Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: xq3EfS2Kx/Znw/OhKKa2C+OElrFPfM1G5ZqS0027bVo=
Subject key identifier: 85:E1:57:79:5D:36:03:3F:38:D6:AD:F3:F8:0E:AE:FC:66:FE:CC:6E
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 019D262814579BCA42FA7DB84E859AB616AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:00:53 +0000
Manifest this update: Wed 25 Mar 2026 18:00:53 +0000
Manifest next update: Thu 26 Mar 2026 18:00:53 +0000
Files and hashes: 1: 8r944bJqG_LM17rTDE1uGAYMcO4.roa (hash: US/6Z/+ktv9Mac1FJpsH2XS8YNAZ76aWDA9Ebr1o3lU=)
2: BcVatgINhehxpYUrBXABJ41nAt0.roa (hash: GcuNKsGTXhiIzKjZT1cDQ3vbaLRIxIZoGDWXVty3fns=)
3: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: 7pmPhZrKL/qF7eotiMCWoHPTRcorAbQUQBI8Ee//wUk=)
4: yG1gr2VlWKuTrkZ4POlu8-Ft8xo.roa (hash: wEYOZFW3nRAdwU0jliufiMLAbI5/X3da3ron9zmXMns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:14:57:9b:ca:42:fa:7d:b8:4e:85:9a:b6:16:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Mar 25 18:00:53 2026 GMT
Not After : Mar 26 18:00:53 2026 GMT
Subject: CN=85e157795d36033f38d6adf3f80eaefc66fecc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:15:88:86:b0:ce:97:0b:f8:f7:c8:97:db:
1e:4f:ca:60:b0:f4:22:82:40:e2:30:1e:d1:e0:99:
c0:a1:56:56:35:09:54:28:52:f8:ad:fc:0b:0f:f3:
04:21:23:8c:d8:af:73:65:c6:6f:a5:09:c0:2b:e7:
06:c1:8d:f9:f5:d4:d9:e5:e2:6d:8f:f7:ec:4c:1d:
0d:15:bd:a7:a7:de:a4:fe:b1:71:00:ab:47:01:91:
05:24:8e:f8:55:5e:e1:82:3f:e4:c1:4b:43:16:6e:
32:6d:66:f1:d4:44:5d:34:79:77:43:4a:2d:0d:7a:
5f:cc:b0:a7:f3:db:9e:cc:e5:9e:a6:0b:59:7f:ae:
2f:94:ea:37:fe:d8:f6:61:a2:a1:6a:e0:0f:4e:e3:
03:1d:2e:f4:3f:48:16:d3:26:e9:22:4a:3c:67:13:
72:cd:01:6f:4c:c2:f1:78:1d:6b:1e:2e:d6:58:27:
bb:26:a7:65:88:f8:73:6f:2d:42:d1:f2:48:ea:03:
8b:58:32:a3:62:bb:b9:7b:86:ce:3c:42:5f:93:be:
5b:7d:ed:a5:ff:11:15:98:65:61:cc:8c:4f:d8:f9:
30:7b:fd:db:0c:d0:d4:39:02:95:1b:68:9a:94:5d:
75:c7:31:28:1f:46:67:b0:a7:30:78:49:4e:a3:d5:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E1:57:79:5D:36:03:3F:38:D6:AD:F3:F8:0E:AE:FC:66:FE:CC:6E
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ef:42:7d:34:56:95:9e:62:78:ef:e4:9e:e6:50:8d:77:04:
f7:fa:e9:14:be:a0:0f:98:20:0d:f8:65:7f:11:ca:c7:2f:bf:
a0:e4:dd:34:a2:10:66:54:98:97:d3:6b:34:8e:93:35:ff:b1:
ea:48:96:be:d9:2b:70:fb:7d:df:1f:75:5b:89:75:20:98:27:
80:65:97:b1:f7:34:af:dd:27:03:d4:94:32:2b:be:51:29:48:
2b:30:1d:6d:0e:a0:b9:9f:f6:d8:63:dd:c2:80:77:ef:c5:22:
3d:33:6d:9e:cc:8b:f9:f1:88:7a:28:6d:c9:7a:79:35:a5:49:
2b:f9:f5:c1:74:f3:29:7c:2f:f5:d4:e1:2c:84:b5:9c:ef:04:
c6:44:fc:f1:2d:ed:f4:c8:8f:af:26:ea:d5:80:99:1a:31:70:
a6:26:e8:6e:9e:d1:46:15:ca:ea:4c:44:3c:40:21:69:f6:ca:
29:57:7c:2d:17:77:f7:68:ea:38:35:c8:60:be:8d:47:87:53:
fd:20:48:d2:de:56:c5:8b:16:31:06:3a:95:00:58:01:5e:fc:
a6:e5:c4:97:cf:57:06:b3:72:c2:b4:f8:19:91:ff:ef:64:bf:
43:a5:93:41:19:39:34:06:1e:d9:1c:de:2f:c3:37:1b:39:29:
e2:6d:cf:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKBRXm8pC+n24ToWatharMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Mjc5NGMyZDJjZmEwNTQ2MzhiYTk1MGE1ZjY2OGU4NzYw
MTQxMmQwHhcNMjYwMzI1MTgwMDUzWhcNMjYwMzI2MTgwMDUzWjAzMTEwLwYDVQQD
Eyg4NWUxNTc3OTVkMzYwMzNmMzhkNmFkZjNmODBlYWVmYzY2ZmVjYzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MYViIawzpcL+PfIl9seT8pgsPQi
gkDiMB7R4JnAoVZWNQlUKFL4rfwLD/MEISOM2K9zZcZvpQnAK+cGwY359dTZ5eJt
j/fsTB0NFb2np96k/rFxAKtHAZEFJI74VV7hgj/kwUtDFm4ybWbx1ERdNHl3Q0ot
DXpfzLCn89uezOWepgtZf64vlOo3/tj2YaKhauAPTuMDHS70P0gW0ybpIko8ZxNy
zQFvTMLxeB1rHi7WWCe7JqdliPhzby1C0fJI6gOLWDKjYru5e4bOPEJfk75bfe2l
/xEVmGVhzIxP2Pkwe/3bDNDUOQKVG2ialF11xzEoH0ZnsKcweElOo9XbUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXhV3ldNgM/ONat8/gOrvxm/sxuMB8GA1UdIwQY
MBaAFGQnlMLSz6BUY4upUKX2aOh2AUEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYt
MDYxNjM5ODEyYzc0LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNzBhOWMtMTUyOC00ZTY2LWI3YTYtMDYxNjM5ODEyYzc0
LzEvWkNlVXd0TFBvRlJqaTZsUXBmWm82SFlCUVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+9CfTRW
lZ5ieO/knuZQjXcE9/rpFL6gD5ggDfhlfxHKxy+/oOTdNKIQZlSYl9NrNI6TNf+x
6kiWvtkrcPt93x91W4l1IJgngGWXsfc0r90nA9SUMiu+USlIKzAdbQ6guZ/22GPd
woB378UiPTNtnsyL+fGIeihtyXp5NaVJK/n1wXTzKXwv9dThLIS1nO8ExkT88S3t
9MiPrybq1YCZGjFwpibobp7RRhXK6kxEPEAhafbKKVd8LRd392jqODXIYL6NR4dT
/SBI0t5WxYsWMQY6lQBYAV78puXEl89XBrNywrT4GZH/72S/Q6WTQRk5NAYe2Rze
L8M3Gzkp4m3Pkg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:31 2026 by rpki-client