Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
File: ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft (raw, json)
Hash identifier: RtCkqvL39BsIYo+bytSF7HbtIEEzZvoVFX8cMwhJntU=
Subject key identifier: 4A:DD:6F:E1:E0:F8:6E:3B:23:D1:78:67:0B:9F:A6:B3:7C:6F:C8:21
Authority key identifier: 66:C3:07:0A:74:5B:2C:16:7E:10:1A:16:1D:26:48:A1:BC:97:79:91
Certificate issuer: /CN=66c3070a745b2c167e101a161d2648a1bc977991
Certificate serial: 019D38D2ABFC1533C8CEA6E70247197AAE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
Manifest number: 01E5
Signing time: Sun 29 Mar 2026 09:00:23 +0000
Manifest this update: Sun 29 Mar 2026 09:00:23 +0000
Manifest next update: Mon 30 Mar 2026 09:00:23 +0000
Files and hashes: 1: EGLmRqYL0UveAe7GdroCAjp3RnU.roa (hash: K+cn6n/T0n+kIunjtfeLS+AwVWl7DCEWXgHG3rTv6jw=)
2: ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl (hash: kxufTvTAsP0MU8vb5lLO+60SNGjVJsIdGh4vCaIGnac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ab:fc:15:33:c8:ce:a6:e7:02:47:19:7a:ae:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66c3070a745b2c167e101a161d2648a1bc977991
Validity
Not Before: Mar 29 09:00:23 2026 GMT
Not After : Mar 30 09:00:23 2026 GMT
Subject: CN=4add6fe1e0f86e3b23d178670b9fa6b37c6fc821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:0d:a0:b3:2a:af:ca:ff:6a:46:08:d9:e1:
b7:4a:cf:00:2f:2c:4f:2d:7f:03:da:42:6f:6b:1f:
0f:20:8f:ee:51:ef:4c:84:f5:53:9a:a8:8e:bc:1e:
e5:e5:38:0b:17:c6:70:ac:29:35:09:ba:6a:a8:82:
09:3e:e4:dd:39:04:e9:98:21:02:03:85:1c:37:39:
2e:b8:51:e8:29:9b:a9:ef:f5:30:40:55:32:20:e4:
37:2e:77:4b:f3:d5:9f:7d:46:03:2d:6d:30:89:bb:
c1:32:85:49:99:10:4c:70:ef:53:35:41:cb:4f:39:
52:b7:97:91:e2:8b:27:28:78:3b:99:5f:a7:62:8d:
2c:ca:a6:17:6c:d8:0b:4b:b0:6b:02:82:79:7a:e6:
33:43:24:ea:c4:3a:8e:4c:60:fa:16:0e:1d:23:c3:
16:b3:a0:bf:99:c8:73:33:dd:45:8e:3d:2f:3a:46:
25:03:e0:ab:aa:7b:85:69:58:b5:0e:8c:b0:0e:0b:
a8:04:5c:22:1e:04:da:d1:2f:8f:77:a9:f7:5e:89:
e9:6f:2c:fa:ef:49:ef:1d:6e:ee:ba:c1:55:13:3a:
49:e4:c7:d2:d1:12:0d:36:1b:71:db:86:d6:6c:fb:
9d:51:21:55:17:b4:64:38:da:2e:f7:92:dd:c9:1e:
99:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DD:6F:E1:E0:F8:6E:3B:23:D1:78:67:0B:9F:A6:B3:7C:6F:C8:21
X509v3 Authority Key Identifier:
keyid:66:C3:07:0A:74:5B:2C:16:7E:10:1A:16:1D:26:48:A1:BC:97:79:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/663331-31dc-4ddf-84e0-5f90a2f90d03/1/ZsMHCnRbLBZ-EBoWHSZIobyXeZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:60:e9:37:59:1b:1a:88:3b:74:d2:60:d8:01:25:d3:fa:d7:
