Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier: 8E+2U1knzXoQwwh6EuvEjWNRbyBLK67bPpi8uj5zDpo=
Subject key identifier: E1:DE:9A:14:89:D5:64:E3:7B:94:4F:57:EB:54:ED:4F:8F:66:8E:E0
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 019D37BFF411F11ABA26275691E85DCF5245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number: 1499
Signing time: Sun 29 Mar 2026 04:00:19 +0000
Manifest this update: Sun 29 Mar 2026 04:00:19 +0000
Manifest next update: Mon 30 Mar 2026 04:00:19 +0000
Files and hashes: 1: CCg7ZzvUdqSwi3wrsZm9eByU8vc.roa (hash: HBpENohXTL9696cy+vQSR5gQjTAWhSwEwHzFSm9x6Tg=)
2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: araGaKizZl/6swkoBe5Y1OLppnYVngMTt8HX+rxFLtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f4:11:f1:1a:ba:26:27:56:91:e8:5d:cf:52:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: Mar 29 04:00:19 2026 GMT
Not After : Mar 30 04:00:19 2026 GMT
Subject: CN=e1de9a1489d564e37b944f57eb54ed4f8f668ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:4d:fd:c2:98:14:b0:27:66:1a:f6:f2:60:
2e:6c:fb:8e:d5:ee:c5:02:16:3c:75:62:19:0b:f7:
9c:d1:bf:9b:11:52:6d:14:8e:ac:c3:97:b9:7b:64:
b4:59:2c:cd:09:8a:10:67:f7:d2:f5:eb:ce:5c:61:
89:48:2a:63:31:b1:7a:06:b5:fe:50:17:21:f6:09:
92:57:a0:08:da:96:2b:63:d1:30:cf:47:20:06:6e:
6b:1e:77:a2:ac:d8:f9:c5:01:69:f9:7f:12:3e:bc:
5c:d7:5c:75:40:07:14:b0:b4:4c:bc:58:d2:d9:0d:
63:3b:c9:57:27:da:8a:56:6e:e5:d1:29:43:7a:48:
1a:2c:6c:71:90:9f:c0:50:ce:81:aa:a4:ba:70:6b:
b3:ed:eb:e0:ef:21:6c:16:8a:c7:b8:9f:11:aa:ab:
f7:b9:9f:90:e5:df:d2:91:0e:7d:dd:fc:4f:0a:31:
c2:bf:00:fd:93:8d:74:d8:80:47:74:5e:47:5c:85:
cd:c3:df:fc:8a:06:03:6a:3b:cb:1c:b9:a4:f7:14:
06:fe:d2:bc:11:78:cf:b0:7c:65:0a:c2:3a:61:9b:
8e:0c:7d:10:f0:d1:96:e4:90:d3:ba:5f:16:21:3c:
39:55:64:30:08:49:a3:a8:c6:a9:65:65:6d:07:bf:
6c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DE:9A:14:89:D5:64:E3:7B:94:4F:57:EB:54:ED:4F:8F:66:8E:E0
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c5:aa:99:a6:45:54:ba:03:94:6b:e0:42:14:bf:90:a7:83:
72:0c:d9:06:72:e0:f9:26:b0:10:b2:3b:97:1c:bb:be:28:0a:
d7:da:d5:01:25:17:39:89:50:b6:91:72:5e:70:fd:49:f9:da:
0a:64:f3:85:77:db:16:59:9e:03:5d:49:a7:3e:5c:24:f9:cb:
be:5d:46:a8:27:c5:a8:37:d5:db:05:88:1f:cf:85:5f:25:54:
73:c2:00:bf:27:36:08:61:d8:67:02:93:94:7b:8a:d4:c9:02:
b5:e8:06:76:6a:ae:be:0c:a1:64:ff:d5:34:dc:d6:57:45:2d:
68:32:79:a8:05:54:7a:11:51:9e:31:88:c0:0e:64:ec:9a:14:
08:10:7c:aa:38:bb:c5:28:76:0e:e8:18:20:3a:4b:c1:a6:1c:
de:94:68:81:9e:de:47:7a:6b:31:52:e1:01:76:17:17:40:7c:
4b:76:59:f4:94:ba:37:b9:db:7e:f3:f4:f2:de:af:f2:e2:d2:
a3:13:8b:7c:d7:11:46:4f:eb:a2:ae:fa:53:e2:95:e0:43:f1:
b9:83:73:f6:3a:08:a2:6a:77:db:5c:17:62:c1:50:44:41:fd:
61:04:c0:9e:1b:70:dc:a5:f8:8e:8c:10:85:02:b1:62:a7:00:
4d:7c:52:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v/QR8Rq6JidWkehdz1JFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YTk4NTZkYjFhYjNiMjRmMDllOWNiOTI3NDM3Njg2Njgz
MDE0MTEwHhcNMjYwMzI5MDQwMDE5WhcNMjYwMzMwMDQwMDE5WjAzMTEwLwYDVQQD
EyhlMWRlOWExNDg5ZDU2NGUzN2I5NDRmNTdlYjU0ZWQ0ZjhmNjY4ZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw1N/cKYFLAnZhr28mAubPuO1e7F
AhY8dWIZC/ec0b+bEVJtFI6sw5e5e2S0WSzNCYoQZ/fS9evOXGGJSCpjMbF6BrX+
UBch9gmSV6AI2pYrY9Ewz0cgBm5rHneirNj5xQFp+X8SPrxc11x1QAcUsLRMvFjS
2Q1jO8lXJ9qKVm7l0SlDekgaLGxxkJ/AUM6BqqS6cGuz7evg7yFsForHuJ8Rqqv3
uZ+Q5d/SkQ593fxPCjHCvwD9k4102IBHdF5HXIXNw9/8igYDajvLHLmk9xQG/tK8
EXjPsHxlCsI6YZuODH0Q8NGW5JDTul8WITw5VWQwCEmjqMapZWVtB79sSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHemhSJ1WTje5RPV+tU7U+PZo7gMB8GA1UdIwQY
MBaAFGSphW2xqzsk8J6cuSdDdoZoMBQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYt
MzdhNDQyZTY1ZjE4LzEvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYtMzdhNDQyZTY1ZjE4
LzEvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8WqmaZF
VLoDlGvgQhS/kKeDcgzZBnLg+SawELI7lxy7vigK19rVASUXOYlQtpFyXnD9Sfna
CmTzhXfbFlmeA11Jpz5cJPnLvl1GqCfFqDfV2wWIH8+FXyVUc8IAvyc2CGHYZwKT
lHuK1MkCtegGdmquvgyhZP/VNNzWV0UtaDJ5qAVUehFRnjGIwA5k7JoUCBB8qji7
xSh2DugYIDpLwaYc3pRogZ7eR3prMVLhAXYXF0B8S3ZZ9JS6N7nbfvP08t6v8uLS
oxOLfNcRRk/roq76U+KV4EPxuYNz9joIomp321wXYsFQREH9YQTAnhtw3KX4jowQ
hQKxYqcATXxSSg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:31 2026 by rpki-client