Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File: ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier: bcEnRg2ic3Rs3Qn8nz6I/nuh8UhiXP0z1KN5/qY6TNg=
Subject key identifier: E9:98:F2:DE:69:4A:53:F3:D1:82:51:00:07:F1:14:DD:B8:F6:B7:EE
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer: /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial: 019D2772B0910D1788BE020F4E737424BFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number: 0702
Signing time: Thu 26 Mar 2026 00:02:00 +0000
Manifest this update: Thu 26 Mar 2026 00:02:00 +0000
Manifest next update: Fri 27 Mar 2026 00:02:00 +0000
Files and hashes: 1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: PArJ08Waa56aKcB7LGO4nyRQDw/gppMJCaomkTSXoQI=)
2: t-CPneeaVHYgCJeN9aRr26OHu8s.roa (hash: i5R3976Bs/xCdmNx5+5wTM2K2LQaNxrVpxX02Fkd/C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:b0:91:0d:17:88:be:02:0f:4e:73:74:24:bf:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Validity
Not Before: Mar 26 00:02:00 2026 GMT
Not After : Mar 27 00:02:00 2026 GMT
Subject: CN=e998f2de694a53f3d182510007f114ddb8f6b7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:a3:5e:33:79:68:03:61:1a:3e:65:49:9f:
da:4b:3d:0b:a5:ef:1b:63:ae:b3:2a:1d:30:bc:fd:
36:8a:c8:a0:27:fa:f6:13:75:90:e8:5d:f6:94:4b:
08:af:27:50:40:ac:19:2c:a9:4b:6f:55:65:c2:66:
42:f7:04:28:b9:ee:c3:be:f3:03:3a:87:5e:9c:3a:
f2:51:19:39:07:d9:26:26:51:6e:c5:7f:9e:88:78:
03:a1:ed:c6:92:58:cf:0f:0e:e8:d3:39:78:aa:21:
54:37:41:8a:90:76:25:ba:00:ce:c2:3f:ef:2a:03:
1c:af:83:cc:ff:2c:13:95:5f:9d:e8:f6:0c:46:62:
6b:06:23:e8:a3:c0:05:6d:30:e8:d3:9d:1e:f8:8f:
04:2b:61:48:37:7b:c9:19:19:2b:ac:38:16:ce:c2:
76:c0:c1:33:13:6c:56:54:43:7e:e3:90:e0:81:4d:
0a:34:dd:ab:7b:e4:f9:f8:65:cc:f2:9c:a8:3e:21:
3d:bc:ac:cf:e8:53:70:9c:0a:2a:ae:ca:2e:1d:92:
7b:88:3e:6b:93:f1:20:38:a3:fa:71:06:09:17:3b:
4e:25:ff:b9:50:d5:c5:96:7c:b5:cf:1d:d4:f3:53:
a1:2c:49:09:bf:bf:72:25:c0:18:91:7e:1a:82:6f:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:98:F2:DE:69:4A:53:F3:D1:82:51:00:07:F1:14:DD:B8:F6:B7:EE
X509v3 Authority Key Identifier:
keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:98:bf:1a:ef:62:d5:81:94:20:d3:5a:b5:09:4a:8d:62:13:
5b:bd:86:ff:6a:ad:d3:22:78:23:05:ae:81:2a:a6:16:56:69:
bc:b9:ee:a1:ca:a0:a8:57:9c:d2:4a:91:b8:24:12:28:03:b2:
48:17:cd:15:11:84:f9:ba:27:c4:a9:a2:58:b4:39:e0:e3:2e:
e8:ad:5f:ee:0a:a6:2e:15:8f:88:02:99:8c:c7:e5:fe:85:72:
f3:db:83:f1:80:d5:91:5a:87:27:4f:41:ad:46:f4:ef:fd:ce:
aa:b0:0c:07:ac:fd:35:d8:6e:b7:c7:e0:ca:a2:67:2f:25:d2:
7c:fc:77:8f:3a:05:7d:04:18:65:12:2c:4b:ab:b5:d2:17:92:
bb:1f:5b:48:74:11:35:e8:f6:c6:6a:0c:8a:7f:4b:0f:c2:31:
38:0e:41:b7:6c:bb:3a:83:06:85:95:9c:4d:e0:2f:cc:bd:8c:
15:47:6d:c3:52:92:09:92:41:89:d6:53:6d:01:21:4c:b0:1a:
a2:eb:c8:27:ab:b4:7a:70:13:57:29:7a:c1:43:6d:90:f0:91:
0f:ca:7d:fc:58:6f:bf:b3:f7:d8:e5:26:7e:52:a1:0b:eb:15:
1c:00:c8:75:e4:28:59:8f:3a:69:10:73:b0:9e:8a:8e:b0:17:
e7:f1:58:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncrCRDReIvgIPTnN0JL/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTdhNGU2YWNmYjcyZDUxZDI5ZWU2MWE2MjgzNmY2NjA2
MDk3YTYwHhcNMjYwMzI2MDAwMjAwWhcNMjYwMzI3MDAwMjAwWjAzMTEwLwYDVQQD
EyhlOTk4ZjJkZTY5NGE1M2YzZDE4MjUxMDAwN2YxMTRkZGI4ZjZiN2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ2jXjN5aANhGj5lSZ/aSz0Lpe8b
Y66zKh0wvP02isigJ/r2E3WQ6F32lEsIrydQQKwZLKlLb1VlwmZC9wQoue7DvvMD
OodenDryURk5B9kmJlFuxX+eiHgDoe3GkljPDw7o0zl4qiFUN0GKkHYlugDOwj/v
KgMcr4PM/ywTlV+d6PYMRmJrBiPoo8AFbTDo050e+I8EK2FIN3vJGRkrrDgWzsJ2
wMEzE2xWVEN+45DggU0KNN2re+T5+GXM8pyoPiE9vKzP6FNwnAoqrsouHZJ7iD5r
k/EgOKP6cQYJFztOJf+5UNXFlny1zx3U81OhLEkJv79yJcAYkX4agm+BSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmY8t5pSlPz0YJRAAfxFN249rfuMB8GA1UdIwQY
MBaAFGSXpOas+3LVHSnuYaYoNvZgYJemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkplazVxejdjdFVkS2U1aHBpZzI5bUJnbDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MjVlYTItZmZmOC00MDk1LTlkOTYt
MDFjZDQ3YjZjYTBkLzEvWkplazVxejdjdFVkS2U1aHBpZzI5bUJnbDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85MjVlYTItZmZmOC00MDk1LTlkOTYtMDFjZDQ3YjZjYTBk
LzEvWkplazVxejdjdFVkS2U1aHBpZzI5bUJnbDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwpi/Gu9i
1YGUINNatQlKjWITW72G/2qt0yJ4IwWugSqmFlZpvLnuocqgqFec0kqRuCQSKAOy
SBfNFRGE+bonxKmiWLQ54OMu6K1f7gqmLhWPiAKZjMfl/oVy89uD8YDVkVqHJ09B
rUb07/3OqrAMB6z9Ndhut8fgyqJnLyXSfPx3jzoFfQQYZRIsS6u10heSux9bSHQR
Nej2xmoMin9LD8IxOA5Bt2y7OoMGhZWcTeAvzL2MFUdtw1KSCZJBidZTbQEhTLAa
ouvIJ6u0enATVyl6wUNtkPCRD8p9/Fhvv7P32OUmflKhC+sVHADIdeQoWY86aRBz
sJ6KjrAX5/FYyQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:59 2026 by rpki-client