Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier: RP5jER0P3Qekb/7mOSQeSbVem74XpTFQlsGtnR0C+K0=
Subject key identifier: 99:CE:9D:E0:0E:A2:B0:F9:6D:E2:1B:7E:67:CE:92:60:0B:A3:A8:69
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 019D265F44C304B0DD454F6D84DB6C383B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number: 16C8
Signing time: Wed 25 Mar 2026 19:01:10 +0000
Manifest this update: Wed 25 Mar 2026 19:01:10 +0000
Manifest next update: Thu 26 Mar 2026 19:01:10 +0000
Files and hashes: 1: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: VD7ZbE61UgwmMBzrQC9A2FBFcxcyeYx9rkGuWji2klU=)
2: q07ydXKNCfhsxkbz0OLUwwXQNww.roa (hash: WGl6n1WY5g82kxAJzk5G8tAK5EnNCEBo+zn2QvwiGL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:44:c3:04:b0:dd:45:4f:6d:84:db:6c:38:3b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: Mar 25 19:01:10 2026 GMT
Not After : Mar 26 19:01:10 2026 GMT
Subject: CN=99ce9de00ea2b0f96de21b7e67ce92600ba3a869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:33:f6:69:41:27:12:e5:83:ba:ef:a1:64:
0b:e1:1f:09:cb:03:91:ce:48:e3:44:aa:a8:1b:86:
07:7d:5b:f7:a7:57:a9:4c:b7:81:d6:c8:67:f4:2d:
f0:a2:f8:15:c0:a9:d2:be:0f:d9:b2:f6:67:d0:bb:
5c:aa:36:ac:ca:f6:93:3b:b5:72:2f:1d:c6:cf:dd:
ad:7b:2e:91:37:82:f7:70:f9:e1:37:17:d0:25:f7:
e8:58:6c:88:79:7e:71:fd:19:73:18:bc:80:09:44:
45:23:0e:a9:0d:32:10:13:31:86:48:1f:c6:01:74:
59:ca:e3:f1:a8:b5:f3:92:58:6f:b4:12:d7:4e:9b:
06:43:5c:1a:85:05:55:52:63:5f:7e:22:f8:30:32:
22:c2:58:3e:7e:04:10:d4:b5:e3:82:01:05:a5:f5:
c0:84:68:56:0c:a8:78:18:e6:5e:42:13:f2:2f:05:
03:8a:f2:da:f3:42:0e:3d:62:58:a8:d1:84:af:1a:
70:92:e6:fb:5f:96:64:ac:dd:c5:6b:de:6d:3a:53:
73:54:2b:4e:c6:9a:35:56:f6:3b:fa:65:99:44:47:
0c:5c:aa:b8:30:c7:75:37:29:de:07:cd:2a:bf:fa:
2b:24:28:49:b3:a4:1d:bf:66:63:3e:09:95:bc:ff:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CE:9D:E0:0E:A2:B0:F9:6D:E2:1B:7E:67:CE:92:60:0B:A3:A8:69
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d2:0a:75:c0:05:e9:7a:d1:e2:39:e7:98:ab:cf:25:01:63:
56:ec:96:b1:55:11:08:fa:c0:43:2b:37:dc:bb:1c:94:e8:69:
64:09:60:55:97:17:9d:97:da:32:3d:e0:f1:c6:09:dc:6e:7e:
ba:c5:5b:83:c7:b3:24:35:e1:12:40:75:f0:33:4c:9f:2a:d3:
ed:25:9d:17:74:73:e6:47:19:df:af:83:2f:f7:d2:6d:b6:e3:
0c:59:eb:b3:1d:a9:75:41:b1:6c:fd:87:61:9c:1b:28:18:25:
67:23:86:50:ba:9d:7c:1f:48:ae:01:a1:80:b6:da:df:44:78:
f4:5a:6c:b9:4a:ef:77:f3:9c:b1:e3:47:8e:0c:7c:8f:13:22:
95:ad:de:1c:bd:94:6b:3c:2f:6a:40:0d:d3:a0:75:06:41:30:
00:1e:5d:61:0c:57:89:e0:fc:3e:d4:26:5d:d4:b5:32:1d:fa:
ea:7d:59:4b:2f:da:b4:79:2c:23:66:29:4f:2a:9c:8d:43:5c:
2f:19:70:5a:0d:c7:ce:94:f8:b3:ed:6d:a0:30:28:33:92:34:
52:f0:43:4c:c2:9f:a4:81:71:a3:07:d2:fd:88:3a:0b:3d:df:
d8:ba:87:a8:33:b9:11:c9:b4:f1:15:4b:6f:56:73:12:9c:bb:
3d:59:0d:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX0TDBLDdRU9thNtsODuLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTZhZTM4YWVkYWNiYmVlZWUxZTA5Mzk1NmRiMzI4N2Fl
N2I1M2QwHhcNMjYwMzI1MTkwMTEwWhcNMjYwMzI2MTkwMTEwWjAzMTEwLwYDVQQD
Eyg5OWNlOWRlMDBlYTJiMGY5NmRlMjFiN2U2N2NlOTI2MDBiYTNhODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOIz9mlBJxLlg7rvoWQL4R8JywOR
zkjjRKqoG4YHfVv3p1epTLeB1shn9C3wovgVwKnSvg/ZsvZn0LtcqjasyvaTO7Vy
Lx3Gz92tey6RN4L3cPnhNxfQJffoWGyIeX5x/RlzGLyACURFIw6pDTIQEzGGSB/G
AXRZyuPxqLXzklhvtBLXTpsGQ1wahQVVUmNffiL4MDIiwlg+fgQQ1LXjggEFpfXA
hGhWDKh4GOZeQhPyLwUDivLa80IOPWJYqNGErxpwkub7X5ZkrN3Fa95tOlNzVCtO
xpo1VvY7+mWZREcMXKq4MMd1NyneB80qv/orJChJs6Qdv2ZjPgmVvP+G7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnOneAOorD5beIbfmfOkmALo6hpMB8GA1UdIwQY
MBaAFGSWrjiu2su+7uHgk5Vtsyh657U9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkphdU9LN2F5Nzd1NGVDVGxXMnpLSHJudFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82YzMxMjUtZmZmMS00ZGEwLThhMzIt
NzY2NGU4YTIxZmM3LzEvWkphdU9LN2F5Nzd1NGVDVGxXMnpLSHJudFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82YzMxMjUtZmZmMS00ZGEwLThhMzItNzY2NGU4YTIxZmM3
LzEvWkphdU9LN2F5Nzd1NGVDVGxXMnpLSHJudFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtIKdcAF
6XrR4jnnmKvPJQFjVuyWsVURCPrAQys33LsclOhpZAlgVZcXnZfaMj3g8cYJ3G5+
usVbg8ezJDXhEkB18DNMnyrT7SWdF3Rz5kcZ36+DL/fSbbbjDFnrsx2pdUGxbP2H
YZwbKBglZyOGULqdfB9IrgGhgLba30R49FpsuUrvd/OcseNHjgx8jxMila3eHL2U
azwvakAN06B1BkEwAB5dYQxXieD8PtQmXdS1Mh366n1ZSy/atHksI2YpTyqcjUNc
LxlwWg3HzpT4s+1toDAoM5I0UvBDTMKfpIFxowfS/Yg6Cz3f2LqHqDO5Ecm08RVL
b1ZzEpy7PVkNig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:24 2026 by rpki-client