Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
File: ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft (raw, json)
Hash identifier: cGQhw6vh/YeZaFTA/4/eE99/RJ9nnMIMzqJJObVZKrI=
Subject key identifier: 48:A4:26:4F:2C:09:F9:BF:E3:D3:32:BD:2C:C7:30:7B:A3:BC:7C:74
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial: 019D25F195445F7FDADD2CA7D7F7753BEFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
Manifest number: 0B13
Signing time: Wed 25 Mar 2026 17:01:22 +0000
Manifest this update: Wed 25 Mar 2026 17:01:22 +0000
Manifest next update: Thu 26 Mar 2026 17:01:22 +0000
Files and hashes: 1: TuuctTXsnDfzjdp1XhJCuSQCZBE.roa (hash: lL87XCaQxmWdIfEo3Mlnj0oxnulHe23ylI5Y0lZ+hHA=)
2: ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl (hash: 0ZXpVRvKwvwbcoSRxQFmERfFS0BbodHXFJ8wkM8d8ic=)
3: k5dogf-BFW_dvSXrkiHgEtagTVo.roa (hash: JTI2nYP0LahJQKoGJLojDrE8fYXChxKujAnQaXvPJgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:95:44:5f:7f:da:dd:2c:a7:d7:f7:75:3b:ef:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Validity
Not Before: Mar 25 17:01:22 2026 GMT
Not After : Mar 26 17:01:22 2026 GMT
Subject: CN=48a4264f2c09f9bfe3d332bd2cc7307ba3bc7c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:1b:59:19:26:2e:48:60:bf:01:00:f8:0d:
69:9b:39:87:69:eb:52:c3:1d:72:11:61:9c:ca:b3:
57:e9:f3:45:c0:f0:5f:a2:6d:98:94:f1:f9:aa:14:
be:a4:5c:3a:6b:14:63:14:3d:65:44:1b:17:2d:83:
9f:78:03:65:05:4c:62:70:b2:00:13:dc:c7:84:10:
e4:a2:41:23:86:bd:2e:ab:18:14:ae:4c:37:41:7c:
a1:6b:b3:2e:0b:e1:da:19:24:87:6c:9f:b7:f0:c2:
12:3a:55:31:50:87:43:ee:c0:68:5d:79:c8:46:6d:
e6:2b:61:ba:10:92:5b:5f:ce:7f:7f:4c:65:41:c2:
07:2c:12:94:4b:da:df:0b:d8:47:c5:2a:ca:e8:81:
9d:ce:0a:54:63:1e:79:42:cc:4d:f8:23:60:20:b9:
b1:fb:29:36:5e:80:50:1a:b8:d2:ae:75:3c:cc:50:
4f:f1:28:00:6f:29:dd:51:29:2c:eb:26:5b:81:3a:
99:13:e2:3a:16:7a:0a:9a:e5:0b:9e:6e:b6:5e:80:
b8:0d:34:02:50:21:bd:5d:b6:02:24:d9:85:cc:ea:
f5:95:e8:a3:fb:eb:00:f8:a1:55:7b:b5:04:ec:d5:
a6:0c:e3:c2:01:26:ec:e9:ac:8b:54:b7:4c:71:7f:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A4:26:4F:2C:09:F9:BF:E3:D3:32:BD:2C:C7:30:7B:A3:BC:7C:74
X509v3 Authority Key Identifier:
keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8c:a7:e0:be:dc:11:c0:d4:43:24:43:82:17:c9:73:55:78:
06:73:96:0c:e7:98:d3:64:87:4d:fd:40:b2:59:df:4d:ff:c8:
3c:8a:7a:5c:1a:16:65:0d:7f:48:a8:76:8b:6e:e0:65:de:d8:
b2:8e:81:33:fb:3f:0d:44:9d:00:24:51:eb:5f:e5:e7:40:a6:
c7:08:b2:4a:17:6d:62:d3:8c:96:87:bf:50:88:b1:64:4f:3a:
7d:cc:be:47:1e:d0:0f:04:98:fa:b7:72:93:48:b0:75:5e:e4:
69:08:b9:9f:57:c1:da:ee:c7:5d:c3:84:b1:cb:f7:2d:6a:55:
3d:03:f9:ad:59:3e:4f:4a:aa:de:5c:75:52:c2:74:8b:a2:53:
7c:f2:34:11:d2:2b:89:16:d5:0c:1c:97:00:d5:2c:d3:ad:bb:
bf:bc:48:c3:83:88:aa:d4:81:38:d5:0c:89:c9:e1:a0:95:4e:
61:9b:6a:c9:37:78:38:01:07:06:2f:54:75:18:57:c5:70:84:
bf:b5:26:ce:a5:38:47:76:9a:20:14:10:6d:7b:a0:19:92:cf:
4a:10:b2:54:4f:a4:93:48:50:c3:89:56:cf:dd:b1:af:4a:f9:
b9:18:23:f1:38:62:80:c7:62:5c:37:33:b4:c6:cf:a4:83:56:
d3:cc:79:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8ZVEX3/a3Syn1/d1O++nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGM1MGQxZGFkZjhiODRiMTc0ZmRiMDU4N2FmYjVmNDJk
ZjhhNWYwHhcNMjYwMzI1MTcwMTIyWhcNMjYwMzI2MTcwMTIyWjAzMTEwLwYDVQQD
Eyg0OGE0MjY0ZjJjMDlmOWJmZTNkMzMyYmQyY2M3MzA3YmEzYmM3Yzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7obWRkmLkhgvwEA+A1pmzmHaetS
wx1yEWGcyrNX6fNFwPBfom2YlPH5qhS+pFw6axRjFD1lRBsXLYOfeANlBUxicLIA
E9zHhBDkokEjhr0uqxgUrkw3QXyha7MuC+HaGSSHbJ+38MISOlUxUIdD7sBoXXnI
Rm3mK2G6EJJbX85/f0xlQcIHLBKUS9rfC9hHxSrK6IGdzgpUYx55QsxN+CNgILmx
+yk2XoBQGrjSrnU8zFBP8SgAbyndUSks6yZbgTqZE+I6FnoKmuULnm62XoC4DTQC
UCG9XbYCJNmFzOr1leij++sA+KFVe7UE7NWmDOPCASbs6ayLVLdMcX9TuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEikJk8sCfm/49MyvSzHMHujvHx0MB8GA1UdIwQY
MBaAFGRMUNHa34uEsXT9sFh6+19C34pfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yOGJkZTMtYTRjYS00ODhkLTgwNjEt
ZDM4ZDg0M2JmYTFkLzEvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yOGJkZTMtYTRjYS00ODhkLTgwNjEtZDM4ZDg0M2JmYTFk
LzEvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYyn4L7c
EcDUQyRDghfJc1V4BnOWDOeY02SHTf1AslnfTf/IPIp6XBoWZQ1/SKh2i27gZd7Y
so6BM/s/DUSdACRR61/l50CmxwiyShdtYtOMloe/UIixZE86fcy+Rx7QDwSY+rdy
k0iwdV7kaQi5n1fB2u7HXcOEscv3LWpVPQP5rVk+T0qq3lx1UsJ0i6JTfPI0EdIr
iRbVDByXANUs0627v7xIw4OIqtSBONUMicnhoJVOYZtqyTd4OAEHBi9UdRhXxXCE
v7UmzqU4R3aaIBQQbXugGZLPShCyVE+kk0hQw4lWz92xr0r5uRgj8ThigMdiXDcz
tMbPpINW08x5ug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:28 2026 by rpki-client