cc:3e:4a:1a:0b:a2:11:35:b3:ce:6f:a1:be:16:76:ab:d2:98:
2e:90:5a:fe:c4:d2:c9:29:ac:9e:3f:82:df:9c:d1:b7:61:d8:
18:ec:eb:21:be:12:6a:81:5b:99:a7:7f:f3:df:e9:a1:49:f9:
78:32:35:2a:07:44:fe:b9:8d:f3:e6:ff:a1:26:99:35:97:68:
c5:a2:1d:f2:94:c0:c3:0a:eb:6e:e0:d7:17:04:be:db:6a:bc:
e6:b8:40:5a:41:0e:d4:02:ab:3d:8f:26:49:19:69:16:8f:41:
78:3e:cf:e7:78:18:9d:6b:65:7f:45:4f:ed:8b:63:99:91:52:
07:0c:bf:36:1a:66:a8:bf:e6:ba:b5:ec:72:ef:76:18:ff:32:
ab:28:79:31:4e:c9:cb:0d:47:13:42:88:5d:5e:15:74:92:2d:
15:df:c0:ec:07:1c:f0:4b:67:30:db:a9:32:3f:7d:f9:04:fc:
76:8c:48:f9:7e:40:4b:07:32:24:7b:3d:f5:aa:fd:2f:8d:b4:
be:43:6e:8d:fe:30:45:8a:86:a7:56:3e:88:e5:1f:64:d6:db:
b1:cd:3a:ef:38:62:b5:0a:aa:56:d5:d3:ae:31:60:a6:04:ac:
02:fe:e8:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040qv8FTPIzqbnAkcZeq5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YzMwNzBhNzQ1YjJjMTY3ZTEwMWExNjFkMjY0OGExYmM5
Nzc5OTEwHhcNMjYwMzI5MDkwMDIzWhcNMjYwMzMwMDkwMDIzWjAzMTEwLwYDVQQD
Eyg0YWRkNmZlMWUwZjg2ZTNiMjNkMTc4NjcwYjlmYTZiMzdjNmZjODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2ANoLMqr8r/akYI2eG3Ss8ALyxP
LX8D2kJvax8PII/uUe9MhPVTmqiOvB7l5TgLF8ZwrCk1CbpqqIIJPuTdOQTpmCEC
A4UcNzkuuFHoKZup7/UwQFUyIOQ3LndL89WffUYDLW0wibvBMoVJmRBMcO9TNUHL
TzlSt5eR4osnKHg7mV+nYo0syqYXbNgLS7BrAoJ5euYzQyTqxDqOTGD6Fg4dI8MW
s6C/mchzM91Fjj0vOkYlA+CrqnuFaVi1DoywDguoBFwiHgTa0S+Pd6n3Xonpbyz6
70nvHW7uusFVEzpJ5MfS0RINNhtx24bWbPudUSFVF7RkONou95LdyR6ZrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErdb+Hg+G47I9F4ZwufprN8b8ghMB8GA1UdIwQY
MBaAFGbDBwp0WywWfhAaFh0mSKG8l3mRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnNNSENuUmJMQlotRUJvV0hTWklvYnlYZVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82NjMzMzEtMzFkYy00ZGRmLTg0ZTAt
NWY5MGEyZjkwZDAzLzEvWnNNSENuUmJMQlotRUJvV0hTWklvYnlYZVpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82NjMzMzEtMzFkYy00ZGRmLTg0ZTAtNWY5MGEyZjkwZDAz
LzEvWnNNSENuUmJMQlotRUJvV0hTWklvYnlYZVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimDpN1kb
Gog7dNJg2AEl0/rXzD5KGguiETWzzm+hvhZ2q9KYLpBa/sTSySmsnj+C35zRt2HY
GOzrIb4SaoFbmad/89/poUn5eDI1KgdE/rmN8+b/oSaZNZdoxaId8pTAwwrrbuDX
FwS+22q85rhAWkEO1AKrPY8mSRlpFo9BeD7P53gYnWtlf0VP7YtjmZFSBwy/Nhpm
qL/murXscu92GP8yqyh5MU7Jyw1HE0KIXV4VdJItFd/A7Acc8EtnMNupMj99+QT8
doxI+X5ASwcyJHs99ar9L420vkNujf4wRYqGp1Y+iOUfZNbbsc067zhitQqqVtXT
rjFgpgSsAv7o6g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:00 2026 by rpki-client