Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File: ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier: WTXZ4MyBkOloeL0hnxekVgd3aEDaOX51Um9pNf2DVGE=
Subject key identifier: B4:51:B0:0B:27:39:BA:80:EF:1E:91:88:C5:D0:3A:6E:2F:B7:31:59
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer: /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial: 019D27DF85E41CFA394C7EC7D33403C748FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number: 0800
Signing time: Thu 26 Mar 2026 02:00:53 +0000
Manifest this update: Thu 26 Mar 2026 02:00:53 +0000
Manifest next update: Fri 27 Mar 2026 02:00:53 +0000
Files and hashes: 1: X6aOcNp7OaJ0X_ZT-du_LuU0TCE.roa (hash: r5fWgTPjjmB31St0AmzLTssy0JP6/zDB0uGldcQoQt0=)
2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: NnTOHV4BSME4uIu3DKgIBq2nCwLymYGe7gTMg7ekfgM=)
3: tU70CLv_FnaoDz0xj6FPiJvGn-k.roa (hash: G4YFrMOaB3YYQfWSQNKXIK2SLKAYNELC+w3hU94N7bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:85:e4:1c:fa:39:4c:7e:c7:d3:34:03:c7:48:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Validity
Not Before: Mar 26 02:00:53 2026 GMT
Not After : Mar 27 02:00:53 2026 GMT
Subject: CN=b451b00b2739ba80ef1e9188c5d03a6e2fb73159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:34:41:14:79:f2:4c:24:33:c9:c0:5f:ff:
d2:24:a5:d3:db:06:38:3c:f9:b7:2b:aa:7b:d5:b6:
f8:31:01:41:70:ad:75:c5:35:a2:84:29:89:d8:c8:
48:1f:11:1b:0f:7c:ef:60:23:75:7a:d2:cc:0b:f9:
ba:53:67:47:ae:9d:9a:47:d7:dc:11:e1:32:de:6e:
3c:cc:5b:08:0b:48:06:17:27:ce:94:69:60:05:e8:
09:5f:92:9c:5c:ea:20:ca:d9:ac:c6:ea:df:b7:de:
ad:ce:a4:98:93:59:21:e8:8c:e7:4c:64:45:2c:b6:
b2:d6:69:50:2e:35:c8:4f:90:da:88:a9:03:d4:c9:
c6:1e:a3:52:5c:89:d5:03:b5:9e:c6:b8:b8:4b:be:
45:e4:fc:cc:df:6d:6f:ae:b2:06:35:0f:48:d3:e4:
d4:93:3f:f3:d9:1c:2d:59:0f:99:8e:a9:47:e2:51:
b8:eb:28:2b:63:23:97:91:fd:e4:01:20:58:9f:aa:
12:f6:ba:09:86:c5:67:55:61:07:78:15:6a:8f:b3:
23:1d:2e:a9:a0:d9:63:75:7c:a6:89:34:41:35:65:
c0:8a:2b:76:fd:13:49:a3:d7:79:63:81:4f:d4:1c:
be:5b:a5:ed:aa:c3:e3:fd:d1:09:f6:ae:f9:90:1e:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:51:B0:0B:27:39:BA:80:EF:1E:91:88:C5:D0:3A:6E:2F:B7:31:59
X509v3 Authority Key Identifier:
keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fe:20:be:28:ed:48:dc:19:cd:7f:ae:87:41:40:53:f0:5e:
ba:c1:bd:b8:c0:03:98:54:2e:73:0b:ed:76:ac:ba:ba:35:b9:
f0:64:97:bc:f3:99:cd:57:85:c6:67:fa:2f:dd:b7:da:93:bf:
dc:80:c9:e0:93:52:ad:46:79:2b:1e:85:0a:85:e2:4f:85:85:
e3:cf:bd:6f:1c:31:68:14:61:d4:20:4c:0d:a9:1e:df:b2:ca:
9a:c2:be:7f:a2:13:92:d0:54:81:d2:5b:a1:76:74:fd:c6:82:
4a:74:c3:04:31:44:1f:a7:dd:51:fd:1c:4e:c1:a4:94:9d:7f:
8b:01:d9:06:06:a7:9f:eb:9f:37:2b:e5:b6:c1:b8:39:8c:41:
d9:85:e8:a5:25:d1:c6:50:58:b7:fd:02:42:5e:86:f3:fa:e2:
29:af:d0:4d:9d:65:61:1a:44:54:41:1b:25:80:c5:4d:d3:13:
a1:c7:9c:aa:49:09:d3:e1:17:e3:49:8c:3d:fd:69:70:ef:33:
79:73:f9:4e:fe:09:57:06:cc:f2:ed:85:1b:25:24:c4:9c:68:
b7:dd:d0:be:fe:7d:27:89:a8:88:c3:a0:f1:8c:db:a5:3c:de:
15:96:90:2c:14:42:7d:d9:f2:d9:7e:41:f9:04:75:fd:fe:d3:
b8:80:73:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n34XkHPo5TH7H0zQDx0j8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NzU5ZjdhOGY5MDY3MmVhODM1M2FmNGQxMWQ2YWM1ZTlm
ZDgyMDYwHhcNMjYwMzI2MDIwMDUzWhcNMjYwMzI3MDIwMDUzWjAzMTEwLwYDVQQD
EyhiNDUxYjAwYjI3MzliYTgwZWYxZTkxODhjNWQwM2E2ZTJmYjczMTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e00QRR58kwkM8nAX//SJKXT2wY4
PPm3K6p71bb4MQFBcK11xTWihCmJ2MhIHxEbD3zvYCN1etLMC/m6U2dHrp2aR9fc
EeEy3m48zFsIC0gGFyfOlGlgBegJX5KcXOogytmsxurft96tzqSYk1kh6IznTGRF
LLay1mlQLjXIT5DaiKkD1MnGHqNSXInVA7Wexri4S75F5PzM321vrrIGNQ9I0+TU
kz/z2RwtWQ+ZjqlH4lG46ygrYyOXkf3kASBYn6oS9roJhsVnVWEHeBVqj7MjHS6p
oNljdXymiTRBNWXAiit2/RNJo9d5Y4FP1By+W6XtqsPj/dEJ9q75kB4XUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRRsAsnObqA7x6RiMXQOm4vtzFZMB8GA1UdIwQY
MBaAFGZ1n3qPkGcuqDU69NEdasXp/YIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xNzhiMDItOTQ4Yy00NjI0LTk3Yjgt
ZTRlMTdlNGI1MTgwLzEvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xNzhiMDItOTQ4Yy00NjI0LTk3YjgtZTRlMTdlNGI1MTgw
LzEvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAf4gvijt
SNwZzX+uh0FAU/BeusG9uMADmFQucwvtdqy6ujW58GSXvPOZzVeFxmf6L9232pO/
3IDJ4JNSrUZ5Kx6FCoXiT4WF48+9bxwxaBRh1CBMDake37LKmsK+f6ITktBUgdJb
oXZ0/caCSnTDBDFEH6fdUf0cTsGklJ1/iwHZBgann+ufNyvltsG4OYxB2YXopSXR
xlBYt/0CQl6G8/riKa/QTZ1lYRpEVEEbJYDFTdMTocecqkkJ0+EX40mMPf1pcO8z
eXP5Tv4JVwbM8u2FGyUkxJxot93Qvv59J4moiMOg8YzbpTzeFZaQLBRCfdny2X5B
+QR1/f7TuIBzwg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:07 2026 by rpki-client