Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier: aIm7BipTbQIRXSo5U9QoVuod+XgHjwORgAi9Q+HeKn0=
Subject key identifier: 61:BF:4A:50:77:34:15:8E:B3:AA:59:72:4C:AD:0A:AB:1A:59:39:1F
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 019D2772D2C9651B4AD512CFD0C755030112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number: 10A3
Signing time: Thu 26 Mar 2026 00:02:09 +0000
Manifest this update: Thu 26 Mar 2026 00:02:09 +0000
Manifest next update: Fri 27 Mar 2026 00:02:09 +0000
Files and hashes: 1: SLxH_u9zeCm0sBzFGpjFyprUq1k.roa (hash: YHV8hHdigULABzb/Rh8IYMXXingzJr+tiIat3maLhrg=)
2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: dL8QZVzs/qgTU6I5F2GeCgTbF371+wnrNqMQsl2k3EE=)
3: qWNtslR5VeuzsdBANHUyp5ZAUOU.roa (hash: rgvLkD6mm+PX1WOuRNNO3Ee9uRmn0UljGpNc3jlNEWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d2:c9:65:1b:4a:d5:12:cf:d0:c7:55:03:01:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Mar 26 00:02:09 2026 GMT
Not After : Mar 27 00:02:09 2026 GMT
Subject: CN=61bf4a507734158eb3aa59724cad0aab1a59391f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0d:a9:ee:ed:94:76:76:9b:a8:17:28:0e:1d:
51:31:80:43:32:47:17:2f:53:b7:57:48:b3:76:19:
77:68:fe:8b:84:c1:7b:94:32:74:79:56:48:7c:b8:
63:7a:63:53:48:40:79:03:2a:9b:e7:40:23:0c:a1:
be:d3:05:5b:08:ed:26:67:b4:e2:6a:e9:36:84:6a:
f5:0d:1d:88:f7:4c:16:c3:e0:d2:af:aa:21:21:2f:
15:10:a3:66:76:6f:5d:f7:88:eb:b1:71:f4:a8:8d:
b2:30:d0:72:f7:27:99:d3:9c:68:28:12:90:15:1c:
34:30:88:7e:49:07:76:6d:92:ae:50:96:54:cf:d7:
d9:37:36:01:df:2d:be:24:46:5e:56:cc:88:e9:f8:
75:fa:28:3b:33:1d:b1:c7:8d:f7:37:c6:de:2e:a0:
11:9e:35:6c:a4:11:87:41:da:49:fc:88:23:f5:c1:
e3:df:36:a9:0c:6f:6a:5c:4c:14:6f:0b:e4:7d:c9:
61:87:c0:51:12:e3:8a:9d:f3:a7:ec:9a:23:30:3d:
f3:cc:54:45:86:41:8e:db:ee:ef:16:2b:cc:da:e2:
61:a5:81:c9:5c:a3:dc:91:2c:8e:49:a5:36:84:56:
52:dd:12:19:9a:be:38:a6:90:fd:c6:82:21:99:5d:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BF:4A:50:77:34:15:8E:B3:AA:59:72:4C:AD:0A:AB:1A:59:39:1F
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:21:e4:78:51:10:e8:f3:37:36:80:7b:e0:6c:25:d6:af:a8:
d4:49:c9:d0:7e:af:6c:e9:13:14:68:73:57:ea:0c:7f:e4:92:
db:7b:ac:e5:30:ff:2b:29:36:05:12:d6:0f:3c:54:7d:4b:11:
1b:54:02:9a:02:91:8a:48:a3:c9:f0:c0:be:c3:c2:bb:9c:eb:
6c:9b:e0:53:50:7e:59:62:43:5c:83:0a:f9:3a:80:a7:35:64:
d5:df:8c:af:c0:c9:b7:b5:cd:bd:4b:02:3f:2a:9c:17:cf:c5:
6f:56:9c:4c:13:30:51:b4:fa:04:f2:6b:93:d5:34:d0:37:ac:
a9:5c:b4:0d:b1:a8:b4:72:b7:95:06:0d:b0:e9:3b:af:32:30:
19:68:4b:ad:29:e7:5d:a1:1f:d0:da:4a:d3:19:09:1e:f8:8c:
cb:5c:35:fd:43:f7:c2:42:ab:d9:a0:ba:85:09:c9:4b:d7:8f:
41:0b:f0:24:4f:f1:a5:df:77:2b:84:ba:48:df:96:49:bb:a2:
60:1e:df:ac:d7:52:08:77:57:b1:3c:2e:31:ee:04:f4:e4:c8:
9b:d6:ac:cd:ab:05:81:3a:45:24:d6:19:f2:45:31:c8:2b:af:
c8:ea:e2:54:37:96:e8:56:5a:7b:6f:cd:20:ca:6d:56:25:98:
7f:7b:02:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nctLJZRtK1RLP0MdVAwESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YzVkYWQ1NDRkZjQ5NzE2MDg1ZWJlODBkYmU4MmViNjhh
MjA5YzkwHhcNMjYwMzI2MDAwMjA5WhcNMjYwMzI3MDAwMjA5WjAzMTEwLwYDVQQD
Eyg2MWJmNGE1MDc3MzQxNThlYjNhYTU5NzI0Y2FkMGFhYjFhNTkzOTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ2p7u2UdnabqBcoDh1RMYBDMkcX
L1O3V0izdhl3aP6LhMF7lDJ0eVZIfLhjemNTSEB5Ayqb50AjDKG+0wVbCO0mZ7Ti
auk2hGr1DR2I90wWw+DSr6ohIS8VEKNmdm9d94jrsXH0qI2yMNBy9yeZ05xoKBKQ
FRw0MIh+SQd2bZKuUJZUz9fZNzYB3y2+JEZeVsyI6fh1+ig7Mx2xx433N8beLqAR
njVspBGHQdpJ/Igj9cHj3zapDG9qXEwUbwvkfclhh8BREuOKnfOn7JojMD3zzFRF
hkGO2+7vFivM2uJhpYHJXKPckSyOSaU2hFZS3RIZmr44ppD9xoIhmV3TSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGG/SlB3NBWOs6pZckytCqsaWTkfMB8GA1UdIwQY
MBaAFGXF2tVE30lxYIXr6A2+gutoognJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmNYYTFVVGZTWEZnaGV2b0RiNkM2MmlpQ2NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81Y2ZkMzgtNWUzNy00M2FmLWExYjAt
YWQwMTJhZmY1MTcyLzEvWmNYYTFVVGZTWEZnaGV2b0RiNkM2MmlpQ2NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny81Y2ZkMzgtNWUzNy00M2FmLWExYjAtYWQwMTJhZmY1MTcy
LzEvWmNYYTFVVGZTWEZnaGV2b0RiNkM2MmlpQ2NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCHkeFEQ
6PM3NoB74Gwl1q+o1EnJ0H6vbOkTFGhzV+oMf+SS23us5TD/Kyk2BRLWDzxUfUsR
G1QCmgKRikijyfDAvsPCu5zrbJvgU1B+WWJDXIMK+TqApzVk1d+Mr8DJt7XNvUsC
PyqcF8/Fb1acTBMwUbT6BPJrk9U00DesqVy0DbGotHK3lQYNsOk7rzIwGWhLrSnn
XaEf0NpK0xkJHviMy1w1/UP3wkKr2aC6hQnJS9ePQQvwJE/xpd93K4S6SN+WSbui
YB7frNdSCHdXsTwuMe4E9OTIm9aszasFgTpFJNYZ8kUxyCuvyOriVDeW6FZae2/N
IMptViWYf3sC2Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:28 2026 by rpki-client