Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
File: ZrB43tN1kjDKLho76QZjjRMGuQg.mft (raw, json)
Hash identifier: gHV6atU1jxEJYATcDIqZer+TM82Aykj0GOckChd7950=
Subject key identifier: 51:78:73:C1:28:B9:1E:24:71:03:29:28:FB:38:01:99:AF:1F:EA:2D
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial: 019D25BA711549D79E3306EF1EFBCBC26BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
Manifest number: 0BCC
Signing time: Wed 25 Mar 2026 16:01:08 +0000
Manifest this update: Wed 25 Mar 2026 16:01:08 +0000
Manifest next update: Thu 26 Mar 2026 16:01:08 +0000
Files and hashes: 1: 0P7uN4tvEIayKbjzLDxjuMY6fB4.roa (hash: D76OIMLLfFy5FtZGfX5Tk3VMAoafB+zBwfrTHH9d6Ao=)
2: ZrB43tN1kjDKLho76QZjjRMGuQg.crl (hash: I8lc9VJ8ce0USF+0c5nkLuCS9pjisYdjZQm4SLFUsVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:71:15:49:d7:9e:33:06:ef:1e:fb:cb:c2:6b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
Validity
Not Before: Mar 25 16:01:08 2026 GMT
Not After : Mar 26 16:01:08 2026 GMT
Subject: CN=517873c128b91e2471032928fb380199af1fea2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:24:53:8d:d5:cf:32:32:d0:bd:65:5f:fe:
80:8a:d7:5a:3d:64:de:40:c8:b0:71:9e:bf:83:f7:
26:76:66:53:bb:86:43:dc:17:d0:79:7b:5e:55:83:
85:f4:6d:4b:be:e6:93:c5:a1:52:fd:14:bb:a9:d2:
dd:c6:e9:8a:b8:b2:f3:96:d9:6b:44:ca:c0:b6:a3:
e2:d8:ca:e3:5a:80:e4:8d:3f:cc:91:ac:55:02:ec:
05:1d:f3:c3:aa:bb:2a:38:c8:8a:54:61:d9:51:6b:
44:d0:de:ee:03:0b:1b:e7:32:bb:27:c7:a2:d3:9a:
df:69:e7:ea:36:81:50:34:21:15:0c:b6:c3:46:41:
5a:09:79:07:4b:14:9a:fd:72:c8:fb:94:13:7f:01:
0e:ed:5e:ad:ce:d7:48:7b:4c:27:c3:55:91:b5:57:
3a:f7:5b:5c:60:bc:73:95:86:5c:59:10:95:b7:b0:
44:96:ef:04:49:37:76:99:35:81:73:75:e0:70:7e:
00:25:81:f1:b0:ee:a3:6a:f9:37:ca:7f:18:70:3a:
57:6b:81:5c:01:4e:2a:f4:ef:a4:3f:f1:63:97:6b:
63:e6:24:f4:5b:53:7c:78:00:3d:50:cc:c6:92:a4:
b6:e3:96:26:ec:8b:89:cc:38:92:bd:c5:4c:81:5a:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:78:73:C1:28:B9:1E:24:71:03:29:28:FB:38:01:99:AF:1F:EA:2D
X509v3 Authority Key Identifier:
keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:21:2d:74:2f:76:6b:71:f8:ed:aa:66:36:c2:f8:6d:c3:b8:
24:5b:40:30:78:d2:0a:b7:4f:a8:23:58:9b:d8:23:f8:d7:6d:
60:c4:cb:22:56:8c:01:24:d0:11:f0:5e:86:9f:cb:97:bc:ed:
72:67:17:bc:46:c1:6b:00:43:2e:a7:ae:76:b6:b9:7a:05:f8:
9f:52:68:c9:20:9d:11:17:12:9b:48:34:ad:06:40:9e:1e:01:
2e:8b:e8:f2:ea:82:15:6b:60:57:25:39:8f:42:50:aa:08:d1:
b6:a3:0b:77:ff:c4:6f:74:dd:04:b8:fc:ad:eb:37:6b:68:40:
ff:3c:a7:12:bd:f1:16:8d:ee:ac:e6:21:aa:80:69:24:1c:fa:
32:ff:ce:47:bb:a5:05:d8:25:df:3a:e8:22:ab:4b:0b:0b:36:
6f:81:aa:dc:85:7c:40:ee:bf:ea:5c:3f:dd:17:cc:a8:f9:30:
94:f9:4a:bb:c7:3b:93:9d:59:58:37:95:ff:6b:04:2a:59:12:
7d:de:21:fd:88:19:ee:c5:e9:e1:5d:b9:2e:d9:f4:e7:52:0d:
78:74:e3:5d:57:9a:4b:f1:83:3f:c3:2f:45:a0:aa:d8:d2:e4:
14:60:df:f6:97:c1:30:c0:2c:6b:03:69:77:c1:bd:7e:1a:41:
49:a8:d1:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lunEVSdeeMwbvHvvLwmviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YjA3OGRlZDM3NTkyMzBjYTJlMWEzYmU5MDY2MzhkMTMw
NmI5MDgwHhcNMjYwMzI1MTYwMTA4WhcNMjYwMzI2MTYwMTA4WjAzMTEwLwYDVQQD
Eyg1MTc4NzNjMTI4YjkxZTI0NzEwMzI5MjhmYjM4MDE5OWFmMWZlYTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeEkU43VzzIy0L1lX/6AitdaPWTe
QMiwcZ6/g/cmdmZTu4ZD3BfQeXteVYOF9G1LvuaTxaFS/RS7qdLdxumKuLLzltlr
RMrAtqPi2MrjWoDkjT/MkaxVAuwFHfPDqrsqOMiKVGHZUWtE0N7uAwsb5zK7J8ei
05rfaefqNoFQNCEVDLbDRkFaCXkHSxSa/XLI+5QTfwEO7V6tztdIe0wnw1WRtVc6
91tcYLxzlYZcWRCVt7BElu8ESTd2mTWBc3XgcH4AJYHxsO6javk3yn8YcDpXa4Fc
AU4q9O+kP/Fjl2tj5iT0W1N8eAA9UMzGkqS245Ym7IuJzDiSvcVMgVqqOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFF4c8EouR4kcQMpKPs4AZmvH+otMB8GA1UdIwQY
MBaAFGaweN7TdZIwyi4aO+kGY40TBrkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NjM1OTItYTQ4MC00NDRmLWE4ODEt
NDAyZTYyYzU0ZDMyLzEvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC83NjM1OTItYTQ4MC00NDRmLWE4ODEtNDAyZTYyYzU0ZDMy
LzEvWnJCNDN0TjFrakRLTGhvNzZRWmpqUk1HdVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCEtdC92
a3H47apmNsL4bcO4JFtAMHjSCrdPqCNYm9gj+NdtYMTLIlaMASTQEfBehp/Ll7zt
cmcXvEbBawBDLqeudra5egX4n1JoySCdERcSm0g0rQZAnh4BLovo8uqCFWtgVyU5
j0JQqgjRtqMLd//Eb3TdBLj8res3a2hA/zynEr3xFo3urOYhqoBpJBz6Mv/OR7ul
Bdgl3zroIqtLCws2b4Gq3IV8QO6/6lw/3RfMqPkwlPlKu8c7k51ZWDeV/2sEKlkS
fd4h/YgZ7sXp4V25Ltn051INeHTjXVeaS/GDP8MvRaCq2NLkFGDf9pfBMMAsawNp
d8G9fhpBSajRLA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:01 2026 by rpki-client