Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: LWuHEyI7GYqHOzki0oTCQ1q4UIeUZzRGiXGpfcZ5kts=
Subject key identifier: 00:BB:EF:5F:06:F3:E5:45:45:CE:1C:66:33:D3:BD:5B:AF:DF:B8:FD
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 019D2BF3389B6EA615D148327DA7DD6CC618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 1894
Signing time: Thu 26 Mar 2026 21:00:53 +0000
Manifest this update: Thu 26 Mar 2026 21:00:53 +0000
Manifest next update: Fri 27 Mar 2026 21:00:53 +0000
Files and hashes: 1: 0GL7DdIdoFqMUjvFhCRfHpKPMbA.roa (hash: pZia0ALckAxbVwXjSvk9ZitHob5JnbAYRMcyTh/GAHw=)
2: 4CJ3InuHwPxMIYug15LfFjf4TFE.roa (hash: AqjwYTvPMHv8KhwXl422zB5jGiNZqfOiCwgbFsHZ07g=)
3: H6jlQnwQ3aiH-RYU25LA_SCJ8YQ.roa (hash: z0WYajZ68GEteUnmX5OmcBfJ0ynCGdGVIvLSKmVhonU=)
4: VxmBydPNDVkjAwNW0HlCl0mcW2A.roa (hash: 2uX2f6w9d7FkhAQJ79lByeDaz04Av+toag4OFSNYkF8=)
5: X4rKfB3PDI3kjmwak5Qpg6vv3Qo.roa (hash: rE1Gy+5Y3N/6nRhiVvsTgzmZ/j4C83X5X1jx7h+hjs0=)
6: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: 7XZQdGYlxdGF7WNfEukDrwpUs1Pebtm/yV08v7nHHhE=)
7: srwZqD3NLb6Mgfkh0xVjrlQc7p8.roa (hash: WOqlcZKIxr5sVUqyyKJNHMiLfFbk3vNnFX+UsNkt18I=)
8: zPyNAFdQmlJqV2qKRKA-eSuuTJY.roa (hash: WQ7fB4l+y3xXDPGETnFXWLdLLeTLH4yREUZKhvFa6Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:38:9b:6e:a6:15:d1:48:32:7d:a7:dd:6c:c6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Mar 26 21:00:53 2026 GMT
Not After : Mar 27 21:00:53 2026 GMT
Subject: CN=00bbef5f06f3e54545ce1c6633d3bd5bafdfb8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fb:55:be:d7:aa:69:fa:fc:59:b8:20:38:9a:
9c:3f:81:42:94:d6:a8:bc:79:71:2b:6b:28:c5:05:
f4:40:12:e5:0b:38:a6:8c:1d:40:25:9b:58:33:83:
b2:aa:9d:c9:62:d9:34:de:df:83:70:fc:32:66:d6:
80:9d:51:f8:b8:52:53:b8:3f:12:b0:17:2b:67:47:
ef:0e:a5:d2:38:fe:15:0c:e0:68:50:ff:32:bf:1f:
20:59:e7:7d:44:9a:ae:1a:9b:b9:0c:5c:d3:76:e9:
04:45:f1:28:eb:18:37:13:42:f9:f2:8b:43:81:c1:
d4:fb:ce:4b:85:51:37:ba:2a:02:7a:8b:84:e8:c8:
a9:a1:11:e7:b8:62:c3:b3:8b:da:73:56:76:64:7f:
54:6a:2e:f2:98:dd:3b:f9:43:1b:d4:b3:99:65:15:
e2:5e:39:65:b5:20:9b:3f:0c:fa:9f:0b:f9:9a:42:
3f:82:3c:15:a7:a9:18:06:89:1a:71:d7:24:d1:83:
d0:8d:20:87:6c:b4:b6:b8:93:29:4c:51:0a:a2:61:
37:c9:8d:9b:31:b7:c8:c1:79:c7:24:2e:f1:a0:1f:
a3:86:ba:e1:7d:5d:9f:af:a3:0b:c7:f5:7f:32:56:
c0:d7:5c:79:0c:5c:22:59:e3:88:2b:b7:65:e0:98:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BB:EF:5F:06:F3:E5:45:45:CE:1C:66:33:D3:BD:5B:AF:DF:B8:FD
