Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File: Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier: /vlVHjFPX/pEcupy8x5wNBDfEP5f864mQo7uRelT8p4=
Subject key identifier: A7:CE:13:F9:D5:B8:3A:70:63:21:73:41:AF:CB:28:53:AF:EF:92:D3
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer: /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial: 019CAD228C339FC78990BA047FD2A19C4C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 06:00:48 +0000
Manifest this update: Mon 02 Mar 2026 06:00:48 +0000
Manifest next update: Tue 03 Mar 2026 06:00:48 +0000
Files and hashes: 1: 1-bvTtCyxjhCFLcxNhXPNFp9zd4.roa (hash: UqrazJGk86AULwhwwPwABEyPtaaQCEyqIBdZnP4+jJA=)
2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: 54h49JQmaniyN7KVy6Pw++5IxImMxKefFhdj08khqRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:8c:33:9f:c7:89:90:ba:04:7f:d2:a1:9c:4c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
Validity
Not Before: Mar 2 06:00:48 2026 GMT
Not After : Mar 3 06:00:48 2026 GMT
Subject: CN=a7ce13f9d5b83a7063217341afcb2853afef92d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:86:4f:01:2a:c6:40:4c:d5:dd:03:c4:41:
42:4b:95:97:72:7a:bd:cf:6e:6a:75:88:42:79:e2:
65:81:06:db:ee:7e:a9:a4:4a:0b:4d:60:72:5a:5b:
6b:57:fb:36:1a:52:e6:49:88:a2:7e:ec:0d:e1:0a:
71:a3:20:7a:f1:40:f3:5e:cf:cf:1f:a7:4f:16:96:
f8:0a:f8:56:f7:c5:6f:11:20:e0:a5:2b:7c:9c:98:
b8:47:39:a7:32:ac:ac:f6:0c:0d:77:3a:62:cc:c0:
b9:45:d3:b0:34:a0:74:c1:ac:f2:fa:c4:21:74:52:
74:b2:ff:9f:fe:04:3f:00:5c:81:9c:8a:11:62:6a:
a3:8f:ac:0d:12:26:2c:7d:3e:70:de:6c:82:c4:eb:
b3:c6:ab:3c:4d:66:73:43:ec:68:d8:1e:52:0c:ac:
21:62:b6:4d:eb:a6:26:9f:a3:02:a7:dd:f8:a1:25:
d8:20:e7:fa:9f:7b:8e:05:3b:2e:f7:4a:a3:e5:b5:
20:f0:2f:ac:48:0a:e7:da:2e:39:e5:9b:89:20:f5:
0c:80:fa:1d:b8:25:5c:bc:64:b8:25:ab:70:40:3a:
6f:ae:66:3c:d9:f1:f7:20:5d:eb:4a:6b:8c:ef:11:
bc:3a:43:4e:38:26:d6:85:70:57:50:ff:be:fa:cb:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CE:13:F9:D5:B8:3A:70:63:21:73:41:AF:CB:28:53:AF:EF:92:D3
X509v3 Authority Key Identifier:
keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ca:71:72:50:ea:fc:a1:cf:5a:4c:f0:91:25:03:ca:e7:32:
95:8c:d4:9d:f4:81:51:61:7a:8c:8a:00:fe:a0:ea:c6:24:b7:
6b:93:1d:38:24:ca:f7:80:c1:0a:be:3d:68:eb:04:7d:8e:1b:
bf:fd:5e:d6:30:5c:94:48:21:5e:f7:21:de:33:45:f2:8c:73:
5b:17:f7:9a:c2:ab:8e:ba:3b:65:4c:c3:c6:6e:f2:e4:a4:a0:
fb:9e:d7:bf:2d:fb:ce:12:b1:38:64:ad:95:76:cc:d1:88:90:
9c:f2:ae:dc:60:68:b7:46:b2:1e:64:0d:f8:20:7b:30:d4:6a:
b4:07:f7:36:a1:24:05:ae:00:d6:65:9d:42:ee:ed:29:f2:97:
0c:5b:7b:a5:91:1c:4b:0f:15:5a:11:34:6e:9a:26:d9:26:2d:
36:cd:ec:17:4a:2d:fa:fe:ee:d9:00:6a:fa:f6:17:a7:e5:87:
cd:a3:c0:bf:4b:28:dd:40:3c:3a:bf:c7:44:7f:5a:b0:d8:57:
30:ab:e0:eb:9e:f2:99:e1:fd:91:f6:07:4c:5d:25:d9:35:6d:
f2:91:2a:b7:6d:03:69:8a:14:30:51:08:27:c0:5c:56:ce:e0:
0c:c8:22:b3:71:21:39:4b:2a:ce:e8:d2:e6:22:83:7f:9d:20:
30:f9:41:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIowzn8eJkLoEf9KhnEx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWM3ODk5NzZkM2I1ODQwMTZjYWMxOWYzNGJiZWRlOTY2
Y2QyMzAwHhcNMjYwMzAyMDYwMDQ4WhcNMjYwMzAzMDYwMDQ4WjAzMTEwLwYDVQQD
EyhhN2NlMTNmOWQ1YjgzYTcwNjMyMTczNDFhZmNiMjg1M2FmZWY5MmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQGGTwEqxkBM1d0DxEFCS5WXcnq9
z25qdYhCeeJlgQbb7n6ppEoLTWByWltrV/s2GlLmSYiifuwN4QpxoyB68UDzXs/P
H6dPFpb4CvhW98VvESDgpSt8nJi4RzmnMqys9gwNdzpizMC5RdOwNKB0wazy+sQh
dFJ0sv+f/gQ/AFyBnIoRYmqjj6wNEiYsfT5w3myCxOuzxqs8TWZzQ+xo2B5SDKwh
YrZN66Ymn6MCp934oSXYIOf6n3uOBTsu90qj5bUg8C+sSArn2i455ZuJIPUMgPod
uCVcvGS4JatwQDpvrmY82fH3IF3rSmuM7xG8OkNOOCbWhXBXUP+++sugkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfOE/nVuDpwYyFzQa/LKFOv75LTMB8GA1UdIwQY
MBaAFGbseJl207WEAWysGfNLvt6WbNIwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wN2JmNWItMDM0MC00MzRlLWE0NDQt
ZjA3NjFlMjllNmM0LzEvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8wN2JmNWItMDM0MC00MzRlLWE0NDQtZjA3NjFlMjllNmM0
LzEvWnV4NG1YYlR0WVFCYkt3WjgwdS0zcFpzMGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8pxclDq
/KHPWkzwkSUDyucylYzUnfSBUWF6jIoA/qDqxiS3a5MdOCTK94DBCr49aOsEfY4b
v/1e1jBclEghXvch3jNF8oxzWxf3msKrjro7ZUzDxm7y5KSg+57Xvy37zhKxOGSt
lXbM0YiQnPKu3GBot0ayHmQN+CB7MNRqtAf3NqEkBa4A1mWdQu7tKfKXDFt7pZEc
Sw8VWhE0bpom2SYtNs3sF0ot+v7u2QBq+vYXp+WHzaPAv0so3UA8Or/HRH9asNhX
MKvg657ymeH9kfYHTF0l2TVt8pEqt20DaYoUMFEIJ8BcVs7gDMgis3EhOUsqzujS
5iKDf50gMPlB1A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:30 2026 by rpki-client