Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
File: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft (raw, json)
Hash identifier: 2AFvYX3o/oEdWF2VUBzxxfp6b6bppFRYz9TlMiRBWco=
Subject key identifier: 0E:6E:5E:2B:E6:36:19:FD:5F:E7:56:72:7F:15:4D:9A:BC:B2:D2:22
Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Certificate serial: 019CAA5877719410081D2BA855386FB6132B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
Manifest number: 1049
Signing time: Sun 01 Mar 2026 17:00:50 +0000
Manifest this update: Sun 01 Mar 2026 17:00:50 +0000
Manifest next update: Mon 02 Mar 2026 17:00:50 +0000
Files and hashes: 1: Z8LVBFcg0z0aAMYhWrQLHZb_nn8.roa (hash: V2MLHL/okJ/3o6MZQXWdDGTI8xzQQww1eNzhJoWdwk8=)
2: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl (hash: hWth7iO+LUGS3JV0Oh3A36SdgASZb4GggiHYnp8hqVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:77:71:94:10:08:1d:2b:a8:55:38:6f:b6:13:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Validity
Not Before: Mar 1 17:00:50 2026 GMT
Not After : Mar 2 17:00:50 2026 GMT
Subject: CN=0e6e5e2be63619fd5fe756727f154d9abcb2d222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:12:61:82:d4:54:30:f1:8a:62:8e:58:ef:
30:cb:30:e1:00:46:4b:81:77:60:d7:22:0f:c0:d7:
1c:b5:9a:ac:3e:26:d0:72:4a:45:35:24:48:88:74:
20:e5:1c:82:91:12:b0:79:99:57:e6:ed:1e:29:16:
e3:82:8f:e9:af:f3:17:f3:fd:c2:f8:9c:ca:15:04:
0b:aa:f2:7e:71:57:19:c8:92:4b:81:d3:6b:24:c7:
13:8e:e3:0f:28:ba:9d:77:26:e0:70:e6:c8:c4:59:
45:93:8e:33:36:d6:12:64:e8:00:4d:54:42:1f:be:
f7:42:9b:d9:dd:b8:c8:11:30:95:cb:cb:5b:46:c3:
77:a9:fc:98:81:2b:bb:b7:92:8c:14:a5:3e:5d:f2:
f1:eb:c8:fb:89:15:7a:7d:50:f0:98:2e:2f:ec:da:
1d:d3:6c:fd:35:6a:ea:65:e2:ec:6f:c3:f2:92:15:
21:ee:45:79:6c:dc:86:c4:41:a4:ae:63:ba:ba:0a:
7f:77:40:85:3f:0d:a4:d7:9a:5f:69:35:e9:0d:dc:
41:9b:f8:53:b5:7b:8a:20:b1:9f:53:45:00:86:e0:
e5:4e:47:cf:31:50:12:d8:6e:31:fe:48:cc:06:13:
47:85:78:4c:c4:65:63:77:80:b5:c7:83:a1:81:4e:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6E:5E:2B:E6:36:19:FD:5F:E7:56:72:7F:15:4D:9A:BC:B2:D2:22
X509v3 Authority Key Identifier:
keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:dd:6d:5c:16:a7:88:d9:d8:5a:ed:cf:8f:64:aa:3a:ac:bd:
ee:8f:df:82:5f:c4:92:11:26:e5:2f:a0:17:e1:e1:34:8d:47:
1e:29:5b:b8:4b:43:2b:90:e2:77:cc:91:44:49:ac:22:c7:ad:
a6:fe:80:23:f8:96:dd:91:fe:c1:bf:da:c4:0f:b5:4c:b8:d7:
b3:d1:09:94:a6:0c:a7:16:74:ab:21:1e:ef:39:c3:c9:08:a2:
ce:c4:b3:f8:3c:27:b3:bf:0c:c3:54:76:d6:a2:bf:cb:c3:7c:
f7:70:0b:1d:0a:74:b5:2b:46:83:fb:ce:57:a1:64:25:60:52:
1d:b3:49:b2:c1:de:2d:13:04:16:20:d1:2f:1b:01:9e:d5:97:
6f:fb:66:7a:e8:82:c6:9f:9b:ae:9b:96:1d:0f:10:52:1c:9e:
5f:45:eb:b8:73:13:1e:4b:a0:36:02:83:f6:39:e3:7b:8a:70:
76:24:34:c8:50:68:42:b2:35:a4:15:10:95:fa:37:6d:e9:7d:
af:00:29:5f:a3:ee:4e:08:56:d1:71:9b:b7:ba:e0:c5:c6:ea:
79:51:f4:39:34:97:c6:98:a3:17:3d:4f:62:08:e7:38:38:c0:
32:44:5c:26:89:89:fb:b4:55:72:99:7f:8f:98:7a:4f:31:21:
4c:9a:21:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWHdxlBAIHSuoVThvthMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YzVmZDFkYzBjNDU3ZDllYzExM2QyM2JkNDkzNWM3MjNl
OWVjZjQwHhcNMjYwMzAxMTcwMDUwWhcNMjYwMzAyMTcwMDUwWjAzMTEwLwYDVQQD
EygwZTZlNWUyYmU2MzYxOWZkNWZlNzU2NzI3ZjE1NGQ5YWJjYjJkMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUsSYYLUVDDximKOWO8wyzDhAEZL
gXdg1yIPwNcctZqsPibQckpFNSRIiHQg5RyCkRKweZlX5u0eKRbjgo/pr/MX8/3C
+JzKFQQLqvJ+cVcZyJJLgdNrJMcTjuMPKLqddybgcObIxFlFk44zNtYSZOgATVRC
H773QpvZ3bjIETCVy8tbRsN3qfyYgSu7t5KMFKU+XfLx68j7iRV6fVDwmC4v7Nod
02z9NWrqZeLsb8PykhUh7kV5bNyGxEGkrmO6ugp/d0CFPw2k15pfaTXpDdxBm/hT
tXuKILGfU0UAhuDlTkfPMVAS2G4x/kjMBhNHhXhMxGVjd4C1x4OhgU4upQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5uXivmNhn9X+dWcn8VTZq8stIiMB8GA1UdIwQY
MBaAFGTF/R3AxFfZ7BE9I71JNccj6ez0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk1YOUhjREVWOW5zRVQwanZVazF4eVBwN1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hNDY0MGMtZTY5YS00MzM3LWIxYWEt
NGNiMDY3OWFjZTdmLzEvWk1YOUhjREVWOW5zRVQwanZVazF4eVBwN1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9hNDY0MGMtZTY5YS00MzM3LWIxYWEtNGNiMDY3OWFjZTdm
LzEvWk1YOUhjREVWOW5zRVQwanZVazF4eVBwN1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk91tXBan
iNnYWu3Pj2SqOqy97o/fgl/EkhEm5S+gF+HhNI1HHilbuEtDK5Did8yRREmsIset
pv6AI/iW3ZH+wb/axA+1TLjXs9EJlKYMpxZ0qyEe7znDyQiizsSz+Dwns78Mw1R2
1qK/y8N893ALHQp0tStGg/vOV6FkJWBSHbNJssHeLRMEFiDRLxsBntWXb/tmeuiC
xp+brpuWHQ8QUhyeX0XruHMTHkugNgKD9jnje4pwdiQ0yFBoQrI1pBUQlfo3bel9
rwApX6PuTghW0XGbt7rgxcbqeVH0OTSXxpijFz1PYgjnODjAMkRcJomJ+7RVcpl/
j5h6TzEhTJoh1w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:38 2026 by rpki-client