:bc:58:c8:1a:8f:90:54:18:3f:f2:c6:a3:
18:fd:19:69:d8:41:c0:b4:8a:d7:1c:ec:ce:42:90:
81:1d:65:dd:1e:53:d4:04:94:9d:83:82:4d:2f:2a:
07:aa:f0:1d:c0:ae:a6:4d:3d:25:d1:1e:be:8c:d3:
7b:11:79:56:a4:31:20:83:83:95:4d:f4:a9:2d:58:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B4:C6:32:11:B9:65:07:72:FB:E3:DA:CF:C2:D6:88:51:02:C5:0E
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d3:d9:26:9c:90:fb:43:28:ac:42:03:28:dc:6b:ed:f0:4b:
6d:90:31:a5:2c:5f:f6:d6:07:64:16:c7:c2:51:1d:49:a4:21:
ba:3e:b3:d8:ec:be:62:30:41:f5:63:8a:83:bd:00:02:1b:36:
55:61:0b:fb:c5:26:59:44:4b:e8:2b:0e:4a:e7:e8:54:7a:ce:
41:85:e3:2b:cd:64:1e:1d:b8:8e:0c:b9:61:c3:c0:a1:e6:1c:
92:0c:3b:b1:74:9e:4e:2e:02:22:29:35:bb:18:98:88:94:a8:
65:30:24:5c:0c:aa:9e:82:70:a0:e1:9e:1d:c1:fc:df:c0:7d:
dd:23:c6:17:71:38:12:12:31:f2:a0:58:43:b6:cb:4a:2b:00:
c6:80:79:1a:74:9c:4d:c9:bc:c4:ef:6a:a2:55:f5:76:c6:45:
84:14:58:0c:2d:2a:40:2c:e2:09:ca:ad:25:db:f5:89:39:24:
df:7b:f7:26:78:56:d4:7f:b5:7b:82:a2:2e:1d:dc:43:56:a8:
30:0d:8a:3b:e7:dc:98:4e:5b:77:8d:1a:34:ef:92:20:78:e4:
69:3b:a2:1b:86:c9:01:05:db:86:80:df:22:75:ee:96:e7:53:
cc:2c:af:20:07:07:79:07:e1:93:7f:42:4d:22:85:03:dc:ab:
a0:77:19:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0408QxAbIU+zOwDjHFEAjPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NmQzM2M1ZjE2ZTNjZGQ5NjBhZTA1YzgwZDlmNmYzNmZj
NTUzZjIwHhcNMjYwMzI5MDkwMTM1WhcNMjYwMzMwMDkwMTM1WjAzMTEwLwYDVQQD
EygwM2I0YzYzMjExYjk2NTA3NzJmYmUzZGFjZmMyZDY4ODUxMDJjNTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6b6X5CHAf5SiX0zL6eI2FqvYdXR1
fITuTQKsUFJRN51jp1DXkoGlz31g6+i6KVsivKGum24Sbhcna33LBvrKKIiny3QY
TKKSX5vutfUiubeFrP30/Azw/90ri/kL7OlSwLP2FBKjxTcxlD89YZXR8Qe2uegB
JldkPEGx82zBTebVrwbZi5ZAraXX9bjQpxjiJsw2aX4aAWpRv7G4+6RpVDzwypa3
47zbiRIn8UQ0yABiiN9h0EW8WMgaj5BUGD/yxqMY/Rlp2EHAtIrXHOzOQpCBHWXd
HlPUBJSdg4JNLyoHqvAdwK6mTT0l0R6+jNN7EXlWpDEgg4OVTfSpLVgpWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAO0xjIRuWUHcvvj2s/C1ohRAsUOMB8GA1UdIwQY
MBaAFGVtM8XxbjzdlgrgXIDZ9vNvxVPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlcwenhmRnVQTjJXQ3VCY2dObjI4Ml9GVV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83Y2M2ZWEtNzc0YS00ODc2LTg0Zjkt
MzA0ZDIxOTFhNGYzLzEvWlcwenhmRnVQTjJXQ3VCY2dObjI4Ml9GVV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83Y2M2ZWEtNzc0YS00ODc2LTg0ZjktMzA0ZDIxOTFhNGYz
LzEvWlcwenhmRnVQTjJXQ3VCY2dObjI4Ml9GVV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdPZJpyQ
+0MorEIDKNxr7fBLbZAxpSxf9tYHZBbHwlEdSaQhuj6z2Oy+YjBB9WOKg70AAhs2
VWEL+8UmWURL6CsOSufoVHrOQYXjK81kHh24jgy5YcPAoeYckgw7sXSeTi4CIik1
uxiYiJSoZTAkXAyqnoJwoOGeHcH838B93SPGF3E4EhIx8qBYQ7bLSisAxoB5GnSc
Tcm8xO9qolX1dsZFhBRYDC0qQCziCcqtJdv1iTkk33v3JnhW1H+1e4KiLh3cQ1ao
MA2KO+fcmE5bd40aNO+SIHjkaTuiG4bJAQXbhoDfInXuludTzCyvIAcHeQfhk39C
TSKFA9yroHcZhw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:03:15 2026 by rpki-client