Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
File: zgj-M6XwugsoYlNQW7-ykyIPWBY.mft (raw, json)
Hash identifier: uvPvVKHJXtTEKo1wSSm+82zbRbki3IBVZuNPLP/aGaE=
Subject key identifier: 7E:2F:BF:C3:DD:B5:C9:48:62:98:98:D7:A3:C6:C3:FE:AA:DF:DA:21
Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
Certificate issuer: /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Certificate serial: 019D28843A6B4F785BF1DE96ED742D1B94FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
Manifest number: 0DFC
Signing time: Thu 26 Mar 2026 05:00:47 +0000
Manifest this update: Thu 26 Mar 2026 05:00:47 +0000
Manifest next update: Fri 27 Mar 2026 05:00:47 +0000
Files and hashes: 1: TZjBq4odAN7upelKgfu1RPB63zo.roa (hash: bR7hMvq2zyGR+w9kpTZrW9dDTe7aMsxdA/NdBaV269g=)
2: zgj-M6XwugsoYlNQW7-ykyIPWBY.crl (hash: M75++cEsf4cp5TMsKAlFnCRZfAVCZYqYsBa4vACfZ0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:3a:6b:4f:78:5b:f1:de:96:ed:74:2d:1b:94:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Validity
Not Before: Mar 26 05:00:47 2026 GMT
Not After : Mar 27 05:00:47 2026 GMT
Subject: CN=7e2fbfc3ddb5c948629898d7a3c6c3feaadfda21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:cd:40:de:6d:d9:8e:da:cc:be:7b:cc:ec:
21:6f:ff:9b:a5:de:23:69:01:5a:ea:3a:98:e7:f7:
ac:52:22:56:ae:e7:9a:46:c2:98:b7:46:29:1d:69:
a7:c6:e2:2d:d4:01:da:27:f4:19:3b:ad:2c:96:45:
e9:c4:cd:6d:fe:88:fd:26:1b:61:ad:43:d4:1d:d9:
05:ff:b0:15:fc:39:1b:e1:e2:77:fe:ab:ae:b1:c7:
d3:2c:66:24:79:a0:fb:f3:45:0d:f5:71:81:f4:a9:
ae:11:a7:32:7c:66:89:80:24:a7:92:7e:95:ba:2a:
1d:50:86:c5:9e:3b:8c:e1:60:f4:06:4f:9d:98:95:
e1:2b:fc:f4:b2:2c:38:d2:b5:9e:73:5c:97:87:8c:
3c:38:a9:a8:ce:da:fe:2a:46:95:42:73:ed:c8:40:
9b:c8:17:fb:c1:c6:c4:43:ba:ff:27:ae:05:54:97:
0f:f2:50:85:e5:64:b9:59:da:ed:bf:0a:32:7d:ce:
c8:e5:ad:ee:41:1f:2c:32:f7:30:01:56:ff:96:08:
a4:c2:66:10:e2:fc:72:24:e8:4e:01:04:5f:dd:0e:
03:1e:30:da:b7:72:af:39:69:ff:dc:89:8c:8d:bf:
65:d1:a6:0c:c6:9f:a9:ca:af:45:1b:91:43:c6:06:
58:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2F:BF:C3:DD:B5:C9:48:62:98:98:D7:A3:C6:C3:FE:AA:DF:DA:21
X509v3 Authority Key Identifier:
keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b3:6d:78:24:1f:fc:e6:c2:09:b8:b3:8e:30:d5:4e:b0:49:
a1:e7:99:4f:11:df:15:3a:a2:34:2c:36:a8:fc:ad:19:20:ab:
38:7c:37:35:f4:ec:6c:75:cf:08:fa:88:0c:74:3a:9d:ed:ba:
11:a3:78:c5:bd:fa:5f:f7:4f:96:63:83:4f:ab:c3:a8:a1:38:
5a:78:90:40:e3:1a:26:3b:ec:9d:32:3a:3c:01:f0:75:e4:3c:
c9:f5:f4:31:9c:90:35:1f:cf:11:c3:e0:47:31:15:65:89:c4:
6b:b2:31:74:cd:66:1d:c8:aa:b2:f4:e9:02:4d:29:bb:84:39:
0f:96:3b:aa:11:2e:6b:6c:7d:56:69:09:40:1e:41:b9:18:6c:
25:e7:f5:46:44:8a:dc:e8:83:37:bb:57:10:c3:20:64:4a:24:
33:3d:93:54:dc:7d:06:c0:aa:46:56:0d:0d:50:3f:39:c0:15:
3b:f7:9e:98:50:97:ba:23:4e:20:74:a6:c7:4d:19:0a:19:de:
b1:cc:3f:35:3b:0c:51:f9:30:26:7e:34:e0:cf:b8:3a:ff:d2:
7c:34:46:e6:c3:36:68:eb:4f:29:a4:d4:16:72:cd:3f:0c:60:
60:51:74:7a:11:f7:43:05:a0:df:52:67:d6:49:47:1f:14:ef:
f2:b0:e1:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohDprT3hb8d6W7XQtG5T9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMDhmZTMzYTVmMGJhMGIyODYyNTM1MDViYmZiMjkzMjIw
ZjU4MTYwHhcNMjYwMzI2MDUwMDQ3WhcNMjYwMzI3MDUwMDQ3WjAzMTEwLwYDVQQD
Eyg3ZTJmYmZjM2RkYjVjOTQ4NjI5ODk4ZDdhM2M2YzNmZWFhZGZkYTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIHNQN5t2Y7azL57zOwhb/+bpd4j
aQFa6jqY5/esUiJWrueaRsKYt0YpHWmnxuIt1AHaJ/QZO60slkXpxM1t/oj9Jhth
rUPUHdkF/7AV/Dkb4eJ3/quuscfTLGYkeaD780UN9XGB9KmuEacyfGaJgCSnkn6V
uiodUIbFnjuM4WD0Bk+dmJXhK/z0siw40rWec1yXh4w8OKmoztr+KkaVQnPtyECb
yBf7wcbEQ7r/J64FVJcP8lCF5WS5Wdrtvwoyfc7I5a3uQR8sMvcwAVb/lgikwmYQ
4vxyJOhOAQRf3Q4DHjDat3KvOWn/3ImMjb9l0aYMxp+pyq9FG5FDxgZYnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4vv8PdtclIYpiY16PGw/6q39ohMB8GA1UdIwQY
MBaAFM4I/jOl8LoLKGJTUFu/spMiD1gWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yYTU1Y2YtY2U0YS00OThkLWJjZDct
ZDhjZmU1OTFkZDllLzEvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yYTU1Y2YtY2U0YS00OThkLWJjZDctZDhjZmU1OTFkZDll
LzEvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7NteCQf
/ObCCbizjjDVTrBJoeeZTxHfFTqiNCw2qPytGSCrOHw3NfTsbHXPCPqIDHQ6ne26
EaN4xb36X/dPlmODT6vDqKE4WniQQOMaJjvsnTI6PAHwdeQ8yfX0MZyQNR/PEcPg
RzEVZYnEa7IxdM1mHciqsvTpAk0pu4Q5D5Y7qhEua2x9VmkJQB5BuRhsJef1RkSK
3OiDN7tXEMMgZEokMz2TVNx9BsCqRlYNDVA/OcAVO/eemFCXuiNOIHSmx00ZChne
scw/NTsMUfkwJn404M+4Ov/SfDRG5sM2aOtPKaTUFnLNPwxgYFF0ehH3QwWg31Jn
1klHHxTv8rDh4g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:03 2026 by rpki-client