Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
File: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft (raw, json)
Hash identifier: eEp3fxm5Xyn4Zraxe4rehi1W/oRl1U1yAMjtgp+OSaY=
Subject key identifier: FC:BE:32:03:7F:11:46:E9:3F:D6:8A:8F:87:80:86:85:02:B3:62:DF
Authority key identifier: 66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
Certificate issuer: /CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Certificate serial: 019CAB33E6F25E9029AA04F5456FA6ECE27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
Manifest number: 0966
Signing time: Sun 01 Mar 2026 21:00:31 +0000
Manifest this update: Sun 01 Mar 2026 21:00:31 +0000
Manifest next update: Mon 02 Mar 2026 21:00:31 +0000
Files and hashes: 1: PKBAlxhxjbQl3V5bDnuBzljib9Q.roa (hash: eWzoIIDioxxQX7PyiTO6rBCtAXhu7H8TtLvFoqesiBg=)
2: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl (hash: nfaR/ltTt0oI5GezQDg9IZNZUVPwwERYD0Cs85R1E8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:e6:f2:5e:90:29:aa:04:f5:45:6f:a6:ec:e2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Validity
Not Before: Mar 1 21:00:31 2026 GMT
Not After : Mar 2 21:00:31 2026 GMT
Subject: CN=fcbe32037f1146e93fd68a8f8780868502b362df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:22:e8:be:6d:ae:32:2e:63:a0:81:96:9b:
c7:f1:2c:0b:35:c0:c3:b1:40:f9:4c:ee:8a:29:f5:
49:26:1d:c6:da:27:e9:d9:20:c2:0d:7c:49:fc:50:
0e:95:e2:4a:9e:b1:dc:c6:a3:35:95:c5:c9:bd:e0:
d9:9d:23:08:69:2a:62:7d:20:29:21:9f:a3:7c:f8:
b4:c8:df:51:b2:99:2c:50:b9:f8:b9:ec:d7:2a:86:
c6:23:6d:01:2d:48:4c:40:c7:70:7e:14:57:71:88:
e3:b2:17:70:fe:c9:ca:c2:04:c1:db:24:7b:6f:b3:
e0:05:48:c0:00:9a:93:a6:5f:a9:d1:c8:03:3b:5d:
cf:0a:dd:94:8e:bd:a9:37:88:35:dc:45:e6:f4:ca:
c7:31:09:94:01:46:cd:e0:52:62:d1:f7:c4:f6:6d:
fa:15:22:42:f1:63:b9:a3:24:dc:95:66:1d:04:07:
6a:42:1e:2e:46:8e:88:9e:49:a5:79:f7:13:f3:ba:
fc:d6:93:34:0f:2a:64:a4:59:27:65:49:6e:e6:c4:
e8:17:d8:05:bb:33:e3:04:24:c9:da:15:68:30:c5:
04:65:bf:e1:fa:e1:8c:01:3e:8e:cd:32:bb:b5:bc:
3f:85:1c:82:3e:cd:2e:24:72:d8:58:cd:b2:d9:e2:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BE:32:03:7F:11:46:E9:3F:D6:8A:8F:87:80:86:85:02:B3:62:DF
X509v3 Authority Key Identifier:
keyid:66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f5:1e:7a:69:b9:40:8d:f0:9e:6e:6e:4e:de:dd:84:31:ce:
e9:e5:64:6c:e1:06:b8:82:42:79:c7:98:40:a9:d8:3b:95:4b:
a8:77:37:e6:b1:1d:37:6c:32:88:6c:41:8f:53:88:1a:75:46:
1f:c4:f8:e6:a1:79:23:4a:79:23:45:54:ce:8e:a9:46:87:a6:
6d:19:2d:b4:6a:5f:a5:3a:c5:f0:1d:28:6d:0d:b3:57:82:91:
56:62:3b:83:b2:22:c9:48:eb:cc:c1:61:cd:f8:96:7f:fd:29:
2d:4b:86:27:d3:c6:e2:1a:7e:e1:26:ac:ba:04:f1:f3:6a:3f:
b2:26:fc:53:46:e6:d8:0f:dc:c8:c1:7d:1e:6d:5a:2e:2a:cd:
8b:43:c7:da:32:fd:13:dc:10:07:21:fb:15:a9:47:e1:ff:a5:
8e:a0:c1:7a:bd:25:27:bc:6e:c0:9a:09:27:c4:45:9d:3a:8b:
bf:d5:2c:50:df:c8:33:b2:0e:15:7e:17:1c:aa:3a:48:a0:33:
93:fc:1f:c7:25:ae:cf:8e:fb:11:8c:58:61:7c:9e:a0:d1:3e:
4a:e9:85:74:ec:97:06:36:2d:7a:b9:03:77:db:57:35:15:bd:
da:85:f2:6b:4f:c8:b9:68:3d:4f:e5:13:ba:bd:43:91:42:d4:
bb:a8:3f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:52 2026 by rpki-client