Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: 1iHAKeXdkCAels0SgODgpeiJ++2j7a8ufwb22zLd2gM=
Subject key identifier: 58:AA:07:A1:C8:C3:C6:0E:01:FF:21:6D:74:1F:BC:98:1B:3E:32:52
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 019D3977890DAC33B44F6576656D7C734497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 12:00:28 +0000
Manifest this update: Sun 29 Mar 2026 12:00:28 +0000
Manifest next update: Mon 30 Mar 2026 12:00:28 +0000
Files and hashes: 1: 8r944bJqG_LM17rTDE1uGAYMcO4.roa (hash: US/6Z/+ktv9Mac1FJpsH2XS8YNAZ76aWDA9Ebr1o3lU=)
2: BcVatgINhehxpYUrBXABJ41nAt0.roa (hash: GcuNKsGTXhiIzKjZT1cDQ3vbaLRIxIZoGDWXVty3fns=)
3: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: f2qm6y53dPJNtegolQBilTlIsYf9wrKF700SCzp/nhk=)
4: yG1gr2VlWKuTrkZ4POlu8-Ft8xo.roa (hash: wEYOZFW3nRAdwU0jliufiMLAbI5/X3da3ron9zmXMns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:89:0d:ac:33:b4:4f:65:76:65:6d:7c:73:44:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Mar 29 12:00:28 2026 GMT
Not After : Mar 30 12:00:28 2026 GMT
Subject: CN=58aa07a1c8c3c60e01ff216d741fbc981b3e3252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:4d:83:ac:0e:ce:bb:d1:95:82:aa:59:b2:
aa:42:e3:23:71:0e:b7:ff:1d:fa:38:e2:6c:37:f5:
7e:3f:c9:16:7b:ad:d0:10:39:df:0e:69:d4:30:e9:
dc:0b:c5:25:99:c0:6e:fa:62:50:6a:3d:67:63:84:
95:d1:1f:7b:92:f4:39:63:eb:8c:f9:a9:7c:c3:ab:
5f:53:89:f5:05:a0:25:27:ee:e2:08:1e:52:1b:dc:
17:33:73:84:fe:eb:e6:c3:56:ec:41:89:0c:74:a8:
ae:08:bf:1f:48:b3:39:e2:c7:5d:e2:05:14:01:b0:
49:06:24:14:95:50:a0:4a:28:01:c1:52:a9:df:12:
b3:ea:07:51:9e:9a:c4:0f:1d:d3:ed:3b:24:68:ec:
9f:94:02:9a:1f:7c:68:ad:e0:d2:49:09:d3:03:97:
4d:2a:c4:65:0e:95:72:c0:c4:3a:86:41:d1:8c:62:
df:69:40:eb:8d:a3:4c:e1:89:e6:4a:75:f7:78:c8:
e3:9a:ac:88:61:bf:a0:d8:25:a9:cf:19:4f:69:e0:
fd:6c:c7:d4:19:68:04:fa:9f:82:25:a9:f5:8a:ed:
41:2a:63:b6:30:17:cf:72:b7:b2:51:a5:18:7e:92:
14:9b:0b:c5:35:d6:4a:88:71:ca:6e:73:3f:5e:e5:
d1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AA:07:A1:C8:C3:C6:0E:01:FF:21:6D:74:1F:BC:98:1B:3E:32:52
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:a8:d2:eb:50:2f:b1:08:75:13:48:4d:38:d8:19:68:c1:f2:
af:b7:a1:ae:f7:0c:c8:27:72:ad:04:83:c8:2a:76:b7:82:bb:
38:7f:16:32:3d:53:99:fc:42:c8:e5:c3:8f:79:7a:0c:0b:51:
2a:f4:4c:03:22:ed:e1:0c:a6:3e:c0:f1:1a:cc:b3:82:f7:04:
1c:74:d3:a7:b0:7e:89:b1:49:bf:1b:1b:72:bf:f5:0d:59:94:
77:2f:e8:fb:93:ea:df:db:90:67:53:93:b4:be:e6:52:be:49:
4b:dc:92:ac:32:47:3d:ba:11:b1:06:23:74:99:23:a1:64:b1:
53:a0:d7:0f:4e:4b:3f:80:3b:4b:d7:c0:fa:55:97:ae:93:0c:
90:4b:b7:8f:eb:86:95:12:e8:f6:3e:5f:3b:cd:64:04:a2:b1:
46:1b:ae:87:f1:24:a7:d4:64:0d:b3:99:a4:d3:17:cf:19:70:
73:bd:20:3a:76:f5:94:fc:a2:63:64:1e:b7:b3:6f:55:c1:c1:
36:27:5d:3b:e1:91:12:b7:3e:da:26:42:af:4c:71:4d:f2:09:
2a:bf:18:fa:fe:7a:3b:a6:c0:0a:4a:ad:1d:06:70:f2:82:b6:
05:04:ca:a8:da:4d:23:da:86:46:a3:30:aa:82:bb:75:28:c9:
2c:28:52:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d4kNrDO0T2V2ZW18c0SXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Mjc5NGMyZDJjZmEwNTQ2MzhiYTk1MGE1ZjY2OGU4NzYw
MTQxMmQwHhcNMjYwMzI5MTIwMDI4WhcNMjYwMzMwMTIwMDI4WjAzMTEwLwYDVQQD
Eyg1OGFhMDdhMWM4YzNjNjBlMDFmZjIxNmQ3NDFmYmM5ODFiM2UzMjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDdNg6wOzrvRlYKqWbKqQuMjcQ63
/x36OOJsN/V+P8kWe63QEDnfDmnUMOncC8UlmcBu+mJQaj1nY4SV0R97kvQ5Y+uM
+al8w6tfU4n1BaAlJ+7iCB5SG9wXM3OE/uvmw1bsQYkMdKiuCL8fSLM54sdd4gUU
AbBJBiQUlVCgSigBwVKp3xKz6gdRnprEDx3T7TskaOyflAKaH3xoreDSSQnTA5dN
KsRlDpVywMQ6hkHRjGLfaUDrjaNM4YnmSnX3eMjjmqyIYb+g2CWpzxlPaeD9bMfU
GWgE+p+CJan1iu1BKmO2MBfPcreyUaUYfpIUmwvFNdZKiHHKbnM/XuXRwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiqB6HIw8YOAf8hbXQfvJgbPjJSMB8GA1UdIwQY
MBaAFGQnlMLSz6BUY4upUKX2aOh2AUEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYt
MDYxNjM5ODEyYzc0LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYtMDYxNjM5ODEyYzc0
LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwKjS61Av
sQh1E0hNONgZaMHyr7ehrvcMyCdyrQSDyCp2t4K7OH8WMj1TmfxCyOXDj3l6DAtR
KvRMAyLt4QymPsDxGsyzgvcEHHTTp7B+ibFJvxsbcr/1DVmUdy/o+5Pq39uQZ1OT
tL7mUr5JS9ySrDJHPboRsQYjdJkjoWSxU6DXD05LP4A7S9fA+lWXrpMMkEu3j+uG
lRLo9j5fO81kBKKxRhuuh/Ekp9RkDbOZpNMXzxlwc70gOnb1lPyiY2Qet7NvVcHB
NiddO+GRErc+2iZCr0xxTfIJKr8Y+v56O6bACkqtHQZw8oK2BQTKqNpNI9qGRqMw
qoK7dSjJLChSPg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:29 2026 by rpki-client