Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier: AfSkKmbOvjYGXSSkWis/1rmT0ncgkQ3jPoypMGhK3YA=
Subject key identifier: 75:95:7D:F8:08:EC:F4:02:DC:35:6A:9F:F0:E9:2E:69:9C:2F:C2:75
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 019D26280E625501A638654D813F3E4C36A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number: 09FD
Signing time: Wed 25 Mar 2026 18:00:52 +0000
Manifest this update: Wed 25 Mar 2026 18:00:52 +0000
Manifest next update: Thu 26 Mar 2026 18:00:52 +0000
Files and hashes: 1: 4kNIwYTUrVA18oIc_9jtqMOd7CI.roa (hash: L+g00yM7LCta/KmSbttT3iWTPXIIbIasMm1ZRHqbtYg=)
2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: nyjZY4hxj15FTu3UIWIo+yaezTJLmGP4GePE9SB7PvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0e:62:55:01:a6:38:65:4d:81:3f:3e:4c:36:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Mar 25 18:00:52 2026 GMT
Not After : Mar 26 18:00:52 2026 GMT
Subject: CN=75957df808ecf402dc356a9ff0e92e699c2fc275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:55:61:7b:d7:db:05:85:e1:2a:4a:2b:e8:
41:e5:0b:62:34:9b:db:a0:9e:75:06:93:5c:b4:09:
1a:2f:9d:de:48:a9:73:39:71:69:ef:e9:72:09:f1:
da:8f:a8:95:8e:63:67:2c:91:1d:f8:32:48:95:79:
78:a8:2b:7d:e5:56:8f:27:75:3a:b7:3d:e6:cd:b0:
9d:3a:71:7a:50:1e:66:1f:f8:89:af:5a:ff:2f:28:
bb:83:a4:ad:2a:22:7b:aa:98:0d:ec:db:d7:26:c3:
c6:7c:fc:d0:d1:30:37:94:24:2b:04:6d:55:19:93:
0e:16:46:12:2f:3b:6c:c7:80:3d:22:43:60:90:e3:
6f:b5:b3:2d:9e:4f:a8:4e:e1:eb:4e:ee:77:76:9a:
59:13:50:43:46:f6:c3:8b:01:77:c4:a9:67:75:17:
9c:73:b0:cf:28:6d:0f:21:3e:1a:65:0d:f1:e3:51:
58:16:03:3d:af:47:c3:85:c9:0f:bd:cd:ec:82:4d:
e5:0d:b6:d5:3e:c0:06:df:55:c0:a2:c4:22:2d:56:
a2:95:db:08:12:46:07:ac:6f:c9:9c:87:43:27:cb:
dc:82:e3:ac:17:51:04:f7:cd:96:27:b7:9d:95:30:
f6:07:78:a5:76:95:bd:2c:74:34:62:d5:3a:e0:99:
b9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:95:7D:F8:08:EC:F4:02:DC:35:6A:9F:F0:E9:2E:69:9C:2F:C2:75
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a7:d8:f0:54:f1:0e:5f:e6:8e:b3:98:a6:41:08:57:ef:20:
55:6c:db:95:72:85:ad:b3:94:24:ed:71:43:a5:b0:62:b8:0c:
1f:fe:09:3b:3d:c0:49:82:2e:72:40:22:0c:a0:78:2e:36:8b:
38:69:0a:0b:b8:5e:52:3a:44:2d:b9:1e:8a:3a:dd:df:35:c9:
5b:cd:e8:ff:b4:1f:19:57:99:85:b3:47:0e:18:ee:24:dd:07:
6a:a8:b5:e6:f3:6f:69:95:6c:90:cd:c4:8f:3a:b5:45:75:ea:
db:a4:6b:15:d1:65:cd:8a:ea:9a:71:b0:68:66:80:01:21:f8:
7a:9a:e7:62:c4:ac:a7:c1:62:be:60:95:96:e4:a3:a1:28:bc:
69:e9:71:24:dd:0b:62:cd:85:91:a5:77:bf:e8:56:7c:65:01:
6b:7e:ac:8b:7d:9a:32:56:54:79:29:3c:9b:a3:d9:e2:3b:c8:
75:d8:f1:49:31:ad:a6:99:70:00:d3:d0:63:9d:86:e0:a1:ae:
1b:d2:17:fa:47:7b:5d:a7:50:68:3f:e2:0f:71:0a:14:54:59:
20:0d:2b:6c:72:c8:6f:67:ea:16:7b:9f:09:c1:9e:97:be:a1:
b1:05:4d:79:ba:28:29:ff:58:b4:7b:54:4b:12:85:d4:bf:28:
2b:85:b2:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKA5iVQGmOGVNgT8+TDaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTNmMmIwNGViODViNmEyYTZlMjFjMDNjZmJiNzcyODdh
NDVhZmYwHhcNMjYwMzI1MTgwMDUyWhcNMjYwMzI2MTgwMDUyWjAzMTEwLwYDVQQD
Eyg3NTk1N2RmODA4ZWNmNDAyZGMzNTZhOWZmMGU5MmU2OTljMmZjMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFpVYXvX2wWF4SpKK+hB5QtiNJvb
oJ51BpNctAkaL53eSKlzOXFp7+lyCfHaj6iVjmNnLJEd+DJIlXl4qCt95VaPJ3U6
tz3mzbCdOnF6UB5mH/iJr1r/Lyi7g6StKiJ7qpgN7NvXJsPGfPzQ0TA3lCQrBG1V
GZMOFkYSLztsx4A9IkNgkONvtbMtnk+oTuHrTu53dppZE1BDRvbDiwF3xKlndRec
c7DPKG0PIT4aZQ3x41FYFgM9r0fDhckPvc3sgk3lDbbVPsAG31XAosQiLVaildsI
EkYHrG/JnIdDJ8vcguOsF1EE982WJ7edlTD2B3ildpW9LHQ0YtU64Jm5LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWVffgI7PQC3DVqn/DpLmmcL8J1MB8GA1UdIwQY
MBaAFGaT8rBOuFtqKm4hwDz7t3KHpFr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zMDdiZTgtNWUxMS00MTEwLWExZDMt
M2E5YzBmYmM4YTBhLzEvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zMDdiZTgtNWUxMS00MTEwLWExZDMtM2E5YzBmYmM4YTBh
LzEvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqfY8FTx
Dl/mjrOYpkEIV+8gVWzblXKFrbOUJO1xQ6WwYrgMH/4JOz3ASYIuckAiDKB4LjaL
OGkKC7heUjpELbkeijrd3zXJW83o/7QfGVeZhbNHDhjuJN0Haqi15vNvaZVskM3E
jzq1RXXq26RrFdFlzYrqmnGwaGaAASH4eprnYsSsp8FivmCVluSjoSi8aelxJN0L
Ys2FkaV3v+hWfGUBa36si32aMlZUeSk8m6PZ4jvIddjxSTGtpplwANPQY52G4KGu
G9IX+kd7XadQaD/iD3EKFFRZIA0rbHLIb2fqFnufCcGel76hsQVNebooKf9YtHtU
SxKF1L8oK4WyMQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:37 2026 by rpki-client