Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
File: zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft (raw, json)
Hash identifier: 7lNnp3sxndlAfrz9NAVYDbL/bUBuWHRM9xTWkVDi4/E=
Subject key identifier: BE:7D:9F:1B:96:72:54:5D:5F:C0:21:B0:E5:A7:71:7A:6E:C2:2E:5E
Authority key identifier: CC:38:7A:84:04:12:33:1A:E1:91:3D:ED:D0:BE:A4:C6:19:B8:A7:30
Certificate issuer: /CN=cc387a840412331ae1913dedd0bea4c619b8a730
Certificate serial: 019D329A3A0AC339BD9BFA5EDBE77C42A1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
Manifest number: 41
Signing time: Sat 28 Mar 2026 04:01:01 +0000
Manifest this update: Sat 28 Mar 2026 04:01:01 +0000
Manifest next update: Sun 29 Mar 2026 04:01:01 +0000
Files and hashes: 1: qIYB0A4RSZN6LE7W59v3zP7y3P0.roa (hash: 5gqhlF6BkyZHYPK5fz4mRNQz3WRvXUePbuSTbTO9q8g=)
2: zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl (hash: bHsj9OMo+3TTbH4RkzijlVGtFFnIXSYkK4Y4J377NzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:3a:0a:c3:39:bd:9b:fa:5e:db:e7:7c:42:a1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc387a840412331ae1913dedd0bea4c619b8a730
Validity
Not Before: Mar 28 04:01:01 2026 GMT
Not After : Mar 29 04:01:01 2026 GMT
Subject: CN=be7d9f1b9672545d5fc021b0e5a7717a6ec22e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:c4:d9:6f:d5:c5:9c:67:74:7c:36:75:ae:
96:97:f4:19:32:82:34:ff:78:36:f7:a9:e7:33:b1:
1c:5c:6f:e5:0e:da:6a:88:87:51:c4:df:a7:82:d5:
69:72:65:aa:10:62:54:55:85:91:79:ef:e5:81:5c:
e5:8a:e4:4d:22:fd:6f:66:a7:8f:6b:e4:ba:58:2b:
5a:68:a8:80:8e:99:e8:fb:82:dd:ef:b2:a5:62:45:
ac:18:34:58:81:17:31:50:ea:b0:2b:3d:3d:42:51:
f0:d7:38:9d:e8:a0:10:1b:54:34:57:5c:3c:60:d0:
c8:f4:56:c2:a0:80:17:dc:fe:75:35:4c:58:4c:fc:
f7:33:54:3a:76:9e:fc:c8:3d:48:b9:60:d9:38:43:
cc:79:29:00:a3:d3:a3:51:7d:3c:c7:39:fd:6a:10:
ef:bb:93:68:3f:3a:43:85:fb:ea:21:da:fc:ad:43:
98:87:90:b9:0f:a0:0c:c7:1b:40:8c:6f:8b:5d:32:
2d:9d:46:0e:5b:5b:c8:a1:37:74:0a:17:85:2e:ac:
fb:48:54:e2:8d:67:2b:af:37:b9:08:3c:ea:1d:67:
bd:4d:50:dd:b5:da:14:9d:ff:bf:fc:92:b9:be:7a:
17:fa:65:e8:35:d3:1d:36:4f:48:d3:ec:f7:ef:07:
bb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7D:9F:1B:96:72:54:5D:5F:C0:21:B0:E5:A7:71:7A:6E:C2:2E:5E
X509v3 Authority Key Identifier:
keyid:CC:38:7A:84:04:12:33:1A:E1:91:3D:ED:D0:BE:A4:C6:19:B8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:93:28:00:0a:c6:b1:8b:cc:36:16:15:3b:e4:81:86:bf:78:
