Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
File: Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json)
Hash identifier: iTwJ2pYSGpaubjIuZMhSQSuQ7kmbVPKYnse7G3SwNE4=
Subject key identifier: C9:3F:69:D2:04:5B:77:80:52:AB:A0:8B:96:67:24:C5:B6:71:7D:20
Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Certificate serial: 019D2960CED3833587E5A32FC6662F1E4BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
Manifest number: 077F
Signing time: Thu 26 Mar 2026 09:01:43 +0000
Manifest this update: Thu 26 Mar 2026 09:01:43 +0000
Manifest next update: Fri 27 Mar 2026 09:01:43 +0000
Files and hashes: 1: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: Anl7Si96rwrBLFwISU0zZQMTu67qW3dN384XYa1DqYc=)
2: gqWYwvqSEqDFNTUCcnGa5SDZF2E.roa (hash: jC0EOd0XvL5sRKBgmxuZafhPeS0sVcqw+4cs49iJ+mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:ce:d3:83:35:87:e5:a3:2f:c6:66:2f:1e:4b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Validity
Not Before: Mar 26 09:01:43 2026 GMT
Not After : Mar 27 09:01:43 2026 GMT
Subject: CN=c93f69d2045b778052aba08b966724c5b6717d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:3a:d9:00:16:62:3f:74:f1:b5:91:28:fd:
ab:00:2f:dd:df:ec:7d:db:c4:6e:18:ea:88:76:d7:
64:b1:59:e6:96:70:e0:13:38:c3:46:94:db:aa:df:
7c:04:64:f9:e4:ae:0d:0d:1b:69:65:c0:0c:94:8f:
aa:41:67:7a:6d:4c:54:21:ae:be:64:3f:63:4f:b1:
05:e9:7f:ea:5d:09:91:a1:7a:6e:06:91:cd:94:9f:
72:0b:77:4c:57:c8:0e:8b:f9:b7:74:c6:6a:dc:4e:
f9:5f:44:8d:85:4f:ee:0f:58:f4:1c:f9:44:91:71:
0e:cc:2b:d6:d1:55:f0:2f:cf:c2:b6:ea:7e:06:f6:
19:1f:8d:ba:84:64:ae:a3:d1:16:6a:ec:6a:7d:30:
ed:75:09:11:5a:49:ed:e7:9e:ee:af:6c:a3:5a:0d:
48:e9:92:21:8f:50:31:ca:b0:d2:61:f6:3a:f8:04:
59:a6:8f:ae:f8:8f:1b:46:cc:93:6c:9c:3d:94:f5:
90:b8:6f:82:8d:c5:ec:6d:ee:c1:d0:cc:e9:89:60:
f5:31:eb:d3:f5:40:82:0d:28:8d:8e:b0:e7:6d:ec:
58:1c:01:eb:58:e8:e9:58:84:23:8b:67:3d:66:4d:
72:05:f2:ff:76:b3:b8:77:19:1f:fc:55:95:2c:66:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3F:69:D2:04:5B:77:80:52:AB:A0:8B:96:67:24:C5:B6:71:7D:20
X509v3 Authority Key Identifier:
keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b9:3c:cf:de:e5:87:39:f5:78:49:d0:72:13:8c:2f:46:c9:
b6:0b:32:24:d6:5e:3e:a4:e9:7b:49:fe:c0:4e:be:6a:c3:09:
be:48:94:be:91:54:b5:fd:e7:1f:c9:51:36:66:97:3e:9c:05:
4f:21:65:8e:5b:8a:1c:d7:36:17:01:dd:bb:46:63:c7:a3:26:
c6:93:e6:08:31:41:a3:14:15:17:96:92:33:e4:31:29:54:e1:
48:cf:94:5b:23:86:94:9d:c9:c8:3c:3e:38:0b:4e:4c:f4:47:
db:29:b8:ba:18:c3:08:4d:c5:c6:7d:50:88:d9:44:60:54:eb:
83:0a:26:57:4a:17:2b:d7:4d:b5:ad:03:8f:81:7c:b3:85:36:
ef:0b:d0:7d:1a:43:da:48:4e:cf:5d:e2:2a:87:11:de:ab:26:
84:a9:25:fd:53:8b:fe:ab:2a:c1:64:6d:8a:31:5c:34:33:71:
17:e7:4d:17:9d:15:29:d4:b8:10:5b:ce:0a:67:c5:72:11:e3:
3b:d8:fd:6e:66:61:db:6c:6b:18:22:8c:ed:14:1b:f8:d8:a6:
c8:29:3f:e9:59:a8:9d:85:46:c9:05:69:05:0b:d9:46:63:e1:
6b:0d:f2:bc:87:e0:f9:a9:a3:06:86:06:ae:4f:6d:57:be:f6:
9b:cb:59:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYM7TgzWH5aMvxmYvHkvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZmZmMDAxMzZjODNmNTNhMzhhYzNlZWFjOTcxMGE3OTkz
NmIyNGMwHhcNMjYwMzI2MDkwMTQzWhcNMjYwMzI3MDkwMTQzWjAzMTEwLwYDVQQD
EyhjOTNmNjlkMjA0NWI3NzgwNTJhYmEwOGI5NjY3MjRjNWI2NzE3ZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQM62QAWYj908bWRKP2rAC/d3+x9
28RuGOqIdtdksVnmlnDgEzjDRpTbqt98BGT55K4NDRtpZcAMlI+qQWd6bUxUIa6+
ZD9jT7EF6X/qXQmRoXpuBpHNlJ9yC3dMV8gOi/m3dMZq3E75X0SNhU/uD1j0HPlE
kXEOzCvW0VXwL8/Ctup+BvYZH426hGSuo9EWauxqfTDtdQkRWknt557ur2yjWg1I
6ZIhj1AxyrDSYfY6+ARZpo+u+I8bRsyTbJw9lPWQuG+CjcXsbe7B0MzpiWD1MevT
9UCCDSiNjrDnbexYHAHrWOjpWIQji2c9Zk1yBfL/drO4dxkf/FWVLGb4JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk/adIEW3eAUqugi5ZnJMW2cX0gMB8GA1UdIwQY
MBaAFGX/8AE2yD9To4rD7qyXEKeZNrJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmZfd0FUYklQMU9qaXNQdXJKY1FwNWsyc2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8wMmIzNTctYWJmNy00MDhiLThiMDkt
MGQ1OWQ5ZDExNTA1LzEvWmZfd0FUYklQMU9qaXNQdXJKY1FwNWsyc2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8wMmIzNTctYWJmNy00MDhiLThiMDktMGQ1OWQ5ZDExNTA1
LzEvWmZfd0FUYklQMU9qaXNQdXJKY1FwNWsyc2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7k8z97l
hzn1eEnQchOML0bJtgsyJNZePqTpe0n+wE6+asMJvkiUvpFUtf3nH8lRNmaXPpwF
TyFljluKHNc2FwHdu0Zjx6MmxpPmCDFBoxQVF5aSM+QxKVThSM+UWyOGlJ3JyDw+
OAtOTPRH2ym4uhjDCE3Fxn1QiNlEYFTrgwomV0oXK9dNta0Dj4F8s4U27wvQfRpD
2khOz13iKocR3qsmhKkl/VOL/qsqwWRtijFcNDNxF+dNF50VKdS4EFvOCmfFchHj
O9j9bmZh22xrGCKM7RQb+NimyCk/6VmonYVGyQVpBQvZRmPhaw3yvIfg+amjBoYG
rk9tV772m8tZ6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:27 2026 by rpki-client