Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json)
Hash identifier: X+uT7jwMydefvQDbzTgScPclP1ZFKA8f1BSYGv8+V5Y=
Subject key identifier: CC:D3:91:0D:7D:5A:19:3A:0A:88:4C:35:1E:A8:95:DE:77:6A:02:36
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 019CAA58B95BFFF85885A81FE5FA61AFE39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
Manifest number: 0F44
Signing time: Sun 01 Mar 2026 17:01:07 +0000
Manifest this update: Sun 01 Mar 2026 17:01:07 +0000
Manifest next update: Mon 02 Mar 2026 17:01:07 +0000
Files and hashes: 1: QPm5_PDWMrxWuR6yCX-RrxN3H3c.roa (hash: F4rOeKQIIr+v8+zO3vdMMRp/iT0j1wFRvBSXZLKj3lw=)
2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: FQqyQFkBlIqgWa0EA1B+ewXqG+FnTa0Sl9miJ1eeKxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b9:5b:ff:f8:58:85:a8:1f:e5:fa:61:af:e3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: Mar 1 17:01:07 2026 GMT
Not After : Mar 2 17:01:07 2026 GMT
Subject: CN=ccd3910d7d5a193a0a884c351ea895de776a0236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3d:91:69:08:bb:1e:a0:03:ab:c7:4e:96:7d:
6a:70:c3:3e:82:0b:a3:d1:7e:a2:7f:54:7c:89:a0:
8d:4d:29:98:0d:a7:e8:82:e9:ca:28:d6:9f:02:1e:
15:99:35:02:39:9a:62:53:0c:a0:7d:fa:6b:a6:86:
ca:31:24:58:36:c5:1d:a3:1f:a9:d9:ca:9e:d8:de:
c0:ec:72:34:bf:9a:d7:ae:68:96:27:dc:e1:04:49:
42:01:47:e6:ef:89:51:c4:64:f8:f8:6d:83:d3:57:
de:9f:b5:7f:d2:2f:1d:1c:aa:cf:e7:71:35:b4:85:
40:15:e5:b1:a5:4f:0a:8a:54:d7:c1:8c:92:2b:da:
b5:1c:a0:5c:88:a5:dc:ab:1c:8c:dd:f2:9f:5f:42:
a3:87:27:70:18:a1:40:6c:4a:1d:10:41:61:91:1b:
9d:66:ea:15:e6:b1:70:f7:87:50:a6:17:c1:5d:09:
64:c8:83:d1:6d:18:0c:43:a2:0a:06:9d:83:00:86:
37:1e:e0:29:72:a0:7c:ce:d9:5e:5e:e3:4f:f6:48:
f5:61:aa:51:49:9b:e7:15:dd:66:be:6e:c7:5c:7d:
07:7b:21:e4:19:1b:e0:39:c4:43:c1:1b:f9:25:de:
9f:e2:41:b3:b1:0f:72:5b:5d:93:96:af:e5:f2:7d:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D3:91:0D:7D:5A:19:3A:0A:88:4C:35:1E:A8:95:DE:77:6A:02:36
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:18:4d:bc:4c:3a:e3:5b:6f:0e:89:8c:7b:62:0d:b0:96:a6:
ec:aa:4e:6a:ff:52:e8:16:5f:00:3b:d3:49:3d:61:6e:77:4a:
21:ca:07:b9:23:83:b8:d5:28:5b:cd:7e:b5:f5:94:56:47:cc:
16:49:8f:5f:15:9d:ae:1f:24:b0:05:30:5c:28:16:50:cd:4c:
3e:c6:ab:ec:9b:37:59:20:3d:ee:a8:c2:5c:72:dc:85:a1:bc:
9b:58:d5:cd:bf:9f:44:33:81:a0:ba:b4:84:96:21:c8:8c:50:
77:6f:a5:c3:d6:cb:ec:68:f2:93:cf:1e:14:74:02:d0:26:4a:
c0:20:1a:c4:c3:57:22:be:96:9d:0b:1e:d8:c0:e0:65:03:8e:
50:b2:0e:ec:07:6e:71:90:5b:9c:d2:fe:a8:3a:f3:92:97:9b:
c9:64:0b:19:26:eb:d7:d0:35:44:e4:4f:35:ed:0c:af:9e:a6:
a7:7f:2f:b1:ac:ca:c5:0e:dc:45:3c:fe:a4:22:ed:c4:b9:8f:
41:fc:b8:bb:ff:45:66:db:e3:fd:bc:f0:e3:43:02:95:85:ce:
a3:3f:55:ac:a3:0f:cc:50:ea:03:66:44:bf:8b:84:ec:1c:56:
1e:91:c3:0b:dc:46:54:41:48:62:3b:a9:36:82:db:c7:05:25:
25:7a:70:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWLlb//hYhagf5fphr+ObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MzE3ODViNjIzNDkyZWQwYzk5ZWQ3OWM3ZGI3NDA0YWQ0
Y2IxNzEwHhcNMjYwMzAxMTcwMTA3WhcNMjYwMzAyMTcwMTA3WjAzMTEwLwYDVQQD
EyhjY2QzOTEwZDdkNWExOTNhMGE4ODRjMzUxZWE4OTVkZTc3NmEwMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5z2RaQi7HqADq8dOln1qcMM+gguj
0X6if1R8iaCNTSmYDafogunKKNafAh4VmTUCOZpiUwygffprpobKMSRYNsUdox+p
2cqe2N7A7HI0v5rXrmiWJ9zhBElCAUfm74lRxGT4+G2D01fen7V/0i8dHKrP53E1
tIVAFeWxpU8KilTXwYySK9q1HKBciKXcqxyM3fKfX0KjhydwGKFAbEodEEFhkRud
ZuoV5rFw94dQphfBXQlkyIPRbRgMQ6IKBp2DAIY3HuApcqB8ztleXuNP9kj1YapR
SZvnFd1mvm7HXH0HeyHkGRvgOcRDwRv5Jd6f4kGzsQ9yW12Tlq/l8n22nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzTkQ19Whk6CohMNR6old53agI2MB8GA1UdIwQY
MBaAFGUxeFtiNJLtDJntecfbdAStTLFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMt
MTI2Y2UwODE1MjlhLzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMtMTI2Y2UwODE1Mjlh
LzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhhNvEw6
41tvDomMe2INsJam7KpOav9S6BZfADvTST1hbndKIcoHuSODuNUoW81+tfWUVkfM
FkmPXxWdrh8ksAUwXCgWUM1MPsar7Js3WSA97qjCXHLchaG8m1jVzb+fRDOBoLq0
hJYhyIxQd2+lw9bL7Gjyk88eFHQC0CZKwCAaxMNXIr6WnQse2MDgZQOOULIO7Adu
cZBbnNL+qDrzkpebyWQLGSbr19A1RORPNe0Mr56mp38vsazKxQ7cRTz+pCLtxLmP
Qfy4u/9FZtvj/bzw40MClYXOoz9VrKMPzFDqA2ZEv4uE7BxWHpHDC9xGVEFIYjup
NoLbxwUlJXpwEw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:44 2026 by rpki-client