Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: Xv5meR8DbSqr+QGfYYmJJjXW/YiG/lY1lmU055B2qUc=
Subject key identifier: 03:7E:53:E0:8C:0D:5A:DE:C2:0F:65:88:E9:C5:FC:EE:3A:E4:87:23
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 019CACB4862792F9DD866E8EDD0BBCBEC704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 059E
Signing time: Mon 02 Mar 2026 04:00:37 +0000
Manifest this update: Mon 02 Mar 2026 04:00:37 +0000
Manifest next update: Tue 03 Mar 2026 04:00:37 +0000
Files and hashes: 1: 7Lr6p7DxKnwsqNm2CLB6OM0-G9k.roa (hash: MVl7TrZfOYT29YZfSTEksTVjTVaYtldybqMvFAfAqSw=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: p5grzvX+3pvo9KP+mh4qSQPDVdANzDsQBTAkKBuRYk8=)
3: nLzx58TFso7KcSU-xZqQFwqs76E.roa (hash: X8XgfJ4xsaevH8Jt00V++9TqwIkHOO/EM9BBJ5XdWxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:86:27:92:f9:dd:86:6e:8e:dd:0b:bc:be:c7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Mar 2 04:00:37 2026 GMT
Not After : Mar 3 04:00:37 2026 GMT
Subject: CN=037e53e08c0d5adec20f6588e9c5fcee3ae48723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:48:7b:79:58:2a:dc:78:d2:67:b8:d6:f0:
b0:db:61:25:fa:63:52:4a:3d:aa:df:88:f5:b8:16:
99:7f:58:5e:5e:3c:3a:69:78:1f:bd:96:c1:e4:75:
fd:bd:52:da:64:54:48:2f:84:08:74:7a:40:7d:45:
63:57:c4:27:49:28:08:08:2a:14:df:94:d0:f1:09:
21:02:8d:05:70:04:41:ac:09:d6:aa:41:bc:49:8d:
07:7b:2a:e0:42:8a:49:76:47:57:48:15:03:ce:23:
75:d0:16:bd:44:b8:29:87:45:2e:c8:89:93:fb:f5:
3e:8a:24:28:a7:f4:ee:25:55:bc:fd:53:d9:15:cb:
51:00:d8:9d:9e:83:38:2a:c2:f7:25:f6:52:8d:e6:
94:a4:00:66:02:57:58:aa:ff:2c:7b:f9:d6:58:63:
50:14:b2:49:f1:e4:4c:89:78:05:e0:1e:f2:00:32:
e7:96:e5:89:e5:a2:69:11:b5:13:5b:f5:fc:65:7a:
57:92:43:1a:06:c4:d0:b1:29:dc:9d:83:79:f9:0a:
78:22:d5:9c:af:3f:31:f2:d3:a8:95:42:ba:d6:1d:
82:ce:df:3c:8c:ef:dd:48:4b:db:1a:82:30:5d:4a:
8a:99:44:d9:8b:53:98:8f:93:eb:eb:10:62:3e:a1:
86:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7E:53:E0:8C:0D:5A:DE:C2:0F:65:88:E9:C5:FC:EE:3A:E4:87:23
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:93:19:c9:da:d6:5a:1a:90:d3:49:8a:e1:48:fa:7d:fd:1f:
b4:64:f6:01:a6:bf:0f:1a:b9:3b:7e:2f:84:73:37:83:c5:c5:
12:d0:da:b9:04:a6:e8:96:80:f0:af:6d:e6:e8:2d:9a:13:a2:
b0:d9:d9:ed:4b:90:9d:6a:68:b3:e0:2c:bf:de:56:eb:a7:58:
2f:80:dc:dd:6f:44:1c:a0:9d:bf:66:76:2b:04:d9:df:14:c6:
01:b4:c6:b6:26:5d:da:dd:1c:51:e8:66:19:01:4a:88:d9:01:
ff:68:ce:46:44:39:10:e8:e4:78:4e:e8:60:11:5e:a0:2f:67:
2d:2a:5b:05:35:ab:8b:67:cf:c7:10:19:f2:8f:61:44:c5:57:
fb:63:d0:f5:32:bf:cb:c8:81:ee:58:a3:85:ee:26:52:ea:b4:
1d:ee:79:b6:51:d7:25:71:d9:57:3a:ae:eb:03:fa:56:c7:92:
43:43:3e:d4:b5:76:8f:cc:1b:49:06:fb:65:da:e4:13:3a:95:
0c:f1:01:5d:9d:ef:b5:f7:9f:8b:35:b3:25:3a:65:ab:dd:75:
ab:be:12:fe:25:e6:66:eb:e7:8e:06:16:5a:6a:02:9c:a5:75:
4c:80:35:be:81:b9:76:3a:9f:2b:73:c0:7b:d0:88:8d:79:78:
e3:46:61:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystIYnkvndhm6O3Qu8vscEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NTljZjM0ZDRjZmM1OTY0MDg2MmQxZTRiNzlkNDhkOWU0
ZDhlN2IwHhcNMjYwMzAyMDQwMDM3WhcNMjYwMzAzMDQwMDM3WjAzMTEwLwYDVQQD
EygwMzdlNTNlMDhjMGQ1YWRlYzIwZjY1ODhlOWM1ZmNlZTNhZTQ4NzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6ZIe3lYKtx40me41vCw22El+mNS
Sj2q34j1uBaZf1heXjw6aXgfvZbB5HX9vVLaZFRIL4QIdHpAfUVjV8QnSSgICCoU
35TQ8QkhAo0FcARBrAnWqkG8SY0HeyrgQopJdkdXSBUDziN10Ba9RLgph0UuyImT
+/U+iiQop/TuJVW8/VPZFctRANidnoM4KsL3JfZSjeaUpABmAldYqv8se/nWWGNQ
FLJJ8eRMiXgF4B7yADLnluWJ5aJpEbUTW/X8ZXpXkkMaBsTQsSncnYN5+Qp4ItWc
rz8x8tOolUK61h2Czt88jO/dSEvbGoIwXUqKmUTZi1OYj5Pr6xBiPqGGIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAN+U+CMDVrewg9liOnF/O465IcjMB8GA1UdIwQY
MBaAFGVZzzTUz8WWQIYtHkt51I2eTY57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAt
MTM0MWRlOGFiZTUxLzEvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAtMTM0MWRlOGFiZTUx
LzEvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZMZydrW
WhqQ00mK4Uj6ff0ftGT2Aaa/Dxq5O34vhHM3g8XFEtDauQSm6JaA8K9t5ugtmhOi
sNnZ7UuQnWpos+Asv95W66dYL4Dc3W9EHKCdv2Z2KwTZ3xTGAbTGtiZd2t0cUehm
GQFKiNkB/2jORkQ5EOjkeE7oYBFeoC9nLSpbBTWri2fPxxAZ8o9hRMVX+2PQ9TK/
y8iB7lijhe4mUuq0He55tlHXJXHZVzqu6wP6VseSQ0M+1LV2j8wbSQb7ZdrkEzqV
DPEBXZ3vtfefizWzJTplq911q74S/iXmZuvnjgYWWmoCnKV1TIA1voG5djqfK3PA
e9CIjXl440ZhLw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:03:08 2026 by rpki-client