Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File: ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier: EvTt+APtHM0dqdjawMJ5ztpfEqkXKEqgS1cIpV2PZDM=
Subject key identifier: EA:0D:13:3A:BD:F3:5D:A3:DF:0F:18:0F:D4:2E:CA:CE:D7:80:3B:FE
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial: 019CAC7E3354CECBE534BE0664992984B4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number: 103B
Signing time: Mon 02 Mar 2026 03:01:17 +0000
Manifest this update: Mon 02 Mar 2026 03:01:17 +0000
Manifest next update: Tue 03 Mar 2026 03:01:17 +0000
Files and hashes: 1: BMF2VpXZcBJDRIgbKu6WmPKlRZE.roa (hash: Qaj7moEkQ9ZCrPUXtOtCs5aCDU6SYqiy/nfoo9H7JTA=)
2: FUJsXxiOTQX7pzaDkL5Jbj6ETSk.roa (hash: Uv+Y92AvX9M/f9d8WVX2zm/JR3SnMp+hpIYMHfKMlJ0=)
3: QKv3-8YoDEK1Mitg0rmTL0SGOJM.roa (hash: DZBSel951tZH4WYCuGXNyVILmfYXwt90PA6IkSwgQS0=)
4: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: uDAN8S4CVPhVKj3BBxX0/7D+7M1YeZfo/NuPXxfHD48=)
5: layLa7phubn33XrJU1BmwvtRXsY.roa (hash: cTdYPRtqorbWTxs8WaRuos58WsmGioXRqkoVdeR+lmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:33:54:ce:cb:e5:34:be:06:64:99:29:84:b4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Validity
Not Before: Mar 2 03:01:17 2026 GMT
Not After : Mar 3 03:01:17 2026 GMT
Subject: CN=ea0d133abdf35da3df0f180fd42ecaced7803bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:3c:62:ea:42:17:a6:43:10:11:6a:cb:cc:
7e:bc:de:ae:af:f1:87:f1:6b:fe:5a:95:1f:41:a7:
b9:1b:83:4b:dc:ce:bf:bf:50:ee:e5:4b:03:de:83:
89:42:b0:49:71:1a:04:9b:49:12:8e:a3:5b:ae:7b:
68:ec:df:cf:56:55:a5:95:fa:d6:50:c1:27:9a:86:
96:ef:d0:16:86:16:20:a8:df:be:e9:ce:29:c2:3e:
94:a7:71:bb:48:83:62:1c:cd:49:ff:80:fe:3c:0a:
c1:0d:e3:74:05:d4:ee:07:64:56:5c:f9:86:d4:dd:
f1:9f:cd:37:fe:19:be:44:de:d2:75:59:1f:a0:a1:
07:7a:a8:4a:14:f3:62:9d:96:e8:64:38:91:72:d5:
1d:2b:51:fe:af:58:c0:ac:cf:a9:44:71:77:35:0b:
4d:e4:4f:16:11:98:97:db:18:3a:71:4d:77:6a:6e:
e6:32:57:52:6b:61:63:5d:7b:68:f1:04:d5:57:4b:
1c:a0:2d:9e:68:1e:57:f8:d9:c0:32:d5:0f:f0:02:
ca:81:17:f7:25:61:11:07:c7:49:bc:52:4e:bd:9e:
b6:55:d8:87:34:e4:22:50:43:9e:eb:60:1e:17:d2:
e5:47:a3:69:49:6b:a8:00:97:92:80:4d:cd:6b:2e:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0D:13:3A:BD:F3:5D:A3:DF:0F:18:0F:D4:2E:CA:CE:D7:80:3B:FE
X509v3 Authority Key Identifier:
keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8d:2f:87:c4:55:c1:a0:0c:34:b1:8d:ab:b4:42:18:1b:3d:
8a:95:a4:7c:b2:0e:48:52:11:97:36:64:f1:c7:0a:eb:cf:01:
88:d9:8c:ae:ab:65:26:8c:26:51:c1:b4:46:50:f1:e0:e6:3a:
ef:be:c9:94:da:0f:a6:c5:4c:00:af:bc:0e:03:01:9a:b1:87:
b1:5b:21:bc:bc:18:ca:01:cd:b9:98:09:5a:21:84:8a:6d:a9:
51:b0:54:cc:f2:f4:c4:1e:11:8b:4d:e8:78:45:87:8d:79:7a:
77:03:ca:e1:31:39:fc:4e:b4:a9:7c:a2:9a:eb:3d:bd:a0:84:
6e:94:7a:43:43:d6:a7:31:e1:de:c5:0a:e8:bf:0f:7d:df:8d:
f1:56:33:38:c4:db:e0:91:12:60:21:1a:7e:1c:d4:c3:64:dc:
3d:88:32:13:7e:8a:be:08:b6:95:40:a7:9b:01:15:b0:58:4a:
d1:9d:7e:d6:31:1b:94:f5:0c:c0:dd:67:d2:65:d7:64:56:c7:
ca:76:27:bb:28:69:4d:38:82:b2:26:c2:83:05:56:b0:5d:a9:
d3:3f:fc:44:af:7d:fd:aa:91:c8:3e:51:d1:07:98:19:19:d5:
63:ec:d1:ff:50:65:ac:0b:2a:ab:38:3b:8a:aa:0a:e9:51:c6:
88:b3:7a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:34 2026 by rpki-client