Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: a/7+dkw+DxlTbmnH85MLyK86cnKVxS2JlfReWPA1XsE=
Subject key identifier: 50:97:A1:16:9E:7C:EB:EB:2F:BC:3E:35:B4:CB:B4:DA:0E:C9:A6:ED
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 019D27E026608AF9D75EDFCC42D81EDA04A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: 066E
Signing time: Thu 26 Mar 2026 02:01:34 +0000
Manifest this update: Thu 26 Mar 2026 02:01:34 +0000
Manifest next update: Fri 27 Mar 2026 02:01:34 +0000
Files and hashes: 1: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: iUha0rAUpMXFWY7GR3LyIGNSs9oWSwH8lCal26jwd8g=)
2: u8CFwQAgI9Z_ArKZcryQPx48tlg.roa (hash: ouz1fG+C7TUSgfVu4kqpK6uPFZhg0Hf+lpBxVtrxN4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:26:60:8a:f9:d7:5e:df:cc:42:d8:1e:da:04:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: Mar 26 02:01:34 2026 GMT
Not After : Mar 27 02:01:34 2026 GMT
Subject: CN=5097a1169e7cebeb2fbc3e35b4cbb4da0ec9a6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:27:b0:d0:d0:78:44:df:9e:17:67:63:cb:7b:
6c:83:ec:71:64:56:40:f3:32:bb:45:17:0f:1a:5a:
8c:39:7c:d8:4e:78:78:4d:a0:f8:5c:44:df:65:0f:
8d:a6:d5:70:91:6b:ed:18:08:f4:e8:35:fc:97:44:
ab:3b:5a:3e:76:65:39:92:7b:cb:86:1d:d0:29:21:
c3:58:10:09:b1:be:bd:41:35:ea:3f:9c:12:f3:c6:
bb:6e:f0:58:f7:38:f7:4b:0e:50:89:5b:8b:a3:20:
19:56:3d:8f:6f:49:d6:eb:3c:53:c5:c5:13:ee:1f:
50:9a:06:27:ad:29:5f:00:49:f2:d4:24:31:75:13:
32:e3:bf:60:c8:fb:c2:0b:ba:46:56:2a:3b:3f:ed:
d7:55:0c:75:11:a8:13:6f:fe:02:89:36:aa:fc:91:
e2:88:8e:27:43:0b:23:ce:6b:78:08:e7:cb:4c:57:
2f:a9:48:df:57:c7:7e:70:11:2e:b8:78:01:f5:5a:
68:5b:76:fe:90:bc:32:8b:4b:a7:39:aa:b9:7b:77:
a7:c7:a9:e0:39:ab:19:b3:e9:58:b7:41:73:eb:70:
d0:df:2d:cc:0b:0f:fc:c0:bd:c9:7c:93:87:73:fe:
84:c6:b9:4d:f5:6e:ca:3f:2b:c3:68:bc:ca:e1:6b:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:97:A1:16:9E:7C:EB:EB:2F:BC:3E:35:B4:CB:B4:DA:0E:C9:A6:ED
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e7:96:d5:88:d8:23:36:ba:16:20:16:da:37:80:23:49:4c:
e4:d8:0d:f5:4c:33:95:c3:33:db:db:e9:86:af:87:fb:ee:49:
a7:39:f2:00:ca:43:55:3d:f8:91:60:97:7c:06:42:51:0d:8f:
ff:88:c6:84:33:29:42:e9:c1:3b:75:b7:38:02:19:45:b4:48:
0e:d4:17:a3:05:b1:cb:06:4e:28:c2:82:ac:c6:19:71:09:d2:
77:ad:51:77:59:7b:5f:b2:d9:39:d0:db:71:a8:1b:1c:04:45:
e3:f2:7a:f3:af:d4:7a:b5:3b:43:43:a0:3e:66:5b:80:e9:4f:
ba:69:33:90:98:24:b1:f3:d6:96:4f:1f:b7:81:b9:39:5a:af:
e0:94:dc:35:b7:d7:7e:03:b7:18:44:eb:10:38:92:85:b9:56:
9b:56:84:1c:80:f6:d0:ea:5b:8d:de:21:e6:c3:46:1c:94:e2:
23:05:86:bb:e8:3d:ad:ce:13:22:50:5c:be:11:40:3f:26:29:
00:c2:1e:a7:14:14:99:c4:f2:46:ab:28:ce:89:f2:56:8a:9a:
02:97:5f:24:0f:6d:00:2b:73:fc:b7:4e:b1:19:d2:a1:e0:f7:
30:00:ad:79:bd:af:fc:ac:ff:d3:67:3b:0c:04:d9:77:1b:90:
56:8d:df:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4CZgivnXXt/MQtge2gSgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjEyOGE1YWRjYmNjZGYxNWNiOTc5YWQ2YWJmMmI5NjQw
ZmRiZGIwHhcNMjYwMzI2MDIwMTM0WhcNMjYwMzI3MDIwMTM0WjAzMTEwLwYDVQQD
Eyg1MDk3YTExNjllN2NlYmViMmZiYzNlMzViNGNiYjRkYTBlYzlhNmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Cew0NB4RN+eF2djy3tsg+xxZFZA
8zK7RRcPGlqMOXzYTnh4TaD4XETfZQ+NptVwkWvtGAj06DX8l0SrO1o+dmU5knvL
hh3QKSHDWBAJsb69QTXqP5wS88a7bvBY9zj3Sw5QiVuLoyAZVj2Pb0nW6zxTxcUT
7h9QmgYnrSlfAEny1CQxdRMy479gyPvCC7pGVio7P+3XVQx1EagTb/4CiTaq/JHi
iI4nQwsjzmt4COfLTFcvqUjfV8d+cBEuuHgB9VpoW3b+kLwyi0unOaq5e3enx6ng
OasZs+lYt0Fz63DQ3y3MCw/8wL3JfJOHc/6ExrlN9W7KPyvDaLzK4WsJtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCXoRaefOvrL7w+NbTLtNoOyabtMB8GA1UdIwQY
MBaAFGWxKKWty8zfFcuXmtar8rlkD9vbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDk1ZmMtZDU3My00YWQ5LTllMmUt
YmQ4NmQ0YjMyYzU4LzEvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jMDk1ZmMtZDU3My00YWQ5LTllMmUtYmQ4NmQ0YjMyYzU4
LzEvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+eW1YjY
Iza6FiAW2jeAI0lM5NgN9UwzlcMz29vphq+H++5JpznyAMpDVT34kWCXfAZCUQ2P
/4jGhDMpQunBO3W3OAIZRbRIDtQXowWxywZOKMKCrMYZcQnSd61Rd1l7X7LZOdDb
cagbHARF4/J686/UerU7Q0OgPmZbgOlPumkzkJgksfPWlk8ft4G5OVqv4JTcNbfX
fgO3GETrEDiShblWm1aEHID20Opbjd4h5sNGHJTiIwWGu+g9rc4TIlBcvhFAPyYp
AMIepxQUmcTyRqsozonyVoqaApdfJA9tACtz/LdOsRnSoeD3MACteb2v/Kz/02c7
DATZdxuQVo3fqQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:10 2026 by rpki-client