Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json)
Hash identifier: 7zsvtNeTcLgYUeMVpOeV7x5/B7xyod+WSFAVupgT+gQ=
Subject key identifier: 84:B6:C3:86:A4:F9:A4:A0:6A:6D:47:64:EB:2E:8E:05:92:AB:8E:2D
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 019D25F166A9C5722BC79944F697420BC2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
Manifest number: 0F84
Signing time: Wed 25 Mar 2026 17:01:10 +0000
Manifest this update: Wed 25 Mar 2026 17:01:10 +0000
Manifest next update: Thu 26 Mar 2026 17:01:10 +0000
Files and hashes: 1: QPm5_PDWMrxWuR6yCX-RrxN3H3c.roa (hash: F4rOeKQIIr+v8+zO3vdMMRp/iT0j1wFRvBSXZLKj3lw=)
2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: jLuJUv5OOSCp3LVSFsyHIN8+kbu7wLSEdBViqBvaVeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:66:a9:c5:72:2b:c7:99:44:f6:97:42:0b:c2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: Mar 25 17:01:10 2026 GMT
Not After : Mar 26 17:01:10 2026 GMT
Subject: CN=84b6c386a4f9a4a06a6d4764eb2e8e0592ab8e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:60:45:6b:47:58:15:2d:18:4e:71:13:65:
97:42:42:58:79:6c:f4:1c:f2:70:a5:53:1d:e8:ab:
c9:a4:39:d9:6f:ff:48:3a:86:d3:a1:83:48:14:1a:
56:20:cb:1e:c9:0b:c3:47:a5:d7:3c:e1:9f:4b:62:
88:b0:ae:0b:7b:67:f3:56:c6:67:14:22:d1:bd:4d:
01:4e:36:00:b8:86:2c:d4:fe:66:fa:69:00:cc:11:
33:49:8f:34:26:77:ef:35:59:7f:52:32:7b:ec:ca:
b5:83:bc:26:87:29:a5:8e:75:48:88:64:62:8f:14:
c7:52:1d:f3:2d:c9:76:30:70:01:ce:49:59:d4:49:
7c:c2:06:c5:65:5c:53:7e:3f:e3:a6:a8:60:f4:75:
90:66:7f:ee:10:cf:d7:91:71:9d:4e:40:16:e5:1c:
2b:e5:c3:4a:a4:d8:17:27:f8:2e:47:54:4d:22:ce:
44:da:a1:f3:c3:60:85:46:4f:44:ef:49:e8:a5:ae:
bb:9a:ca:a9:dc:15:54:87:f1:75:73:5e:35:6d:0c:
c5:d9:9b:2a:13:64:fe:33:42:4d:99:5c:39:7a:8d:
59:9b:9d:6c:2b:fd:a6:54:e7:8a:44:7f:7e:3e:c7:
f1:e2:ed:6f:2b:41:fe:12:dd:00:77:39:12:5a:e8:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B6:C3:86:A4:F9:A4:A0:6A:6D:47:64:EB:2E:8E:05:92:AB:8E:2D
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:69:d9:75:46:bf:13:30:fc:e6:02:81:20:19:94:e8:f1:c9:
48:3d:b0:e7:92:85:34:3e:bc:b2:9e:28:f9:0c:b6:3f:4b:a0:
49:b8:bf:ec:52:24:dc:19:dc:e2:d7:97:2b:0b:85:21:78:16:
d2:f6:e9:99:79:7a:00:a2:2a:21:a0:89:7d:60:15:e8:58:0a:
e5:7f:97:b9:1a:59:84:16:a9:30:8b:f1:39:87:25:2c:8c:52:
4b:d1:cb:89:cb:68:92:f6:e7:30:47:3d:db:b4:c2:6d:1b:01:
9b:96:73:94:b5:5b:25:33:16:14:4e:f2:19:c5:e1:ec:60:f0:
52:70:b9:cf:0e:88:ae:7d:ea:e3:4a:af:69:29:9e:68:23:56:
25:6b:40:24:c4:f6:cc:11:52:83:fe:ec:c9:18:21:4e:30:6c:
9d:a5:c2:a7:11:a7:f0:6d:64:8e:c4:ce:27:a7:55:34:ac:da:
a4:62:d1:6c:8a:c8:5e:ec:cd:d6:d6:c2:89:d8:5e:8e:24:1a:
6c:3f:48:21:b3:87:c0:de:b8:70:a1:13:5c:c6:d1:90:4b:d0:
b6:95:36:e1:e8:ff:5b:4f:51:05:98:99:f8:72:e0:a4:5e:43:
d2:38:52:dd:76:93:5f:1a:92:56:0e:f1:00:b4:02:19:e0:fc:
fe:de:83:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8WapxXIrx5lE9pdCC8L4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MzE3ODViNjIzNDkyZWQwYzk5ZWQ3OWM3ZGI3NDA0YWQ0
Y2IxNzEwHhcNMjYwMzI1MTcwMTEwWhcNMjYwMzI2MTcwMTEwWjAzMTEwLwYDVQQD
Eyg4NGI2YzM4NmE0ZjlhNGEwNmE2ZDQ3NjRlYjJlOGUwNTkyYWI4ZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMhgRWtHWBUtGE5xE2WXQkJYeWz0
HPJwpVMd6KvJpDnZb/9IOobToYNIFBpWIMseyQvDR6XXPOGfS2KIsK4Le2fzVsZn
FCLRvU0BTjYAuIYs1P5m+mkAzBEzSY80JnfvNVl/UjJ77Mq1g7wmhymljnVIiGRi
jxTHUh3zLcl2MHABzklZ1El8wgbFZVxTfj/jpqhg9HWQZn/uEM/XkXGdTkAW5Rwr
5cNKpNgXJ/guR1RNIs5E2qHzw2CFRk9E70nopa67msqp3BVUh/F1c141bQzF2Zsq
E2T+M0JNmVw5eo1Zm51sK/2mVOeKRH9+Psfx4u1vK0H+Et0AdzkSWujvbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIS2w4ak+aSgam1HZOsujgWSq44tMB8GA1UdIwQY
MBaAFGUxeFtiNJLtDJntecfbdAStTLFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMt
MTI2Y2UwODE1MjlhLzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMtMTI2Y2UwODE1Mjlh
LzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmnZdUa/
EzD85gKBIBmU6PHJSD2w55KFND68sp4o+Qy2P0ugSbi/7FIk3Bnc4teXKwuFIXgW
0vbpmXl6AKIqIaCJfWAV6FgK5X+XuRpZhBapMIvxOYclLIxSS9HLictokvbnMEc9
27TCbRsBm5ZzlLVbJTMWFE7yGcXh7GDwUnC5zw6Irn3q40qvaSmeaCNWJWtAJMT2
zBFSg/7syRghTjBsnaXCpxGn8G1kjsTOJ6dVNKzapGLRbIrIXuzN1tbCidhejiQa
bD9IIbOHwN64cKETXMbRkEvQtpU24ej/W09RBZiZ+HLgpF5D0jhS3XaTXxqSVg7x
ALQCGeD8/t6D2g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:32 2026 by rpki-client