46:67:82:e9:23:e6:c4:d7:da:dd:10:5d:83:e4:23:ff:dc:b4:
80:2d:1d:79:e8:a9:e3:75:9e:56:39:0e:2b:af:8f:06:d8:5a:
f9:96:90:36:80:e6:14:df:62:99:68:ad:13:04:03:0e:a5:74:
4d:00:59:df:e2:11:c0:5d:ad:f3:d0:c3:6a:eb:9e:1f:73:05:
a4:a4:3c:31:4a:d9:ef:c1:b3:29:8d:da:dd:71:74:a7:60:a3:
bf:0e:b4:11:78:9e:d6:31:49:4d:21:8c:30:86:56:ef:ad:81:
f7:04:7d:af:99:3c:31:97:68:2b:e6:fa:95:44:0a:ea:e8:a7:
b9:77:16:b1:ff:f6:96:47:9d:7e:40:79:aa:78:d7:3b:d7:51:
00:06:11:66:fa:24:c2:31:bc:6c:e4:5e:42:37:05:37:02:f1:
ac:b4:75:71:fb:4f:0e:bb:85:4e:b8:70:ac:5e:34:eb:9b:31:
0f:f7:36:65:73:df:62:ed:6a:ff:2d:a8:fb:57:2d:db:19:67:
52:9e:22:fc:7d:71:cd:59:47:52:9e:23:e8:e1:f0:e9:d1:69:
b1:71:62:b5:c3:25:bf:fb:c9:c9:ec:f8:f9:23:d6:42:bf:1a:
a2:84:25:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ymjoKwzm9m/pe2+d8QqHtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMzg3YTg0MDQxMjMzMWFlMTkxM2RlZGQwYmVhNGM2MTli
OGE3MzAwHhcNMjYwMzI4MDQwMTAxWhcNMjYwMzI5MDQwMTAxWjAzMTEwLwYDVQQD
EyhiZTdkOWYxYjk2NzI1NDVkNWZjMDIxYjBlNWE3NzE3YTZlYzIyZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp7E2W/VxZxndHw2da6Wl/QZMoI0
/3g296nnM7EcXG/lDtpqiIdRxN+ngtVpcmWqEGJUVYWRee/lgVzliuRNIv1vZqeP
a+S6WCtaaKiAjpno+4Ld77KlYkWsGDRYgRcxUOqwKz09QlHw1zid6KAQG1Q0V1w8
YNDI9FbCoIAX3P51NUxYTPz3M1Q6dp78yD1IuWDZOEPMeSkAo9OjUX08xzn9ahDv
u5NoPzpDhfvqIdr8rUOYh5C5D6AMxxtAjG+LXTItnUYOW1vIoTd0CheFLqz7SFTi
jWcrrze5CDzqHWe9TVDdtdoUnf+//JK5vnoX+mXoNdMdNk9I0+z37we7FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL59nxuWclRdX8AhsOWncXpuwi5eMB8GA1UdIwQY
MBaAFMw4eoQEEjMa4ZE97dC+pMYZuKcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekRoNmhBUVNNeHJoa1QzdDBMNmt4aG00cHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wZjQxOWUtOTQyYy00YmM0LWE3NWQt
MmM3ZDE4MTJiYTNlLzEvekRoNmhBUVNNeHJoa1QzdDBMNmt4aG00cHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8wZjQxOWUtOTQyYy00YmM0LWE3NWQtMmM3ZDE4MTJiYTNl
LzEvekRoNmhBUVNNeHJoa1QzdDBMNmt4aG00cHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5MoAArG
sYvMNhYVO+SBhr94RmeC6SPmxNfa3RBdg+Qj/9y0gC0deeip43WeVjkOK6+PBtha
+ZaQNoDmFN9imWitEwQDDqV0TQBZ3+IRwF2t89DDauueH3MFpKQ8MUrZ78GzKY3a
3XF0p2Cjvw60EXie1jFJTSGMMIZW762B9wR9r5k8MZdoK+b6lUQK6uinuXcWsf/2
lkedfkB5qnjXO9dRAAYRZvokwjG8bOReQjcFNwLxrLR1cftPDruFTrhwrF4065sx
D/c2ZXPfYu1q/y2o+1ct2xlnUp4i/H1xzVlHUp4j6OHw6dFpsXFitcMlv/vJyez4
+SPWQr8aooQlhA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:00 2026 by rpki-client