Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
File: zPFCMN6e_sYQ_90zngxEgLaLrUU.mft (raw, json)
Hash identifier: 7QgpwHFRjAcJPNj/Ro1Hio6ny4M5/eLNNf2o+KfnPPI=
Subject key identifier: F7:91:8A:97:62:28:B7:BE:A7:59:61:4E:CD:50:D0:78:65:8F:9A:DE
Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Certificate serial: 019CACEB9ED293A5DC80E086D3701E68033D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
Manifest number: 0552
Signing time: Mon 02 Mar 2026 05:00:48 +0000
Manifest this update: Mon 02 Mar 2026 05:00:48 +0000
Manifest next update: Tue 03 Mar 2026 05:00:48 +0000
Files and hashes: 1: eRXGxBwJlbiDcH7nJzSjyPxJr4E.roa (hash: +PdqisLU84EBbEvA+O/DTTZgUzTBpNitn0IrUKYkAQo=)
2: zPFCMN6e_sYQ_90zngxEgLaLrUU.crl (hash: UckSS7sZhuwtbc3zxjxOUPLRtNEGrp5DTu34jIeSpKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:9e:d2:93:a5:dc:80:e0:86:d3:70:1e:68:03:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Validity
Not Before: Mar 2 05:00:48 2026 GMT
Not After : Mar 3 05:00:48 2026 GMT
Subject: CN=f7918a976228b7bea759614ecd50d078658f9ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:28:db:ca:f6:e7:fa:58:ea:7a:dc:70:82:
3a:ff:15:05:bc:11:8a:c6:f4:4f:c7:b7:52:83:39:
70:44:16:9d:24:42:01:e9:e1:e3:ab:24:a0:45:d6:
f8:ce:a7:83:e1:8f:a1:50:9d:dc:c4:f7:7f:fe:e2:
03:a3:38:22:4d:33:82:2f:2f:bb:04:f0:4f:ba:44:
8e:7a:e0:de:a2:f2:cc:cb:4f:2e:c3:cc:30:be:23:
29:7d:65:28:45:ad:50:9d:fe:71:06:99:1b:24:58:
c6:c1:6b:bd:7d:0a:6e:9c:bc:f6:c5:23:c9:e0:fa:
5a:58:0e:6d:62:59:c0:5b:88:e4:95:f8:12:f8:03:
4a:fc:2e:74:6b:e7:2a:74:d2:4b:4e:5f:05:f6:fa:
a6:af:b5:51:79:5d:8a:97:89:7e:37:8f:48:77:ed:
04:d5:4b:02:1d:52:a3:46:81:d7:2f:db:7a:4c:b0:
b0:20:9f:14:ee:26:ce:0b:70:29:0d:92:5c:b7:af:
32:fa:fc:21:c8:b4:98:c0:30:75:8d:e5:21:4b:54:
3f:07:0f:b3:88:7d:dc:38:b5:37:fc:52:66:b6:f9:
d1:66:25:b2:fd:35:8a:f0:a9:b3:19:2e:cb:3a:c9:
7c:45:3c:4e:60:b3:2f:f5:e3:42:69:ab:a3:6b:87:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:91:8A:97:62:28:B7:BE:A7:59:61:4E:CD:50:D0:78:65:8F:9A:DE
X509v3 Authority Key Identifier:
keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c2:92:c5:35:32:d7:7b:0c:cf:0f:7f:a8:08:91:3c:70:f2:
06:09:7d:22:69:09:a8:f1:8a:66:66:5e:48:c0:b6:d2:65:63:
88:43:7b:ba:c6:b7:c8:d8:56:af:ab:37:ee:ab:0d:90:b8:a3:
c6:e3:04:e8:00:87:b6:0b:7c:f6:df:f7:3b:80:43:37:09:2f:
84:0f:8f:28:40:10:80:e5:d9:aa:90:73:bd:2c:cd:a2:af:5e:
f8:fb:2e:d2:fd:1d:47:02:6b:c7:a4:2d:e3:10:35:a9:33:de:
55:f8:39:b3:e6:37:56:c3:9e:98:4e:d6:60:2e:ab:25:7b:a9:
32:22:c8:c7:08:ff:c3:4c:82:3c:5f:ea:07:39:50:ce:2d:ea:
f7:f3:2c:5b:18:97:97:1b:90:07:f5:5f:8c:c8:a1:85:9d:1d:
0e:eb:aa:1a:e3:21:ad:9b:9f:54:d5:83:3e:47:75:5d:46:c3:
13:8f:d4:e7:52:f0:43:80:65:15:f8:2e:85:a7:a3:72:e3:ab:
c7:78:fa:85:24:b4:d7:93:ec:46:6f:d1:30:84:ac:10:9a:bb:
ea:c9:6a:19:d0:25:a6:7f:6d:88:fa:3f:82:30:8e:7a:c4:06:
42:ab:0c:30:5d:29:b9:49:53:f1:b4:95:7a:a8:b2:46:36:52:
d6:8b:42:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys657Sk6XcgOCG03AeaAM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjE0MjMwZGU5ZWZlYzYxMGZmZGQzMzllMGM0NDgwYjY4
YmFkNDUwHhcNMjYwMzAyMDUwMDQ4WhcNMjYwMzAzMDUwMDQ4WjAzMTEwLwYDVQQD
EyhmNzkxOGE5NzYyMjhiN2JlYTc1OTYxNGVjZDUwZDA3ODY1OGY5YWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf0o28r25/pY6nrccII6/xUFvBGK
xvRPx7dSgzlwRBadJEIB6eHjqySgRdb4zqeD4Y+hUJ3cxPd//uIDozgiTTOCLy+7
BPBPukSOeuDeovLMy08uw8wwviMpfWUoRa1Qnf5xBpkbJFjGwWu9fQpunLz2xSPJ
4PpaWA5tYlnAW4jklfgS+ANK/C50a+cqdNJLTl8F9vqmr7VReV2Kl4l+N49Id+0E
1UsCHVKjRoHXL9t6TLCwIJ8U7ibOC3ApDZJct68y+vwhyLSYwDB1jeUhS1Q/Bw+z
iH3cOLU3/FJmtvnRZiWy/TWK8KmzGS7LOsl8RTxOYLMv9eNCaauja4c4mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeRipdiKLe+p1lhTs1Q0Hhlj5reMB8GA1UdIwQY
MBaAFMzxQjDenv7GEP/dM54MRIC2i61FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80ODI2MzMtYzlhOS00NjMzLWIxMzgt
YTE3YjgyZTZkNzg2LzEvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80ODI2MzMtYzlhOS00NjMzLWIxMzgtYTE3YjgyZTZkNzg2
LzEvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwcKSxTUy
13sMzw9/qAiRPHDyBgl9ImkJqPGKZmZeSMC20mVjiEN7usa3yNhWr6s37qsNkLij
xuME6ACHtgt89t/3O4BDNwkvhA+PKEAQgOXZqpBzvSzNoq9e+Psu0v0dRwJrx6Qt
4xA1qTPeVfg5s+Y3VsOemE7WYC6rJXupMiLIxwj/w0yCPF/qBzlQzi3q9/MsWxiX
lxuQB/VfjMihhZ0dDuuqGuMhrZufVNWDPkd1XUbDE4/U51LwQ4BlFfguhaejcuOr
x3j6hSS015PsRm/RMISsEJq76slqGdAlpn9tiPo/gjCOesQGQqsMMF0puUlT8bSV
eqiyRjZS1otCZA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:22 2026 by rpki-client