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d6:55:09:8a:a0:6e:54:7e:0f:80:ef:cf:0f:2f:76:11:0d:
85:1f:b7:ca:71:98:d4:29:8a:68:c6:5c:d4:ac:78:10:2a:c4:
d7:d2:7c:3a:a1:3b:6f:b7:94:4c:27:63:ca:50:e3:72:12:cc:
c4:e9:69:f5:29:dd:56:f2:02:0e:4e:bc:44:a5:a9:b6:a4:8f:
62:ee:e8:08:18:39:11:7b:e8:79:61:72:95:59:a9:93:71:79:
1f:cd:93:66:b8:4f:ce:73:92:c9:00:39:14:28:a4:3f:8b:10:
6f:a2:f2:25:32:37:7e:b3:6a:b2:1b:82:91:10:2d:67:aa:7a:
8f:e3:42:4f:62:1c:24:03:24:75:74:cb:ba:6e:3d:34:04:9a:
e2:c1:cd:34:40:6b:b0:5c:ef:bb:f3:ec:ce:e0:13:bb:05:82:
5a:b7:a6:a5:6f:fa:2b:b3:9f:a2:e4:fa:a0:0d:44:c1:0d:bd:
df:95:91:7f:36:6e:4b:4f:d3:87:dc:98:1a:7e:ca:76:57:23:
14:56:0d:95:4d:da:9e:6f:6c:5a:07:ab:80:ce:46:1c:a2:2e:
47:92:94:c7:b3:d3:82:44:cc:62:a4:a4:6b:22:f8:43:1f:06:
e8:c1:80:ec:b2:22:7e:31:2a:31:23:47:e0:79:61:8b:57:be:
e4:13:4a:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0r8zibbqYV0UgyfafdbMYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1M2Y1NTYyOTEyMWI2MGZiMTljOTdmOTljNzVkZDZmMDE1
ZGQ2ZTgwHhcNMjYwMzI2MjEwMDUzWhcNMjYwMzI3MjEwMDUzWjAzMTEwLwYDVQQD
EygwMGJiZWY1ZjA2ZjNlNTQ1NDVjZTFjNjYzM2QzYmQ1YmFmZGZiOGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPtVvteqafr8WbggOJqcP4FClNao
vHlxK2soxQX0QBLlCzimjB1AJZtYM4Oyqp3JYtk03t+DcPwyZtaAnVH4uFJTuD8S
sBcrZ0fvDqXSOP4VDOBoUP8yvx8gWed9RJquGpu5DFzTdukERfEo6xg3E0L58otD
gcHU+85LhVE3uioCeouE6MipoRHnuGLDs4vac1Z2ZH9Uai7ymN07+UMb1LOZZRXi
XjlltSCbPwz6nwv5mkI/gjwVp6kYBokacdck0YPQjSCHbLS2uJMpTFEKomE3yY2b
MbfIwXnHJC7xoB+jhrrhfV2fr6MLx/V/MlbA11x5DFwiWeOIK7dl4JhQ2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAC7718G8+VFRc4cZjPTvVuv37j9MB8GA1UdIwQY
MBaAFGU/VWKRIbYPsZyX+Zx13W8BXdboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQt
MjkyNmQyODFiNTE0LzEvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQtMjkyNmQyODFiNTE0
LzEvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtZVCYqg
blR+D4Dvzw8vdhENhR+3ynGY1CmKaMZc1Kx4ECrE19J8OqE7b7eUTCdjylDjchLM
xOlp9SndVvICDk68RKWptqSPYu7oCBg5EXvoeWFylVmpk3F5H82TZrhPznOSyQA5
FCikP4sQb6LyJTI3frNqshuCkRAtZ6p6j+NCT2IcJAMkdXTLum49NASa4sHNNEBr
sFzvu/PszuATuwWCWrempW/6K7OfouT6oA1EwQ2935WRfzZuS0/Th9yYGn7Kdlcj
FFYNlU3anm9sWgergM5GHKIuR5KUx7PTgkTMYqSkayL4Qx8G6MGA7LIifjEqMSNH
4Hlhi1e+5BNK/A==
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:22:53 2026 by rpki-client