Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
File: zR9zNFeUzkgX6pno2M_OpxvXg2c.mft (raw, json)
Hash identifier: kMnDEM6542OsCSydI15092l9oSLv0bytqcVBJmxSk5k=
Subject key identifier: 58:CB:00:CE:DF:E3:91:D5:53:9B:1F:36:0B:B8:49:65:70:3E:F5:20
Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
Certificate issuer: /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Certificate serial: 019D2997121DD9C19646F66BA6D3A5666669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
Manifest number: 0870
Signing time: Thu 26 Mar 2026 10:00:59 +0000
Manifest this update: Thu 26 Mar 2026 10:00:59 +0000
Manifest next update: Fri 27 Mar 2026 10:00:59 +0000
Files and hashes: 1: EGCxmj_3P4OdgMPqYMZRoqDAaa0.roa (hash: F/HUrp6QsLnvcSoouuAdZYE36oDXQmOSKH9XVdoGe+Q=)
2: zR9zNFeUzkgX6pno2M_OpxvXg2c.crl (hash: V3ooI2f/OtVY8iVcUXjfr2gPbClmbkP+i1RHrV8Z9gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:12:1d:d9:c1:96:46:f6:6b:a6:d3:a5:66:66:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Validity
Not Before: Mar 26 10:00:59 2026 GMT
Not After : Mar 27 10:00:59 2026 GMT
Subject: CN=58cb00cedfe391d5539b1f360bb84965703ef520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:87:d1:17:96:99:dc:f5:3c:f9:a1:92:58:
09:e5:9e:23:c1:b9:cb:0b:40:1c:58:c8:8d:37:11:
d1:35:58:4a:ff:f3:ab:8e:f9:40:70:99:89:24:49:
70:b9:57:95:ad:e0:2f:c4:90:1e:36:63:29:4a:4f:
e7:e4:e1:f6:88:3b:cc:d0:30:11:3b:94:82:41:1e:
69:b9:17:16:cf:8a:29:73:49:d3:af:16:d3:28:e1:
36:92:67:b1:9d:a9:57:b0:72:cd:b5:16:5f:d6:35:
5b:92:dc:ad:d8:32:56:e1:57:0b:96:cc:72:2b:62:
22:c7:e2:e8:d9:6e:3a:0b:85:b5:27:03:f6:7f:ff:
8a:ec:dc:2e:ac:3b:d6:b7:be:44:f3:5e:96:85:16:
67:e3:5a:38:86:a6:65:f4:42:cf:81:fd:0f:5f:23:
be:54:55:3b:88:55:f9:02:1f:0f:7d:d6:42:49:e0:
ec:5a:ce:fe:e7:65:fa:40:79:f0:81:30:1f:30:8f:
18:cf:c3:f8:0f:44:a1:46:27:31:b8:74:2c:27:fc:
88:cd:a7:c3:d7:38:37:2e:54:88:49:b7:83:53:d0:
63:b2:7a:23:71:dc:98:29:73:5d:e1:d7:6b:2b:bd:
55:86:87:7d:ac:2d:e5:e6:d9:0c:1f:f2:09:59:e3:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CB:00:CE:DF:E3:91:D5:53:9B:1F:36:0B:B8:49:65:70:3E:F5:20
X509v3 Authority Key Identifier:
keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:94:7d:28:f9:0c:91:f0:88:b7:f8:43:d8:65:25:e7:7e:a4:
f3:db:8c:d0:0d:77:25:28:47:3c:4b:e2:5b:00:0b:cc:c9:22:
97:96:8b:0d:88:80:fa:21:34:77:c7:74:59:91:bd:70:03:23:
95:b3:56:b1:fd:8b:68:0e:62:c0:44:c1:3f:8a:78:e0:ac:62:
29:0b:89:3d:da:c4:29:ca:d7:d5:c4:c0:cb:a0:cd:e5:95:87:
4a:ea:3b:bf:3c:63:eb:57:df:4d:ce:3d:01:9a:32:ed:87:da:
ea:45:42:12:8b:01:b5:c9:76:8a:c8:61:f0:01:fb:be:09:14:
78:b6:43:96:33:75:ee:d6:81:2e:dd:79:ec:14:3b:12:19:21:
c3:fe:86:5e:5c:8e:0f:45:8f:07:0a:8e:84:ac:29:1c:58:03:
97:1c:ab:2d:44:25:a9:ed:1b:a0:59:e2:c4:42:af:16:35:f9:
88:5e:7b:01:53:0c:7a:e9:d0:89:60:18:92:e5:9c:5d:f0:61:
3f:c8:19:16:87:e4:bd:93:44:2a:a3:2f:27:02:f8:c3:97:84:
12:1d:ac:36:5c:d4:ea:5b:bb:4e:3a:e4:14:d9:52:a8:ae:fa:
f2:00:dd:de:c4:f0:df:27:b1:8d:33:f7:16:f7:08:80:10:51:
42:af:9c:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plxId2cGWRvZrptOlZmZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMWY3MzM0NTc5NGNlNDgxN2VhOTllOGQ4Y2ZjZWE3MWJk
NzgzNjcwHhcNMjYwMzI2MTAwMDU5WhcNMjYwMzI3MTAwMDU5WjAzMTEwLwYDVQQD
Eyg1OGNiMDBjZWRmZTM5MWQ1NTM5YjFmMzYwYmI4NDk2NTcwM2VmNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0+H0ReWmdz1PPmhklgJ5Z4jwbnL
C0AcWMiNNxHRNVhK//OrjvlAcJmJJElwuVeVreAvxJAeNmMpSk/n5OH2iDvM0DAR
O5SCQR5puRcWz4opc0nTrxbTKOE2kmexnalXsHLNtRZf1jVbktyt2DJW4VcLlsxy
K2Iix+Lo2W46C4W1JwP2f/+K7NwurDvWt75E816WhRZn41o4hqZl9ELPgf0PXyO+
VFU7iFX5Ah8PfdZCSeDsWs7+52X6QHnwgTAfMI8Yz8P4D0ShRicxuHQsJ/yIzafD
1zg3LlSISbeDU9BjsnojcdyYKXNd4ddrK71Vhod9rC3l5tkMH/IJWeO0SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjLAM7f45HVU5sfNgu4SWVwPvUgMB8GA1UdIwQY
MBaAFM0fczRXlM5IF+qZ6NjPzqcb14NnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MDExNzAtZTYwNi00ZmQxLTg1MDQt
N2YwZDA3YmE0YWYzLzEvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MDExNzAtZTYwNi00ZmQxLTg1MDQtN2YwZDA3YmE0YWYz
LzEvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJR9KPkM
kfCIt/hD2GUl536k89uM0A13JShHPEviWwALzMkil5aLDYiA+iE0d8d0WZG9cAMj
lbNWsf2LaA5iwETBP4p44KxiKQuJPdrEKcrX1cTAy6DN5ZWHSuo7vzxj61ffTc49
AZoy7Yfa6kVCEosBtcl2ishh8AH7vgkUeLZDljN17taBLt157BQ7Ehkhw/6GXlyO
D0WPBwqOhKwpHFgDlxyrLUQlqe0boFnixEKvFjX5iF57AVMMeunQiWAYkuWcXfBh
P8gZFofkvZNEKqMvJwL4w5eEEh2sNlzU6lu7TjrkFNlSqK768gDd3sTw3yexjTP3
FvcIgBBRQq+cVA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:34:52 2026 by rpki-client