Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json)
Hash identifier: VZlGZkN06zQS7Ua/PUKCpYugPK3hC9XcEsZbV7ko530=
Subject key identifier: 39:2B:F6:B6:28:81:8A:C7:A7:3D:96:18:73:43:79:88:FD:D0:0F:ED
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial: 019D273A9029209ACA28B580E24081868EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
Manifest number: 0976
Signing time: Wed 25 Mar 2026 23:00:42 +0000
Manifest this update: Wed 25 Mar 2026 23:00:42 +0000
Manifest next update: Thu 26 Mar 2026 23:00:42 +0000
Files and hashes: 1: 5vsHr6Xl2tRUiexVlz3FOn-aeHo.roa (hash: 242jMsYVWeBLhjugJFcXOkAL1qz3e8MYr9rwKIXdUO0=)
2: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: AYnPE20zbzlZ/XdZAy3AHnZ8pLMOyeHJBn/AnxuwUmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:90:29:20:9a:ca:28:b5:80:e2:40:81:86:8e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Validity
Not Before: Mar 25 23:00:42 2026 GMT
Not After : Mar 26 23:00:42 2026 GMT
Subject: CN=392bf6b628818ac7a73d961873437988fdd00fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:f0:fb:d1:b8:a3:5a:72:31:7b:a9:3a:fd:
f9:a7:c9:98:96:20:42:bc:34:ee:40:37:4e:65:ee:
76:3b:81:38:3e:70:ae:54:51:92:77:e6:27:29:08:
9a:76:82:f6:56:89:c0:ee:f8:87:7a:b3:48:f9:36:
c9:50:bf:8f:86:fb:c1:83:23:cf:85:d5:03:25:1a:
c2:8d:fc:98:a5:5f:9c:bb:04:ce:c8:d5:85:33:87:
ab:26:01:d9:6f:70:a4:b1:ea:0f:b7:58:2f:35:19:
af:be:35:da:fb:36:69:09:ae:25:29:85:89:0d:28:
7e:29:61:df:ee:85:20:bc:ab:74:88:82:8d:e2:e8:
06:e0:82:d2:30:6d:a9:db:6d:f4:06:1a:c0:1e:32:
9a:4e:82:f5:8c:38:59:9c:4c:4c:12:05:61:71:f6:
20:3f:eb:6b:c8:f2:a6:a2:6a:6a:50:4e:0a:6d:d2:
d1:7e:a7:98:ae:4b:04:73:3c:15:da:f5:18:47:1e:
d8:92:4f:8d:b6:d3:15:0a:52:ac:7b:90:38:4d:55:
89:b6:5e:1c:51:95:58:3c:b0:24:47:0a:8d:d5:08:
9d:ad:9e:61:67:b3:23:61:d2:d1:07:64:31:b3:7d:
4c:d5:13:fb:48:15:02:42:72:8f:d3:7b:ca:3b:82:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2B:F6:B6:28:81:8A:C7:A7:3D:96:18:73:43:79:88:FD:D0:0F:ED
X509v3 Authority Key Identifier:
keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ba:c6:f9:6f:36:d7:36:85:1f:14:28:50:a7:b4:99:3a:79:
f3:c9:0e:42:ff:14:f8:ac:ca:9e:26:ae:7a:e8:58:fc:5c:5e:
31:9f:71:ac:50:ce:89:a6:36:5f:33:0f:c5:ab:1f:97:21:09:
ac:d8:2c:a3:f5:b2:07:6d:3f:7d:a5:b3:ad:9c:be:23:05:07:
c4:0f:e6:df:93:e3:a7:32:31:09:a1:1f:3b:7b:fb:ef:b0:c8:
34:8c:94:e3:b8:e5:80:0a:fe:5d:f1:7f:e8:5b:0a:98:5b:8f:
45:8d:69:f2:04:09:7a:ca:a5:90:bc:b7:80:67:f9:36:d4:e4:
d9:1b:ef:07:57:a2:57:c5:76:90:9e:12:ee:98:5e:9c:48:30:
6e:1c:e8:d7:99:bd:8b:37:6a:a3:ed:ba:16:bb:19:43:62:65:
eb:a5:ab:6d:a3:c8:63:f5:1a:da:27:c6:a0:af:d8:8a:de:57:
b8:e6:92:93:24:6e:52:83:c0:22:d9:77:04:fe:98:36:64:ee:
8e:ec:34:1c:1f:7e:b1:6b:d1:87:29:f0:28:3c:e2:4a:93:dc:
99:a3:c7:ee:8d:08:31:a3:9d:9d:6e:e6:7c:57:ed:1f:b1:b4:
6f:fd:98:fa:54:de:8a:d3:42:69:58:69:a5:1c:72:84:68:5e:
ba:27:83:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOpApIJrKKLWA4kCBho68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDg0YjVmMTliNjIwNDhiMjJhNjEwM2QwOWY4NGQ4MTUz
Yzc1NTYwHhcNMjYwMzI1MjMwMDQyWhcNMjYwMzI2MjMwMDQyWjAzMTEwLwYDVQQD
EygzOTJiZjZiNjI4ODE4YWM3YTczZDk2MTg3MzQzNzk4OGZkZDAwZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEzw+9G4o1pyMXupOv35p8mYliBC
vDTuQDdOZe52O4E4PnCuVFGSd+YnKQiadoL2VonA7viHerNI+TbJUL+PhvvBgyPP
hdUDJRrCjfyYpV+cuwTOyNWFM4erJgHZb3CkseoPt1gvNRmvvjXa+zZpCa4lKYWJ
DSh+KWHf7oUgvKt0iIKN4ugG4ILSMG2p2230BhrAHjKaToL1jDhZnExMEgVhcfYg
P+tryPKmompqUE4KbdLRfqeYrksEczwV2vUYRx7Ykk+NttMVClKse5A4TVWJtl4c
UZVYPLAkRwqN1QidrZ5hZ7MjYdLRB2Qxs31M1RP7SBUCQnKP03vKO4JcEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkr9rYogYrHpz2WGHNDeYj90A/tMB8GA1UdIwQY
MBaAFGTYS18ZtiBIsiphA9CfhNgVPHVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEt
NWRiNjNiYWI5NDYwLzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEtNWRiNjNiYWI5NDYw
LzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7rG+W82
1zaFHxQoUKe0mTp588kOQv8U+KzKniaueuhY/FxeMZ9xrFDOiaY2XzMPxasflyEJ
rNgso/WyB20/faWzrZy+IwUHxA/m35PjpzIxCaEfO3v777DINIyU47jlgAr+XfF/
6FsKmFuPRY1p8gQJesqlkLy3gGf5NtTk2RvvB1eiV8V2kJ4S7phenEgwbhzo15m9
izdqo+26FrsZQ2Jl66WrbaPIY/Ua2ifGoK/Yit5XuOaSkyRuUoPAItl3BP6YNmTu
juw0HB9+sWvRhynwKDziSpPcmaPH7o0IMaOdnW7mfFftH7G0b/2Y+lTeitNCaVhp
pRxyhGheuieDVw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:05 2026 by rpki-client