Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier: U08xmXyLeAkKF3WVUai1qDiNoN6o5WH/GOAzSlBRRCM=
Subject key identifier: A5:D9:B0:54:03:5C:15:E4:E2:0D:A8:38:45:18:BA:20:16:AB:F7:F5
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 019D288476079927E515B419230267FA281E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number: 08F1
Signing time: Thu 26 Mar 2026 05:01:02 +0000
Manifest this update: Thu 26 Mar 2026 05:01:02 +0000
Manifest next update: Fri 27 Mar 2026 05:01:02 +0000
Files and hashes: 1: 0TK3c5i8HR_A-PsT2oVGhcZw6cM.roa (hash: h0uiRwWUdBUK99Ks+Y8sh+LxhfXczzzvDGj593a9g3k=)
2: DV5WKmhJVzf0DZYxIZKRJBGbJrE.roa (hash: oHLHJsgbUguG193W+KSxMKgTzMMz/6UR3KrwC/LYnpQ=)
3: LvaDmqIdnr6ZwvXIw66-Fgt7aJs.roa (hash: GpWCJE/Uhd8pdU1hHuUyPW3gfCMnh5kn2jlAjryWbcU=)
4: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: OKVRGdT3I+EP0ybIh4v8iWVcNU1ihvbWG1/M/qqoHL8=)
5: ZPnR3HMA7sGvzycup7HofhXYTG8.roa (hash: A+4R2yyAAlbJkqTLskXX0nzQm93oNzg5z6lYvLAvYBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:76:07:99:27:e5:15:b4:19:23:02:67:fa:28:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Mar 26 05:01:02 2026 GMT
Not After : Mar 27 05:01:02 2026 GMT
Subject: CN=a5d9b054035c15e4e20da8384518ba2016abf7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:eb:0d:91:93:be:4b:64:41:c6:0f:bf:b4:
30:4c:2a:39:8f:d3:f7:ac:64:70:e4:47:79:f5:eb:
e2:3d:1b:b8:16:55:93:1f:59:95:0e:49:aa:42:1d:
d9:05:41:9b:58:cd:3d:18:68:c2:21:59:8f:53:95:
2f:e8:8d:fa:a1:35:f3:cd:d7:6d:e4:aa:0a:1f:92:
67:ff:fd:46:d8:58:95:af:44:fa:99:77:56:49:c5:
44:7b:a0:d7:9c:81:03:dd:31:13:b9:62:92:d5:03:
f2:ed:ae:1c:3c:6a:ef:2a:9b:9d:d7:0f:03:6b:b0:
a2:04:90:c9:c3:b7:4e:eb:04:67:46:2e:e3:ad:7a:
4a:be:fc:30:d5:a4:70:9a:4f:78:31:26:2e:86:ca:
c6:a4:6c:b3:ae:90:66:9f:25:ef:a0:d8:26:80:80:
29:53:5d:62:67:10:6b:fe:81:0c:bf:93:8c:3d:ec:
16:06:d7:68:6a:dd:52:f6:5d:e5:de:bd:6e:0d:7c:
1a:1d:e5:e8:d0:eb:aa:77:04:b2:5f:ef:09:8c:81:
fe:b8:a5:3c:0c:e3:06:b9:35:3d:50:ad:bd:2a:48:
67:1d:68:cb:a2:e6:a4:a4:0b:4c:72:a6:98:b6:61:
58:43:f8:81:ae:08:71:09:31:93:0f:94:27:9d:5c:
fe:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D9:B0:54:03:5C:15:E4:E2:0D:A8:38:45:18:BA:20:16:AB:F7:F5
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c9:67:0a:0e:87:a3:13:c5:9a:b9:d1:51:cb:04:74:02:1e:
a1:9f:40:84:78:96:6f:c3:a7:9d:af:04:b0:e1:18:b8:6d:c4:
