Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: 3OPLxRzjm0qGYSdPFGEWcjKgHulF3ar7wE08QFIK7b8=
Subject key identifier: E7:B2:05:25:46:EF:04:A6:0D:7E:C2:2B:71:12:AB:9F:70:38:53:3F
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 019CAC0FE5992A81938876DE40A7130DBA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 12BE
Signing time: Mon 02 Mar 2026 01:00:48 +0000
Manifest this update: Mon 02 Mar 2026 01:00:48 +0000
Manifest next update: Tue 03 Mar 2026 01:00:48 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: nouRIhkiSit/rNNkVroJSZe9KdUYFtLmxMy4b4AvVws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e5:99:2a:81:93:88:76:de:40:a7:13:0d:ba:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Mar 2 01:00:48 2026 GMT
Not After : Mar 3 01:00:48 2026 GMT
Subject: CN=e7b2052546ef04a60d7ec22b7112ab9f7038533f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:26:46:33:f2:86:18:75:c9:4b:2f:6f:cd:
04:a1:9d:58:d9:77:e5:84:5b:52:11:ec:ff:61:7c:
34:c3:57:b4:62:c2:0b:d3:c8:ff:1c:85:49:33:3e:
c9:22:cb:13:19:1d:46:d8:09:19:5e:de:d6:b8:33:
28:21:e3:da:fc:6d:bf:4e:ad:a2:58:b3:c7:41:5a:
f2:95:0a:3c:c0:d5:ab:03:b0:37:2e:17:83:43:a0:
8b:c2:5d:6f:7f:9f:95:64:3b:b2:7b:39:35:34:30:
75:b3:ee:0d:f2:1d:a9:d3:5e:0d:dd:56:ef:97:0a:
57:14:19:2c:83:3f:a2:99:1b:f2:36:35:19:a6:e5:
76:23:aa:15:c6:ec:c1:ce:3c:ac:49:45:f0:6a:25:
6c:eb:59:96:fb:cd:3c:8d:b5:23:46:e0:dd:6d:da:
9d:a3:96:9d:76:2d:0d:7b:1a:15:d3:83:ba:a2:78:
cc:ef:9c:69:5c:8f:bf:73:a4:c5:45:4a:c0:d2:5c:
e2:fe:ea:d8:7e:f2:91:3b:28:08:8c:b7:93:25:b9:
3a:ab:93:95:7a:6f:25:cd:81:8b:dd:5a:10:3e:49:
58:f7:9d:a6:82:47:92:77:a2:85:ed:dc:d5:ac:f6:
f6:b2:b1:e1:a5:a8:45:26:46:4f:33:b8:d7:ce:cd:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B2:05:25:46:EF:04:A6:0D:7E:C2:2B:71:12:AB:9F:70:38:53:3F
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5e:05:a3:34:70:73:a0:a4:a9:e4:28:96:83:ca:b0:73:13:
78:7b:af:eb:de:a8:a7:72:30:93:50:db:75:72:8d:a8:f4:54:
02:3d:96:51:fa:b7:7a:78:a7:82:3e:1a:e1:92:e2:f1:e9:ef:
e7:36:38:c4:5b:5b:9a:65:f3:1e:29:81:a6:b4:a8:e7:64:4f:
7b:77:28:c2:d8:91:f7:1f:ff:a5:59:b1:9b:ce:5a:9d:f2:71:
85:9d:b4:8e:6e:f8:27:94:18:b5:9c:a6:ad:46:79:28:d8:85:
64:da:94:5e:53:7b:d2:63:92:e1:90:44:91:68:43:14:87:ef:
b1:f8:39:98:96:99:7f:88:d9:3d:6a:f1:d5:36:33:66:52:b2:
e6:7a:fa:1d:76:c2:57:4c:f4:f3:fa:71:02:f9:50:37:e7:67:
c5:28:69:32:1d:4d:10:53:92:f8:32:e8:8f:9f:93:eb:2f:c4:
91:e5:67:91:71:aa:ce:97:70:9e:ed:ec:f5:e8:17:d2:34:bb:
1a:f6:5c:de:bf:0b:c5:41:3f:1c:b9:8d:da:0a:71:5b:cf:74:
44:34:ab:cf:a8:d8:63:ae:88:fd:a6:18:e1:1e:17:31:a4:b2:
44:b4:53:12:60:dd:e6:ca:ec:db:a7:5b:09:db:e8:8d:12:ed:
7a:ff:54:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD+WZKoGTiHbeQKcTDbp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDM1NzkwODMwY2U3NDY5YTk0YzU5YjJlMmNjYmJmNWUz
NmQxM2YwHhcNMjYwMzAyMDEwMDQ4WhcNMjYwMzAzMDEwMDQ4WjAzMTEwLwYDVQQD
EyhlN2IyMDUyNTQ2ZWYwNGE2MGQ3ZWMyMmI3MTEyYWI5ZjcwMzg1MzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T0mRjPyhhh1yUsvb80EoZ1Y2Xfl
hFtSEez/YXw0w1e0YsIL08j/HIVJMz7JIssTGR1G2AkZXt7WuDMoIePa/G2/Tq2i
WLPHQVrylQo8wNWrA7A3LheDQ6CLwl1vf5+VZDuyezk1NDB1s+4N8h2p014N3Vbv
lwpXFBksgz+imRvyNjUZpuV2I6oVxuzBzjysSUXwaiVs61mW+808jbUjRuDdbdqd
o5addi0NexoV04O6onjM75xpXI+/c6TFRUrA0lzi/urYfvKROygIjLeTJbk6q5OV
em8lzYGL3VoQPklY952mgkeSd6KF7dzVrPb2srHhpahFJkZPM7jXzs27BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeyBSVG7wSmDX7CK3ESq59wOFM/MB8GA1UdIwQY
MBaAFMzTV5CDDOdGmpTFmy4sy79eNtE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAt
YzVkMTNlODhlNGRlLzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAtYzVkMTNlODhlNGRl
LzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp14FozRw
c6CkqeQoloPKsHMTeHuv696op3Iwk1DbdXKNqPRUAj2WUfq3eningj4a4ZLi8env
5zY4xFtbmmXzHimBprSo52RPe3cowtiR9x//pVmxm85anfJxhZ20jm74J5QYtZym
rUZ5KNiFZNqUXlN70mOS4ZBEkWhDFIfvsfg5mJaZf4jZPWrx1TYzZlKy5nr6HXbC
V0z08/pxAvlQN+dnxShpMh1NEFOS+DLoj5+T6y/EkeVnkXGqzpdwnu3s9egX0jS7
GvZc3r8LxUE/HLmN2gpxW890RDSrz6jYY66I/aYY4R4XMaSyRLRTEmDd5srs26db
CdvojRLtev9UTQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:27 2026 by rpki-client