Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File: ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier: RVf5Rv6E/HXgx7FnmGl7Cv8cxoheqZfLO0jCiIs7wog=
Subject key identifier: 9F:23:C1:3A:2B:EA:25:28:F0:A1:41:6B:3F:7B:6D:EC:53:EA:CD:17
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial: 019D2772E6ED24A22A3527AF1E7D5CE5CD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number: 16D7
Signing time: Thu 26 Mar 2026 00:02:14 +0000
Manifest this update: Thu 26 Mar 2026 00:02:14 +0000
Manifest next update: Fri 27 Mar 2026 00:02:14 +0000
Files and hashes: 1: ElW47ObyfnNKPgKpwIJenZynEps.roa (hash: MYYtJ2cX574IGimZRbIB/INbKI/GwnvZia+SyQYKKgY=)
2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: 3+kFH760VLQmNpnj4THvJIj3UkTliqCGaKLisqy8ThU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e6:ed:24:a2:2a:35:27:af:1e:7d:5c:e5:cd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
Validity
Not Before: Mar 26 00:02:14 2026 GMT
Not After : Mar 27 00:02:14 2026 GMT
Subject: CN=9f23c13a2bea2528f0a1416b3f7b6dec53eacd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:84:44:ac:4e:85:4e:80:8e:62:f4:76:fe:7e:
65:1e:b0:26:5d:78:49:df:8d:e4:de:89:87:e1:c7:
91:e1:34:8c:75:51:13:44:e0:36:bf:b2:24:54:f3:
db:c5:0e:66:6d:a9:d8:a8:35:f4:80:7b:f9:e7:f7:
4b:7e:6f:b6:f8:27:52:71:9d:45:f1:0f:1a:86:ac:
23:c9:be:98:aa:a4:9c:f7:26:6a:db:20:fb:4a:12:
97:ea:c6:81:a8:6b:53:b9:0f:a1:02:d2:9d:24:d4:
ea:16:c3:1a:7b:0e:7f:c8:11:7d:33:39:ca:fb:6a:
8c:9a:39:85:24:43:16:b0:79:b1:b6:76:19:ee:72:
0c:bc:1f:4c:36:cf:b0:d1:be:46:43:05:77:4f:cd:
2a:8b:11:20:6e:98:e6:c8:c8:e8:f2:9a:59:4c:73:
04:fa:b2:75:7a:e2:97:7c:b5:65:0d:eb:16:de:2d:
ec:f6:11:61:a3:2b:ae:c7:57:ad:ca:a8:b8:eb:9a:
0e:b2:72:c2:98:34:49:38:d8:47:4b:42:61:5b:ee:
f3:aa:4f:4f:2a:a0:7e:a2:7f:17:b7:eb:c5:7e:dc:
f7:35:38:8b:39:ca:df:7c:63:18:92:c1:c4:ee:10:
fa:96:77:d1:8a:19:83:b1:9b:10:4f:86:39:b0:41:
2c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:23:C1:3A:2B:EA:25:28:F0:A1:41:6B:3F:7B:6D:EC:53:EA:CD:17
X509v3 Authority Key Identifier:
keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ce:86:90:26:97:c6:7a:f9:9f:52:2b:e2:de:6c:8b:6b:38:
c0:08:97:17:06:05:6d:96:f0:dc:1e:42:58:7d:d9:fa:3e:5e:
10:2e:d0:e0:36:b5:d9:d7:5d:41:29:19:a9:4d:5c:ee:83:7e:
42:dd:5d:b5:d1:13:f8:ec:48:a9:f1:43:76:f6:77:92:8e:aa:
62:c4:b6:19:f9:05:c0:23:c6:00:ee:ab:b1:f3:7b:15:55:4b:
40:ae:2b:06:5f:24:6d:45:9c:29:e2:ad:96:3a:cf:96:01:c9:
02:3c:e0:af:80:10:fe:45:94:35:14:b5:40:95:67:cf:03:a0:
6c:ff:66:95:34:78:29:ce:3e:9a:17:1e:ed:d1:4b:c9:98:ed:
0f:5f:95:c1:c4:67:1b:62:a5:1c:d8:a5:0a:b4:a2:7d:31:62:
a1:1d:fe:81:f3:56:2b:13:0d:5b:5f:ee:0f:27:ef:85:35:92:
f2:37:6e:73:0f:e0:e4:35:db:df:c7:f4:77:82:6e:a8:90:26:
17:3e:d6:1e:d9:64:b5:ed:62:54:d3:c2:ca:da:5c:b0:f2:0a:
8e:24:31:d1:30:39:c9:c6:aa:be:39:ab:79:9c:44:e6:e8:f1:
b8:66:b9:2c:f9:9c:bf:fc:9a:0e:ae:9e:7a:25:b8:d5:3d:76:
69:aa:c1:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncubtJKIqNSevHn1c5c11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MjU5ZGVhM2U5Y2FlNmU4MTk1ODhjNWM5MTNmMDJkNDQx
MDM5OGIwHhcNMjYwMzI2MDAwMjE0WhcNMjYwMzI3MDAwMjE0WjAzMTEwLwYDVQQD
Eyg5ZjIzYzEzYTJiZWEyNTI4ZjBhMTQxNmIzZjdiNmRlYzUzZWFjZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YRErE6FToCOYvR2/n5lHrAmXXhJ
343k3omH4ceR4TSMdVETROA2v7IkVPPbxQ5mbanYqDX0gHv55/dLfm+2+CdScZ1F
8Q8ahqwjyb6YqqSc9yZq2yD7ShKX6saBqGtTuQ+hAtKdJNTqFsMaew5/yBF9MznK
+2qMmjmFJEMWsHmxtnYZ7nIMvB9MNs+w0b5GQwV3T80qixEgbpjmyMjo8ppZTHME
+rJ1euKXfLVlDesW3i3s9hFhoyuux1etyqi465oOsnLCmDRJONhHS0JhW+7zqk9P
KqB+on8Xt+vFftz3NTiLOcrffGMYksHE7hD6lnfRihmDsZsQT4Y5sEEsvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8jwTor6iUo8KFBaz97bexT6s0XMB8GA1UdIwQY
MBaAFGYlneo+nK5ugZWIxckT8C1EEDmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmlXZDZqNmNybTZCbFlqRnlSUHdMVVFRT1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8wYjMyNDktZmQ0OS00NTY3LWIzNmQt
Y2JiZTMyNDJjMmJkLzEvWmlXZDZqNmNybTZCbFlqRnlSUHdMVVFRT1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8wYjMyNDktZmQ0OS00NTY3LWIzNmQtY2JiZTMyNDJjMmJk
LzEvWmlXZDZqNmNybTZCbFlqRnlSUHdMVVFRT1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAls6GkCaX
xnr5n1Ir4t5si2s4wAiXFwYFbZbw3B5CWH3Z+j5eEC7Q4Da12dddQSkZqU1c7oN+
Qt1dtdET+OxIqfFDdvZ3ko6qYsS2GfkFwCPGAO6rsfN7FVVLQK4rBl8kbUWcKeKt
ljrPlgHJAjzgr4AQ/kWUNRS1QJVnzwOgbP9mlTR4Kc4+mhce7dFLyZjtD1+VwcRn
G2KlHNilCrSifTFioR3+gfNWKxMNW1/uDyfvhTWS8jducw/g5DXb38f0d4JuqJAm
Fz7WHtlkte1iVNPCytpcsPIKjiQx0TA5ycaqvjmreZxE5ujxuGa5LPmcv/yaDq6e
eiW41T12aarBVQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:23 2026 by rpki-client