Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
File: zzaFkhY6Sa04_60dQZp3UrMz2nc.mft (raw, json)
Hash identifier: Jcj3sAt4JFpw4qQAJnmJeWPHR6jpbYCnP/N8mLpv8ZE=
Subject key identifier: 20:0A:8E:7D:C2:AB:75:07:DF:BC:18:95:AD:1C:24:DD:7D:76:B5:06
Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
Certificate issuer: /CN=cf368592163a49ad38ffad1d419a7752b333da77
Certificate serial: 019D2928ECAAD7A399D61F6288C736E4892C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
Manifest number: 0BBD
Signing time: Thu 26 Mar 2026 08:00:41 +0000
Manifest this update: Thu 26 Mar 2026 08:00:41 +0000
Manifest next update: Fri 27 Mar 2026 08:00:41 +0000
Files and hashes: 1: vP550p7smweDyzsFJJdi4XYXyu4.roa (hash: yk6RvM+MwSA+1cZ2k4NblzZafqg5JzamkxWGdJ15e3A=)
2: zzaFkhY6Sa04_60dQZp3UrMz2nc.crl (hash: vmMFd1ys+nXhr2lq3ivTeLOWU0IECILfeNywXNFSsHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:ec:aa:d7:a3:99:d6:1f:62:88:c7:36:e4:89:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77
Validity
Not Before: Mar 26 08:00:41 2026 GMT
Not After : Mar 27 08:00:41 2026 GMT
Subject: CN=200a8e7dc2ab7507dfbc1895ad1c24dd7d76b506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:58:a1:b2:34:ee:0d:31:f3:50:2d:2b:19:
51:fe:3b:f0:e9:22:c6:8f:ec:41:ca:d9:9b:01:e3:
cc:6d:7f:f7:19:a3:45:69:11:02:09:9e:6d:cc:6c:
71:c0:e1:e6:82:35:6b:65:6a:26:69:b0:d4:0b:ae:
37:d3:56:cc:4e:85:a6:78:2b:e5:85:8b:f0:de:f6:
d0:62:25:5c:31:24:dd:a0:18:52:b0:a6:f1:9f:73:
f0:38:0f:95:ec:64:5f:f2:55:be:f6:58:bc:01:a4:
18:b4:bb:f9:8e:de:d5:ef:c9:12:d6:3d:33:c0:65:
db:a9:d0:05:2b:6d:34:9f:48:5d:c2:51:7f:07:1a:
13:19:25:bb:e5:12:d3:3e:33:b1:29:01:04:25:b0:
53:6a:b9:ef:54:f6:91:fc:ae:8e:74:03:8e:26:24:
7d:7b:b5:55:05:28:96:54:bf:5f:3e:4d:44:cd:17:
be:11:fe:f9:f8:60:5d:01:f9:dc:ec:8c:0e:88:95:
36:c5:fa:0c:de:38:a3:08:9e:cf:c0:f8:50:cf:8f:
f2:b0:a4:95:ba:3b:e8:08:ec:bb:4f:a2:06:38:43:
7d:66:30:e7:64:bd:21:82:a2:a6:25:7f:88:54:56:
b9:a2:b4:28:93:d3:50:a0:ad:fa:11:b9:81:92:80:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0A:8E:7D:C2:AB:75:07:DF:BC:18:95:AD:1C:24:DD:7D:76:B5:06
X509v3 Authority Key Identifier:
keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ac:d3:3a:35:0e:a1:75:fd:eb:9d:f7:39:14:44:9d:5b:24:
20:67:e5:18:29:e7:6e:ef:6a:71:41:23:cc:19:0c:1e:a0:c1:
55:69:b0:5b:eb:14:c7:78:42:d1:de:38:75:c9:f8:7b:f2:fe:
