Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
File: ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json)
Hash identifier: LXs2V2THyLhYViKS7GzHynYgPBGqt8lDVkw2ibczhgc=
Subject key identifier: 9D:AF:F8:7D:BB:74:1A:EB:B4:61:57:A5:4F:4A:FD:21:F3:BC:80:EA
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Certificate issuer: /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial: 019D31F5C066D38C85EA9EC4196CC57A94DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
Manifest number: 13AB
Signing time: Sat 28 Mar 2026 01:01:22 +0000
Manifest this update: Sat 28 Mar 2026 01:01:22 +0000
Manifest next update: Sun 29 Mar 2026 01:01:22 +0000
Files and hashes: 1: QiwWH1RtFqoFlh8ODhTHxGES8wo.roa (hash: HZ1hGzr6d7Gz+vsrN9BoASQoL9FuMmrP2dJvc65ilDk=)
2: QqUbGPbWnb6gjhCMOqT2grVMHLc.roa (hash: Nr3sSa3uJP0epmv5crHEIzFx3Y5ip1SyFjThlCVINnw=)
3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: 4wng7D0oDHIfCgr0O/7sJc+T0rCGbrkZw8EnprbLVA0=)
4: yYgOsbfO_ILG6YcX9QCFy7jrZlQ.roa (hash: DACPJnZscxbHEOmbZYNR1bRZKHxl5ev0RDcNgFEGAgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:c0:66:d3:8c:85:ea:9e:c4:19:6c:c5:7a:94:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Validity
Not Before: Mar 28 01:01:22 2026 GMT
Not After : Mar 29 01:01:22 2026 GMT
Subject: CN=9daff87dbb741aebb46157a54f4afd21f3bc80ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:e2:1c:76:59:ee:3b:7f:88:3c:59:7e:fe:
31:e6:1f:60:70:0c:6c:46:3c:94:94:f3:ce:56:1f:
e5:a7:f2:22:0e:49:5b:05:33:a5:20:78:35:37:d5:
85:07:94:71:de:f6:fa:80:7a:ba:e1:f7:d4:9d:9e:
d7:29:05:30:4e:5d:a4:80:bf:08:eb:b8:df:01:2e:
42:85:d9:7c:c7:12:9f:a5:7f:47:8e:4c:82:52:d1:
4e:22:b7:f4:d2:a0:fe:e1:50:f7:9e:2c:4b:76:92:
a7:e9:da:52:fe:92:51:2b:f2:c3:7e:4d:be:b2:dc:
d2:13:75:af:cb:84:1c:d0:58:0d:00:1a:06:51:7b:
90:aa:1c:4c:82:e6:62:21:e6:a2:9d:cf:47:d7:08:
66:6f:53:d8:78:f2:cb:9a:1f:3c:34:8a:de:85:b6:
b7:53:0c:c6:18:a4:f7:66:b4:a3:07:fe:64:4c:25:
f3:b5:e1:92:a7:a8:f7:6d:b6:bc:e0:0e:16:f4:33:
4d:ec:6e:8e:30:91:af:4c:2c:c3:9f:cc:70:1b:d4:
1b:d9:e8:b0:da:b0:75:16:4d:d8:4f:27:f6:ed:4f:
84:30:0d:ad:bf:41:5a:ac:ca:47:31:2b:4c:6e:88:
a8:4f:ef:e4:4d:31:4a:66:92:33:70:1e:64:a1:20:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AF:F8:7D:BB:74:1A:EB:B4:61:57:A5:4F:4A:FD:21:F3:BC:80:EA
X509v3 Authority Key Identifier:
keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:33:ba:96:15:7d:b0:fa:c0:28:87:68:01:21:a1:e6:7e:7d:
3e:a1:e6:95:42:40:b4:11:df:29:06:c1:67:7a:5e:5f:40:da:
16:f2:ae:3f:4c:99:6d:63:1d:08:ee:d2:3c:ea:9c:c8:2d:64:
ed:df:bf:ba:c5:ec:8e:91:3a:71:f9:5e:7a:d8:84:06:99:e0:
f2:54:7b:18:20:f5:8e:f4:7c:05:aa:99:d9:da:f6:54:8f:1d:
71:fb:bf:4b:4b:d9:6a:39:4a:00:df:df:ae:1e:20:f1:62:f3:
9b:0c:cd:87:a5:4f:1f:4b:14:c2:ef:3c:12:36:44:a4:49:6d:
2e:37:38:db:94:6a:dd:7e:e3:55:5d:ba:08:f1:17:a1:10:0e:
f4:9c:0e:0a:25:e6:7e:b9:aa:c1:85:b6:35:ec:26:36:f8:d6:
ff:f7:09:18:d8:ea:23:9a:76:e0:ab:a8:ba:22:7c:6e:0c:45:
1b:8b:2f:23:b0:49:d2:6d:86:fa:99:48:75:55:ba:b7:db:53:
b9:73:fb:60:e2:e2:c4:70:a3:55:cc:04:fe:ab:21:6b:73:fb:
5a:a0:73:fb:4d:f1:d4:99:dd:00:db:68:84:f7:0b:3b:3a:73:
12:a9:56:92:73:9e:cf:ff:f2:24:1e:c4:e6:a1:49:a0:97:d9:
b6:56:dc:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0x9cBm04yF6p7EGWzFepTcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGNkYmFlODRiMjZhODQ4NGIxMGMwMGViZmRmYmNiNDk5
MGMxNTcwHhcNMjYwMzI4MDEwMTIyWhcNMjYwMzI5MDEwMTIyWjAzMTEwLwYDVQQD
Eyg5ZGFmZjg3ZGJiNzQxYWViYjQ2MTU3YTU0ZjRhZmQyMWYzYmM4MGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyjiHHZZ7jt/iDxZfv4x5h9gcAxs
RjyUlPPOVh/lp/IiDklbBTOlIHg1N9WFB5Rx3vb6gHq64ffUnZ7XKQUwTl2kgL8I
67jfAS5Chdl8xxKfpX9HjkyCUtFOIrf00qD+4VD3nixLdpKn6dpS/pJRK/LDfk2+
stzSE3Wvy4Qc0FgNABoGUXuQqhxMguZiIeainc9H1whmb1PYePLLmh88NIrehba3
UwzGGKT3ZrSjB/5kTCXzteGSp6j3bba84A4W9DNN7G6OMJGvTCzDn8xwG9Qb2eiw
2rB1Fk3YTyf27U+EMA2tv0FarMpHMStMboioT+/kTTFKZpIzcB5koSBGJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2v+H27dBrrtGFXpU9K/SHzvIDqMB8GA1UdIwQY
MBaAFGRM266EsmqEhLEMAOv9+8tJkMFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYt
ZTAzNGY2NWU3ZjYwLzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYtZTAzNGY2NWU3ZjYw
LzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTO6lhV9
sPrAKIdoASGh5n59PqHmlUJAtBHfKQbBZ3peX0DaFvKuP0yZbWMdCO7SPOqcyC1k
7d+/usXsjpE6cfleetiEBpng8lR7GCD1jvR8BaqZ2dr2VI8dcfu/S0vZajlKAN/f
rh4g8WLzmwzNh6VPH0sUwu88EjZEpEltLjc425Rq3X7jVV26CPEXoRAO9JwOCiXm
frmqwYW2NewmNvjW//cJGNjqI5p24KuouiJ8bgxFG4svI7BJ0m2G+plIdVW6t9tT
uXP7YOLixHCjVcwE/qsha3P7WqBz+03x1JndANtohPcLOzpzEqlWknOez//yJB7E
5qFJoJfZtlbcnQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:49 2026 by rpki-client