Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
File: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft (raw, json)
Hash identifier: pwoUjpck2ZzYCA6H/Y2CRTMVntzxuwkkGOLhFQIL6pM=
Subject key identifier: F1:13:DC:CB:51:4D:1F:1A:3F:92:D7:D3:FA:6C:02:D8:61:03:9C:F2
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial: 019D2A72447BF4D11F6C4AAF251A14F073F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
Manifest number: 1023
Signing time: Thu 26 Mar 2026 14:00:24 +0000
Manifest this update: Thu 26 Mar 2026 14:00:24 +0000
Manifest next update: Fri 27 Mar 2026 14:00:24 +0000
Files and hashes: 1: JZV9Wmscw-_tBZW5yLoO12kB4nI.roa (hash: 9OD9YsHNLfEzpjHohpylUNvgGqpABxz0jPfe6Fwb8Ws=)
2: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl (hash: Krp/Z/R1IURPT4tSFWcUrukuR6zaQV3NaQVk1x+VC4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:44:7b:f4:d1:1f:6c:4a:af:25:1a:14:f0:73:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Validity
Not Before: Mar 26 14:00:24 2026 GMT
Not After : Mar 27 14:00:24 2026 GMT
Subject: CN=f113dccb514d1f1a3f92d7d3fa6c02d861039cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:64:31:8c:a2:77:fd:e3:25:c9:74:34:9c:
67:2b:36:dc:73:87:cf:48:a5:a2:b9:a5:1a:4d:d7:
63:2b:fe:8f:8b:61:3a:1e:dd:f6:80:f0:8c:96:86:
f2:33:ec:e4:6b:59:ab:3a:76:6d:a4:cc:e7:e5:46:
13:02:13:b1:c0:21:60:f5:2c:ad:4b:5b:8b:52:93:
45:0c:a4:e0:cd:d3:05:99:d5:2a:dd:ba:d7:1c:9c:
9a:52:0c:ea:76:af:af:85:33:bf:5f:b3:20:7b:82:
ba:5a:ae:be:44:bf:be:92:43:e9:0b:21:4f:65:1c:
f3:08:33:e5:46:45:a9:87:28:e3:19:98:97:f2:39:
d6:39:0e:fc:b2:f6:7b:50:0c:05:d3:09:22:1a:57:
0f:21:55:44:34:bc:f1:38:2c:18:b1:1a:bf:2e:ef:
1c:03:56:0a:ed:26:f9:c5:4e:9f:c9:d6:db:0c:b6:
13:13:7d:e7:53:33:0b:f9:ca:c1:ef:c8:91:14:44:
f1:50:96:d7:a5:96:a7:50:da:ee:b0:d7:48:aa:96:
ff:e0:b3:69:f5:02:71:ac:a9:94:f6:94:ee:9c:74:
77:06:0a:a8:a6:92:81:07:9a:40:27:70:1f:75:24:
18:59:65:9a:d7:fd:88:c6:f3:9e:3b:e0:fb:0d:9e:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:13:DC:CB:51:4D:1F:1A:3F:92:D7:D3:FA:6C:02:D8:61:03:9C:F2
X509v3 Authority Key Identifier:
keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4b:67:68:44:ef:ba:4f:a3:c0:1e:9b:c0:1e:23:18:8b:db:
b8:77:90:74:04:40:77:07:dc:25:98:45:36:59:65:05:e9:c2:
80:be:b9:62:52:af:40:a2:bf:de:49:13:59:aa:ed:3a:bc:21:
06:f6:d9:03:9c:94:bc:25:74:11:a4:5b:db:c8:d3:63:da:1b:
e6:4d:35:ac:60:01:4d:44:07:fd:cb:a7:5f:9d:be:84:24:de:
21:7b:cb:bc:2d:6b:76:a4:32:3b:10:41:da:75:75:f6:58:9d:
96:12:17:c8:d4:60:9b:10:6c:81:19:dc:bc:6c:27:62:62:92:
f2:bb:02:63:34:0c:47:3e:52:bc:55:77:1f:e8:41:e8:e5:37:
ba:4b:2c:e6:76:21:f8:01:81:b8:27:bc:53:22:55:3b:33:b3:
ab:31:a0:fc:ca:94:d5:5e:98:65:27:e4:20:63:0a:a8:cb:f9:
ec:e6:66:17:77:58:11:08:ef:04:85:da:4b:d6:13:cc:6a:8d:
8a:43:a0:db:d2:ac:7c:18:79:f9:14:27:1d:b8:eb:dc:7e:d0:
17:17:d3:0e:13:45:34:39:db:d7:27:c3:b8:c8:01:cf:f8:9a:
14:1e:bd:bd:61:ef:cc:aa:ed:96:1e:ca:17:de:45:1a:82:9c:
5d:4e:74:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qckR79NEfbEqvJRoU8HP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MDQ3Yjk4N2JlOTc0Mjc4NWJhOGU4YjMzYWMwNzdiZjlj
N2EyMjIwHhcNMjYwMzI2MTQwMDI0WhcNMjYwMzI3MTQwMDI0WjAzMTEwLwYDVQQD
EyhmMTEzZGNjYjUxNGQxZjFhM2Y5MmQ3ZDNmYTZjMDJkODYxMDM5Y2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtJkMYyid/3jJcl0NJxnKzbcc4fP
SKWiuaUaTddjK/6Pi2E6Ht32gPCMlobyM+zka1mrOnZtpMzn5UYTAhOxwCFg9Syt
S1uLUpNFDKTgzdMFmdUq3brXHJyaUgzqdq+vhTO/X7Mge4K6Wq6+RL++kkPpCyFP
ZRzzCDPlRkWphyjjGZiX8jnWOQ78svZ7UAwF0wkiGlcPIVVENLzxOCwYsRq/Lu8c
A1YK7Sb5xU6fydbbDLYTE33nUzML+crB78iRFETxUJbXpZanUNrusNdIqpb/4LNp
9QJxrKmU9pTunHR3BgqoppKBB5pAJ3AfdSQYWWWa1/2IxvOeO+D7DZ6mzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPET3MtRTR8aP5LX0/psAthhA5zyMB8GA1UdIwQY
MBaAFGcEe5h76XQnhbqOizOsB3v5x6IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYt
ZThlZGYyOTI0NWMwLzEvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYtZThlZGYyOTI0NWMw
LzEvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUtnaETv
uk+jwB6bwB4jGIvbuHeQdARAdwfcJZhFNlllBenCgL65YlKvQKK/3kkTWartOrwh
BvbZA5yUvCV0EaRb28jTY9ob5k01rGABTUQH/cunX52+hCTeIXvLvC1rdqQyOxBB
2nV19lidlhIXyNRgmxBsgRncvGwnYmKS8rsCYzQMRz5SvFV3H+hB6OU3ukss5nYh
+AGBuCe8UyJVOzOzqzGg/MqU1V6YZSfkIGMKqMv57OZmF3dYEQjvBIXaS9YTzGqN
ikOg29KsfBh5+RQnHbjr3H7QFxfTDhNFNDnb1yfDuMgBz/iaFB69vWHvzKrtlh7K
F95FGoKcXU50hw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:51:58 2026 by rpki-client