c1:98:84:c4:1b:58:49:a6:0e:91:31:3a:fd:49:9c:0f:55:41:
ee:09:28:48:b1:9e:bd:b7:8b:3e:9f:b8:81:1e:45:9f:31:22:
05:da:87:b9:79:fc:28:4f:b3:24:24:be:b0:5d:f8:cc:33:8c:
62:ca:ca:49:e7:cf:37:70:e9:ca:69:26:03:5c:fc:a2:92:4b:
a1:f7:2b:00:fb:8b:b8:a6:25:18:f9:00:6f:9b:35:58:30:de:
45:21:e1:b7:f0:ce:91:51:62:47:9a:0b:d9:c2:d1:b4:46:34:
3e:7d:09:f1:a0:5c:82:e9:22:20:4e:b8:51:b6:54:50:55:af:
f4:ef:cd:ba:60:08:68:23:15:ed:92:c5:93:19:83:25:18:3a:
9e:c1:7c:4d:84:21:90:0b:db:9b:68:d0:8f:27:fd:e3:e9:96:
24:d1:09:f0:35:c3:15:d3:cc:0a:7c:d3:9c:49:41:9a:fc:d0:
bd:aa:88:5e:51:a8:b0:58:9d:c8:78:27:4b:4e:5b:18:c5:b8:
65:d6:14:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKOyq16OZ1h9iiMc25IksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzY4NTkyMTYzYTQ5YWQzOGZmYWQxZDQxOWE3NzUyYjMz
M2RhNzcwHhcNMjYwMzI2MDgwMDQxWhcNMjYwMzI3MDgwMDQxWjAzMTEwLwYDVQQD
EygyMDBhOGU3ZGMyYWI3NTA3ZGZiYzE4OTVhZDFjMjRkZDdkNzZiNTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJRYobI07g0x81AtKxlR/jvw6SLG
j+xBytmbAePMbX/3GaNFaRECCZ5tzGxxwOHmgjVrZWomabDUC64301bMToWmeCvl
hYvw3vbQYiVcMSTdoBhSsKbxn3PwOA+V7GRf8lW+9li8AaQYtLv5jt7V78kS1j0z
wGXbqdAFK200n0hdwlF/BxoTGSW75RLTPjOxKQEEJbBTarnvVPaR/K6OdAOOJiR9
e7VVBSiWVL9fPk1EzRe+Ef75+GBdAfnc7IwOiJU2xfoM3jijCJ7PwPhQz4/ysKSV
ujvoCOy7T6IGOEN9ZjDnZL0hgqKmJX+IVFa5orQok9NQoK36EbmBkoCJ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAKjn3Cq3UH37wYla0cJN19drUGMB8GA1UdIwQY
MBaAFM82hZIWOkmtOP+tHUGad1KzM9p3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenphRmtoWTZTYTA0XzYwZFFacDNVck16Mm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83MjA2YzctZmYyNi00MGNlLWJlNzEt
MjMxYWM2ZWQ5Nzg1LzEvenphRmtoWTZTYTA0XzYwZFFacDNVck16Mm5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS83MjA2YzctZmYyNi00MGNlLWJlNzEtMjMxYWM2ZWQ5Nzg1
LzEvenphRmtoWTZTYTA0XzYwZFFacDNVck16Mm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIazTOjUO
oXX96533ORREnVskIGflGCnnbu9qcUEjzBkMHqDBVWmwW+sUx3hC0d44dcn4e/L+
wZiExBtYSaYOkTE6/UmcD1VB7gkoSLGevbeLPp+4gR5FnzEiBdqHuXn8KE+zJCS+
sF34zDOMYsrKSefPN3DpymkmA1z8opJLofcrAPuLuKYlGPkAb5s1WDDeRSHht/DO
kVFiR5oL2cLRtEY0Pn0J8aBcgukiIE64UbZUUFWv9O/NumAIaCMV7ZLFkxmDJRg6
nsF8TYQhkAvbm2jQjyf94+mWJNEJ8DXDFdPMCnzTnElBmvzQvaqIXlGosFidyHgn
S05bGMW4ZdYUpw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:31 2026 by rpki-client