Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: +QYMPKWnuTtB96yXPOWBpf3gEm7BDSbI3SFz5WTkRAU=
Subject key identifier: FB:43:19:CE:3C:73:99:EC:D6:B8:08:BD:3F:39:76:DA:EC:45:AE:09
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 019D2960B19FA4E12BFD57F78B7102E744D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 154F
Signing time: Thu 26 Mar 2026 09:01:35 +0000
Manifest this update: Thu 26 Mar 2026 09:01:35 +0000
Manifest next update: Fri 27 Mar 2026 09:01:35 +0000
Files and hashes: 1: CuEyheF-29dttpD6VLLaExCFGAA.roa (hash: R6vjhi7yIbFl0joD76O7Kh49JYPbEdB6dMSlf59XV7s=)
2: tSwu_rs-_T3OD9Pp5HQg9a8f-F0.roa (hash: OkFsnGmy75UDy40lQIElr+ClgPv+0wuI2ecBN6Kx84o=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: ZdZA8Nn17yXVPYCrldN8MuwulnomKL76z9ynC08CVwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b1:9f:a4:e1:2b:fd:57:f7:8b:71:02:e7:44:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Mar 26 09:01:35 2026 GMT
Not After : Mar 27 09:01:35 2026 GMT
Subject: CN=fb4319ce3c7399ecd6b808bd3f3976daec45ae09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:e8:eb:77:8c:db:4c:c7:f9:90:45:28:f8:
e8:40:1a:47:7a:1c:ef:b8:57:49:38:07:d6:76:07:
5c:1c:f1:19:96:ee:e5:9a:df:30:66:73:33:a0:6a:
8c:cb:5d:6f:16:b3:d6:76:a8:79:d6:1b:f1:96:54:
a7:75:fc:6f:c5:f8:7e:0a:fd:f4:f6:71:11:3a:81:
87:ed:dd:0f:82:8c:6b:20:bf:27:4e:e8:74:8e:40:
c3:fd:39:9b:63:52:ea:ce:be:1f:4d:1c:b5:94:fb:
61:d3:41:90:2b:e4:c6:8b:b2:af:c6:39:88:76:64:
e2:cb:4d:a6:7b:08:4a:5d:d9:57:a1:04:e7:a6:05:
bd:cb:34:8b:31:76:23:b8:39:ce:f7:a1:31:6a:b0:
ce:c1:55:5e:3b:c0:0f:47:f3:3e:8e:8e:4c:34:c4:
96:7d:d5:6c:da:89:48:ed:a2:82:89:5d:f5:58:3e:
e2:cd:7e:72:5d:c8:a9:70:64:11:cb:08:ac:06:42:
a2:26:f4:36:71:8c:62:8b:b7:f9:c7:d1:06:f4:13:
7d:21:cc:28:eb:43:8d:70:b1:0e:38:0d:18:02:15:
c4:a4:94:67:3f:be:ec:7e:e9:9e:65:a6:14:0e:8e:
be:05:cf:1d:e4:18:08:47:b4:2a:83:d4:18:1f:a4:
32:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:43:19:CE:3C:73:99:EC:D6:B8:08:BD:3F:39:76:DA:EC:45:AE:09
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1a:4f:c1:5e:2a:54:d6:fb:1a:78:1b:3b:83:76:4e:51:c3:
45:1c:5b:92:f5:f5:55:42:92:76:06:66:e6:0d:1a:d3:83:af:
38:d0:00:76:23:34:1d:21:55:8b:29:fe:db:85:33:b0:cd:40:
0b:a8:57:9f:63:d7:cd:a2:79:5b:ff:4b:b5:2b:ab:ff:63:e8:
af:6e:1d:53:82:07:cc:5e:1e:42:fd:e4:7c:a1:40:8a:fe:78:
63:6c:f7:a2:21:7f:4c:58:8e:96:58:fa:f4:a3:cb:4e:35:9a:
84:97:bd:44:c8:60:2a:4e:70:13:5b:f4:2c:26:be:bb:78:3e:
2e:a6:62:8a:7a:60:47:b5:49:18:e1:a7:47:ff:1c:9e:2c:14:
e0:05:4a:37:52:02:4e:57:a6:87:c2:fc:be:23:17:62:f1:c5:
75:f9:07:f8:f9:5c:3d:c8:36:78:03:a3:5b:d1:65:4e:38:16:
40:ab:37:d7:72:da:b6:ed:39:ec:ea:88:70:66:f1:e1:17:1e:
22:de:f7:14:3e:1e:7d:d4:91:3a:03:cc:d5:dd:33:2c:c1:ab:
1f:61:6d:9e:a6:76:2a:0d:78:7c:6e:3d:5b:b9:5b:a0:c3:6d:
e5:53:05:6d:3f:c2:f0:80:ce:8d:02:90:d4:52:f3:02:21:4d:
28:4d:b7:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYLGfpOEr/Vf3i3EC50TRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTU5YzhhMWU2NGZjNjRmZjY2NmJkOTIxOWRjZTE3NDM3
M2NhZjIwHhcNMjYwMzI2MDkwMTM1WhcNMjYwMzI3MDkwMTM1WjAzMTEwLwYDVQQD
EyhmYjQzMTljZTNjNzM5OWVjZDZiODA4YmQzZjM5NzZkYWVjNDVhZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt77o63eM20zH+ZBFKPjoQBpHehzv
uFdJOAfWdgdcHPEZlu7lmt8wZnMzoGqMy11vFrPWdqh51hvxllSndfxvxfh+Cv30
9nEROoGH7d0PgoxrIL8nTuh0jkDD/TmbY1Lqzr4fTRy1lPth00GQK+TGi7KvxjmI
dmTiy02mewhKXdlXoQTnpgW9yzSLMXYjuDnO96ExarDOwVVeO8APR/M+jo5MNMSW
fdVs2olI7aKCiV31WD7izX5yXcipcGQRywisBkKiJvQ2cYxii7f5x9EG9BN9Icwo
60ONcLEOOA0YAhXEpJRnP77sfumeZaYUDo6+Bc8d5BgIR7Qqg9QYH6QyAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtDGc48c5ns1rgIvT85dtrsRa4JMB8GA1UdIwQY
MBaAFMwVnIoeZPxk/2Zr2SGdzhdDc8ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYt
NjQ4MjA0MWE4MjQ2LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYtNjQ4MjA0MWE4MjQ2
LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxpPwV4q
VNb7GngbO4N2TlHDRRxbkvX1VUKSdgZm5g0a04OvONAAdiM0HSFViyn+24UzsM1A
C6hXn2PXzaJ5W/9LtSur/2Por24dU4IHzF4eQv3kfKFAiv54Y2z3oiF/TFiOllj6
9KPLTjWahJe9RMhgKk5wE1v0LCa+u3g+LqZiinpgR7VJGOGnR/8cniwU4AVKN1IC
Tlemh8L8viMXYvHFdfkH+PlcPcg2eAOjW9FlTjgWQKs313Latu057OqIcGbx4Rce
It73FD4efdSROgPM1d0zLMGrH2FtnqZ2Kg14fG49W7lboMNt5VMFbT/C8IDOjQKQ
1FLzAiFNKE232Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:31 2026 by rpki-client