Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
File: ZnsrG--6F48w0qMhxFG27qVGYnQ.mft (raw, json)
Hash identifier: k/M80phwfGjdVlFEQKc4NNfM1UW+qQtlx6ZOWzX7I5w=
Subject key identifier: FA:F0:6E:A5:C7:4A:B3:95:88:68:86:EB:95:71:57:82:94:09:4C:B6
Authority key identifier: 66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
Certificate issuer: /CN=667b2b1befba178f30d2a321c451b6eea5466274
Certificate serial: 019D29CEBDD4C4D4534F155F3B462966FDF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
Manifest number: 119B
Signing time: Thu 26 Mar 2026 11:01:48 +0000
Manifest this update: Thu 26 Mar 2026 11:01:48 +0000
Manifest next update: Fri 27 Mar 2026 11:01:48 +0000
Files and hashes: 1: ZnsrG--6F48w0qMhxFG27qVGYnQ.crl (hash: RWN2E/VaPDdVFL5pF9FRY6Lq+JOr4WDaxHfVVnrPeD0=)
2: pf_a0nfpbks_qkQ4qrr2kzaKRXI.roa (hash: vxuQLy7AbojQx6rQzhF+7IW/BG/BLw5H+3NoMpcGW1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:bd:d4:c4:d4:53:4f:15:5f:3b:46:29:66:fd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667b2b1befba178f30d2a321c451b6eea5466274
Validity
Not Before: Mar 26 11:01:48 2026 GMT
Not After : Mar 27 11:01:48 2026 GMT
Subject: CN=faf06ea5c74ab395886886eb9571578294094cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1a:d0:8e:6b:0e:a1:d5:f8:65:ed:cd:a7:db:
f1:66:3e:94:17:30:79:3d:52:c8:1c:88:7c:70:42:
43:69:a5:1a:6c:88:e1:82:00:41:a7:2f:7c:20:ac:
61:c1:96:1a:53:69:8d:2c:92:1b:a8:9f:02:1f:95:
56:7a:38:03:89:f8:31:be:95:fe:96:5d:f1:87:f9:
31:66:b7:eb:b8:1e:bd:27:82:28:cb:f8:65:ff:14:
90:f1:37:11:d7:75:77:81:06:89:8e:49:32:75:ae:
08:76:e6:a8:91:94:96:47:08:81:68:ee:f1:0c:e3:
83:a0:5a:3a:da:91:9b:b0:7a:b5:5a:2d:e7:0f:e0:
90:c1:c2:5e:1f:68:3d:62:58:c5:a0:e3:df:36:ee:
d1:86:47:06:84:6d:7f:b8:e4:fe:46:93:d6:f9:34:
b4:a3:53:d8:a5:63:57:1b:51:69:db:f7:7a:91:f0:
6c:7f:39:d8:32:21:7e:d1:0e:8b:ab:0c:36:a8:41:
b1:37:b0:f0:ef:f8:34:bc:7f:16:5e:a4:2f:fb:2b:
48:84:52:9e:c3:2c:0d:a6:ee:90:de:d5:ac:72:65:
f2:17:a3:fb:13:2c:5d:da:16:33:c9:57:3e:25:b5:
2f:5a:1c:be:32:3d:d7:84:2f:f7:d2:38:d7:90:35:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F0:6E:A5:C7:4A:B3:95:88:68:86:EB:95:71:57:82:94:09:4C:B6
X509v3 Authority Key Identifier:
keyid:66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:50:b4:aa:15:24:7e:af:7e:8f:8e:3f:07:b2:e7:8c:c6:31:
21:52:d6:3d:37:46:50:33:e3:cf:ef:47:73:36:5c:bc:28:43:
81:13:1c:37:86:d0:cf:43:f5:c6:bf:64:d5:e0:9f:04:4c:b7:
97:e7:c5:0f:f3:96:fa:5d:3f:ac:1d:0a:d9:02:26:17:ae:a8:
c6:bc:b9:41:cc:c5:a8:4c:c0:b4:0f:79:60:e1:f1:29:a4:6a:
cb:6f:25:6c:ae:38:dd:f0:2e:90:e4:52:34:fd:cd:b3:be:3c:
c2:67:08:8f:87:5a:6b:11:4b:25:7e:f8:14:6c:e5:6f:5f:7a:
aa:dc:39:11:84:c3:b3:4d:18:57:c7:33:e3:68:20:47:72:8f:
ac:6b:4c:15:bf:6e:56:02:3e:ec:61:a1:25:60:c2:56:e9:0c:
a8:d2:b0:f1:60:4b:16:cb:1b:e8:a4:47:23:24:ae:7b:61:b7:
02:92:16:eb:63:a8:da:51:2e:e1:73:2f:7d:65:69:61:a1:a3:
6a:3a:fc:d7:80:aa:7f:30:0f:a9:14:04:4f:2e:fc:4f:f1:b9:
69:48:ea:89:d2:22:57:87:1c:e4:c1:29:95:f9:f7:2e:a5:bc:
05:95:8a:cc:bc:58:55:55:20:52:84:e1:e3:a6:66:2f:bd:b4:
cd:ae:16:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzr3UxNRTTxVfO0YpZv35MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2N2IyYjFiZWZiYTE3OGYzMGQyYTMyMWM0NTFiNmVlYTU0
NjYyNzQwHhcNMjYwMzI2MTEwMTQ4WhcNMjYwMzI3MTEwMTQ4WjAzMTEwLwYDVQQD
EyhmYWYwNmVhNWM3NGFiMzk1ODg2ODg2ZWI5NTcxNTc4Mjk0MDk0Y2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixrQjmsOodX4Ze3Np9vxZj6UFzB5
PVLIHIh8cEJDaaUabIjhggBBpy98IKxhwZYaU2mNLJIbqJ8CH5VWejgDifgxvpX+
ll3xh/kxZrfruB69J4Ioy/hl/xSQ8TcR13V3gQaJjkkyda4IduaokZSWRwiBaO7x
DOODoFo62pGbsHq1Wi3nD+CQwcJeH2g9YljFoOPfNu7RhkcGhG1/uOT+RpPW+TS0
o1PYpWNXG1Fp2/d6kfBsfznYMiF+0Q6Lqww2qEGxN7Dw7/g0vH8WXqQv+ytIhFKe
wywNpu6Q3tWscmXyF6P7Eyxd2hYzyVc+JbUvWhy+Mj3XhC/30jjXkDVBWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrwbqXHSrOViGiG65VxV4KUCUy2MB8GA1UdIwQY
MBaAFGZ7KxvvuhePMNKjIcRRtu6lRmJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYt
ZjhiZGQyZDc5MjdkLzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYtZjhiZGQyZDc5Mjdk
LzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflC0qhUk
fq9+j44/B7LnjMYxIVLWPTdGUDPjz+9HczZcvChDgRMcN4bQz0P1xr9k1eCfBEy3
l+fFD/OW+l0/rB0K2QImF66oxry5QczFqEzAtA95YOHxKaRqy28lbK443fAukORS
NP3Ns748wmcIj4daaxFLJX74FGzlb196qtw5EYTDs00YV8cz42ggR3KPrGtMFb9u
VgI+7GGhJWDCVukMqNKw8WBLFssb6KRHIySue2G3ApIW62Oo2lEu4XMvfWVpYaGj
ajr814CqfzAPqRQETy78T/G5aUjqidIiV4cc5MEplfn3LqW8BZWKzLxYVVUgUoTh
46ZmL720za4WXQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:33:46 2026 by rpki-client