Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: 6nFetr2hp/RcfQMVuxS8VuiwLnJR3Lxn3ZzIacU3dHw=
Subject key identifier: BE:46:41:95:75:6F:E3:3C:5A:41:53:CC:62:15:39:3D:B0:29:C4:D2
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 019D2BBC1FA4F739CE507D17956F8787DA06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 1207
Signing time: Thu 26 Mar 2026 20:00:42 +0000
Manifest this update: Thu 26 Mar 2026 20:00:42 +0000
Manifest next update: Fri 27 Mar 2026 20:00:42 +0000
Files and hashes: 1: a0kN2gfK01wMuqhoW-MZjPAbstc.roa (hash: mmiujuewrIIcuNRFw3juwDDGpDhJAvUuobcjAggyfUE=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: s9BpzIHFEyxpfSVRJzQ/2mCcGSDW/iecw9aOp+OgmDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:1f:a4:f7:39:ce:50:7d:17:95:6f:87:87:da:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Mar 26 20:00:42 2026 GMT
Not After : Mar 27 20:00:42 2026 GMT
Subject: CN=be464195756fe33c5a4153cc6215393db029c4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:63:a6:d0:53:74:94:f6:08:be:d1:0a:d1:
30:8d:2b:1f:9f:4d:03:cd:4b:39:ae:78:eb:ce:19:
e5:62:16:30:bc:17:7d:76:75:39:97:70:11:c0:4a:
48:96:da:83:7d:68:06:3b:89:e9:22:79:27:91:8c:
6a:24:ad:13:9d:d4:e3:aa:94:1d:6e:5e:00:ec:84:
d9:80:7f:89:a0:28:79:4e:d1:cf:83:ae:95:f0:11:
0b:84:de:57:db:9e:7c:be:70:bd:3c:09:c3:14:a4:
3b:da:ab:1e:36:9f:ae:65:c8:fb:62:6a:4e:9b:9f:
52:e6:42:d5:d8:7b:1b:fd:7e:2c:37:13:c9:89:10:
20:e9:4b:e2:76:ed:c1:df:5d:82:84:be:f8:1f:6d:
6f:89:ba:12:22:da:0a:66:9a:e4:1a:f9:00:60:58:
fd:e1:5c:6c:b8:79:2b:41:ef:85:fa:45:27:20:58:
cf:bc:b6:66:b3:26:0f:9e:24:84:4a:fe:ad:6a:bf:
aa:48:00:3a:33:ca:dd:75:bd:65:bc:20:20:6a:3d:
bb:0d:1b:15:d6:cb:cb:9f:27:cd:f1:d3:3c:4b:0a:
b4:45:80:c6:35:32:75:1e:40:c7:2a:c8:b2:c6:b0:
b2:e4:3c:6c:e2:15:d0:7e:df:01:49:54:60:93:29:
5e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:46:41:95:75:6F:E3:3C:5A:41:53:CC:62:15:39:3D:B0:29:C4:D2
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a5:c7:4d:01:79:05:2f:f1:18:51:59:87:5b:23:13:65:9b:
16:3c:be:54:76:9f:62:e0:21:72:0c:8f:10:e4:2c:4c:a1:d2:
7e:1c:98:14:21:ad:d8:04:ee:7e:3e:86:c7:ec:4f:6c:c3:ff:
d7:3d:72:36:a0:44:53:a1:10:a5:42:d4:a0:dd:31:f0:c6:1e:
7c:54:29:6e:3f:8b:0e:5f:01:17:de:0a:82:7c:34:93:35:45:
7a:74:ef:4d:d7:27:07:eb:c6:0f:fa:d8:4d:14:a0:56:59:02:
d5:2d:3f:36:e5:93:bd:c3:ac:d8:eb:40:8b:c6:51:96:3d:c5:
6a:f9:b1:4c:e2:a3:6d:83:a5:00:dc:1d:c9:64:94:da:a1:e7:
5d:d8:91:1e:1e:52:25:8b:fe:16:79:33:25:d8:9e:64:75:ae:
04:9e:6e:0c:b8:44:b0:00:99:16:ee:c4:48:f4:d1:f0:7a:8d:
bc:82:a5:ad:fe:5a:8f:aa:ed:ed:ad:36:e6:cb:f2:9d:f3:15:
43:44:c9:7a:df:5a:79:12:91:15:6b:f0:9b:6c:97:9f:02:4e:
2f:30:a6:f5:ce:db:2b:bd:62:4c:3f:0f:5d:29:14:01:22:d7:
7b:69:05:da:8d:f8:14:b1:66:80:59:92:81:07:a9:30:5a:f8:
0a:cc:a3:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rvB+k9znOUH0XlW+Hh9oGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzA4N2NjNzAyYzhkOTM1M2ZlNzhmNzkzMjQ0MGI3ZTg0
MmZjNmUwHhcNMjYwMzI2MjAwMDQyWhcNMjYwMzI3MjAwMDQyWjAzMTEwLwYDVQQD
EyhiZTQ2NDE5NTc1NmZlMzNjNWE0MTUzY2M2MjE1MzkzZGIwMjljNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4ljptBTdJT2CL7RCtEwjSsfn00D
zUs5rnjrzhnlYhYwvBd9dnU5l3ARwEpIltqDfWgGO4npInknkYxqJK0TndTjqpQd
bl4A7ITZgH+JoCh5TtHPg66V8BELhN5X2558vnC9PAnDFKQ72qseNp+uZcj7YmpO
m59S5kLV2Hsb/X4sNxPJiRAg6Uvidu3B312ChL74H21viboSItoKZprkGvkAYFj9
4VxsuHkrQe+F+kUnIFjPvLZmsyYPniSESv6tar+qSAA6M8rddb1lvCAgaj27DRsV
1svLnyfN8dM8Swq0RYDGNTJ1HkDHKsiyxrCy5Dxs4hXQft8BSVRgkyleawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5GQZV1b+M8WkFTzGIVOT2wKcTSMB8GA1UdIwQY
MBaAFM0wh8xwLI2TU/5495MkQLfoQvxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWIt
ZjA4ZDcxYzRmM2RiLzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWItZjA4ZDcxYzRmM2Ri
LzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKXHTQF5
BS/xGFFZh1sjE2WbFjy+VHafYuAhcgyPEOQsTKHSfhyYFCGt2ATufj6Gx+xPbMP/
1z1yNqBEU6EQpULUoN0x8MYefFQpbj+LDl8BF94Kgnw0kzVFenTvTdcnB+vGD/rY
TRSgVlkC1S0/NuWTvcOs2OtAi8ZRlj3FavmxTOKjbYOlANwdyWSU2qHnXdiRHh5S
JYv+FnkzJdieZHWuBJ5uDLhEsACZFu7ESPTR8HqNvIKlrf5aj6rt7a025svynfMV
Q0TJet9aeRKRFWvwm2yXnwJOLzCm9c7bK71iTD8PXSkUASLXe2kF2o34FLFmgFmS
gQepMFr4CsyjFg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:10:16 2026 by rpki-client