33:52:12:55:2a:2d:7d:8c:df:1b:7d:58:a2:ea:b0:04:0d:ad:
e9:a6:e2:46:98:4a:fb:19:a3:3d:5b:28:0e:21:11:b2:dd:81:
78:b4:f5:00:32:dc:fc:1c:ec:89:99:35:b0:7f:3d:89:1a:16:
76:bf:6f:94:3a:2d:02:20:06:df:db:c5:4c:ec:7e:b7:f2:6b:
f6:d5:e3:8e:2b:cc:15:91:c9:70:b1:03:84:c4:de:0e:b4:e5:
85:68:2e:17:79:1a:64:9b:95:68:c5:1c:c4:54:7c:ae:fe:06:
6d:69:e9:56:29:d8:89:19:74:8b:16:a4:af:ba:22:25:7c:d0:
c4:0e:a1:d7:e7:a9:13:2b:4e:e3:07:d1:7e:db:bf:4f:bd:6e:
38:0a:c9:3f:71:28:9a:9d:e9:cd:31:8d:38:d4:1d:aa:a8:78:
df:2a:98:22:fc:28:49:94:59:1a:a2:27:54:a3:21:e3:e0:7f:
97:ef:25:07:18:07:4c:96:f7:f7:ab:57:a9:7b:aa:bb:1d:c3:
33:d8:8a:5f:63:d7:c2:44:50:ac:12:34:68:bf:ef:84:d5:d0:
01:17:ef:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohHYHmSflFbQZIwJn+igeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDg2NGFlOTJiZDdjZWFiNTA4M2JjYzcxMTAxZWYwNDY3
NmY4YWMwHhcNMjYwMzI2MDUwMTAyWhcNMjYwMzI3MDUwMTAyWjAzMTEwLwYDVQQD
EyhhNWQ5YjA1NDAzNWMxNWU0ZTIwZGE4Mzg0NTE4YmEyMDE2YWJmN2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEnrDZGTvktkQcYPv7QwTCo5j9P3
rGRw5Ed59eviPRu4FlWTH1mVDkmqQh3ZBUGbWM09GGjCIVmPU5Uv6I36oTXzzddt
5KoKH5Jn//1G2FiVr0T6mXdWScVEe6DXnIED3TETuWKS1QPy7a4cPGrvKpud1w8D
a7CiBJDJw7dO6wRnRi7jrXpKvvww1aRwmk94MSYuhsrGpGyzrpBmnyXvoNgmgIAp
U11iZxBr/oEMv5OMPewWBtdoat1S9l3l3r1uDXwaHeXo0OuqdwSyX+8JjIH+uKU8
DOMGuTU9UK29KkhnHWjLouakpAtMcqaYtmFYQ/iBrghxCTGTD5QnnVz+oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXZsFQDXBXk4g2oOEUYuiAWq/f1MB8GA1UdIwQY
MBaAFGTYZK6SvXzqtQg7zHEQHvBGdvisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5oa3JwSzlmT3ExQ0R2TWNSQWU4RVoyLUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MGIyYzQtMWQ0YS00YjkxLWIwZDAt
MmMwNWNjOTIyMDAxLzEvWk5oa3JwSzlmT3ExQ0R2TWNSQWU4RVoyLUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni83MGIyYzQtMWQ0YS00YjkxLWIwZDAtMmMwNWNjOTIyMDAx
LzEvWk5oa3JwSzlmT3ExQ0R2TWNSQWU4RVoyLUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8lnCg6H
oxPFmrnRUcsEdAIeoZ9AhHiWb8Onna8EsOEYuG3EM1ISVSotfYzfG31YouqwBA2t
6abiRphK+xmjPVsoDiERst2BeLT1ADLc/BzsiZk1sH89iRoWdr9vlDotAiAG39vF
TOx+t/Jr9tXjjivMFZHJcLEDhMTeDrTlhWguF3kaZJuVaMUcxFR8rv4GbWnpVinY
iRl0ixakr7oiJXzQxA6h1+epEytO4wfRftu/T71uOArJP3Eomp3pzTGNONQdqqh4
3yqYIvwoSZRZGqInVKMh4+B/l+8lBxgHTJb396tXqXuqux3DM9iKX2PXwkRQrBI0
aL/vhNXQARfv1g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:16:47 2026 by rpki-client