Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: 5/J2l+vhb+Inav2DOn0K5a9MAOYcXYOd5OonHQndCp4=
Subject key identifier: FF:7C:09:69:49:03:85:3F:68:D3:DD:82:BB:20:19:E5:FE:C9:6D:82
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019D29CDCD6C7C5E86D89ADF3DE2B4F4B34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 06E7
Signing time: Thu 26 Mar 2026 11:00:46 +0000
Manifest this update: Thu 26 Mar 2026 11:00:46 +0000
Manifest next update: Fri 27 Mar 2026 11:00:46 +0000
Files and hashes: 1: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (hash: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4=)
2: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (hash: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ=)
3: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: tyukLbN6jZkdAX0R/wqUL4SygAOyv+5XrXT0dlISSKo=)
4: yGnTUZ-K5iZvv_QJlyjyr1Vifo0.roa (hash: 3NvMCRIYGPgbO9Y+3R7bmJF+C6D6NUF59+RrT9ZBe2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:cd:6c:7c:5e:86:d8:9a:df:3d:e2:b4:f4:b3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Mar 26 11:00:46 2026 GMT
Not After : Mar 27 11:00:46 2026 GMT
Subject: CN=ff7c09694903853f68d3dd82bb2019e5fec96d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f6:be:4f:0c:da:0a:21:61:58:52:e5:6a:66:
0c:1c:fb:f4:a3:7f:58:d8:be:97:a0:4a:b2:9d:0d:
0f:25:ed:d9:25:16:18:5f:b6:ba:93:ae:8d:84:ac:
3b:3a:25:7e:94:fd:c0:99:03:ea:78:7c:c0:e0:ce:
f2:d1:b2:71:9b:0f:3e:c8:e4:06:3e:26:64:52:b3:
0f:67:ab:f5:9b:12:7e:d8:61:e4:79:79:38:76:75:
66:f0:9c:12:53:a2:be:1a:54:5b:0f:8a:04:f8:b6:
4e:e3:b2:95:4a:5a:24:a9:4b:0b:05:49:16:ff:fd:
57:0a:a6:0b:c7:3e:1d:b5:84:63:b0:91:6b:5a:46:
a8:9c:33:a6:db:27:50:04:07:f9:32:5f:15:c1:46:
69:d9:4b:14:ba:84:b0:68:4c:46:7f:1e:bc:6c:42:
cc:4b:27:f2:35:a8:57:e6:6e:5a:d5:fd:e4:cf:05:
6f:09:2e:7d:49:86:7c:d9:1b:5d:d6:e8:90:94:e7:
61:63:85:87:58:84:f0:de:54:1f:a1:08:f5:02:1e:
75:bf:61:3a:6e:5e:ee:9b:fe:ab:3c:51:4e:b1:0d:
7e:88:f9:38:be:ec:08:7d:b8:34:8f:0b:e1:b2:65:
1f:ba:ad:5a:dc:52:dc:01:7f:06:d0:29:3f:76:89:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7C:09:69:49:03:85:3F:68:D3:DD:82:BB:20:19:E5:FE:C9:6D:82
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:42:1e:d8:9f:4b:1a:86:a9:94:b9:c8:57:78:3a:b4:27:9a:
1a:96:11:56:e6:81:91:93:1e:58:fb:20:4d:90:82:df:40:0f:
69:6b:25:85:d0:9b:de:2e:40:a7:31:c0:35:aa:c1:8e:dc:e9:
f1:90:71:ae:37:ec:b2:c2:60:d0:ce:b3:2e:dd:e7:38:7a:af:
22:6b:5a:84:45:c9:b3:33:d1:bb:3f:e1:28:fb:de:29:c3:32:
0b:4a:13:e6:b5:32:d9:bf:9e:71:3d:84:5c:e2:4b:98:12:c4:
9b:98:12:7e:55:08:69:c8:0e:15:19:7d:57:b0:54:fe:09:b6:
95:2f:aa:d4:5d:4b:8c:98:d4:32:eb:7f:dc:0e:6e:c7:67:84:
33:5d:ba:16:9d:ce:d6:8f:f4:6c:00:55:46:30:4e:26:13:1f:
7a:31:2d:9c:c6:43:cf:99:52:b1:a3:45:f1:f2:1b:21:1c:a3:
67:5e:60:07:0a:be:07:28:93:38:e4:8a:55:5a:ad:83:d5:cc:
99:ce:9b:0d:0b:0b:10:d2:85:ca:64:60:aa:6d:4f:0b:ee:88:
f3:62:9c:b5:00:bd:48:9c:42:7a:da:b2:79:44:97:b5:03:a9:
14:ea:eb:23:68:11:e8:58:a1:57:c8:6d:e6:6d:73:1c:69:8a:
4b:4a:c8:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzc1sfF6G2JrfPeK09LNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MGU2MDc3OWYzY2Q0ZDAzZDVlNTA3ODQwZjVmYTJhMzFh
NmFiOGQwHhcNMjYwMzI2MTEwMDQ2WhcNMjYwMzI3MTEwMDQ2WjAzMTEwLwYDVQQD
EyhmZjdjMDk2OTQ5MDM4NTNmNjhkM2RkODJiYjIwMTllNWZlYzk2ZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Pa+TwzaCiFhWFLlamYMHPv0o39Y
2L6XoEqynQ0PJe3ZJRYYX7a6k66NhKw7OiV+lP3AmQPqeHzA4M7y0bJxmw8+yOQG
PiZkUrMPZ6v1mxJ+2GHkeXk4dnVm8JwSU6K+GlRbD4oE+LZO47KVSlokqUsLBUkW
//1XCqYLxz4dtYRjsJFrWkaonDOm2ydQBAf5Ml8VwUZp2UsUuoSwaExGfx68bELM
SyfyNahX5m5a1f3kzwVvCS59SYZ82Rtd1uiQlOdhY4WHWITw3lQfoQj1Ah51v2E6
bl7um/6rPFFOsQ1+iPk4vuwIfbg0jwvhsmUfuq1a3FLcAX8G0Ck/don3zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP98CWlJA4U/aNPdgrsgGeX+yW2CMB8GA1UdIwQY
MBaAFGcOYHefPNTQPV5QeED1+ioxpquNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUt
MzUwMDRhNjcxZWIzLzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUtMzUwMDRhNjcxZWIz
LzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEIe2J9L
GoaplLnIV3g6tCeaGpYRVuaBkZMeWPsgTZCC30APaWslhdCb3i5ApzHANarBjtzp
8ZBxrjfsssJg0M6zLt3nOHqvImtahEXJszPRuz/hKPveKcMyC0oT5rUy2b+ecT2E
XOJLmBLEm5gSflUIacgOFRl9V7BU/gm2lS+q1F1LjJjUMut/3A5ux2eEM126Fp3O
1o/0bABVRjBOJhMfejEtnMZDz5lSsaNF8fIbIRyjZ15gBwq+ByiTOOSKVVqtg9XM
mc6bDQsLENKFymRgqm1PC+6I82KctQC9SJxCetqyeUSXtQOpFOrrI2gR6FihV8ht
5m1zHGmKS0rIuQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:05:05 2026 by rpki-client