Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier: mVRcvkynjVl0qDaeydA52193loNNyYhAgTUi6I7pU44=
Subject key identifier: 95:32:5D:A0:DA:62:8C:7F:BC:1D:D2:6F:BA:C7:FC:09:D2:67:0E:26
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 019CAA5896D923A85448E4DC027A765C258C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 17:00:58 +0000
Manifest this update: Sun 01 Mar 2026 17:00:58 +0000
Manifest next update: Mon 02 Mar 2026 17:00:58 +0000
Files and hashes: 1: TskBRorPbivXUk_iUbLUxu34o40.roa (hash: SSq2isSE8Y0yEi7EArCYQ3vmU4quGSz5WkWK232VWsU=)
2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: javTS63ptwsvjYn1ZlECJf9cNQBBeMSyrCaiOF/ctlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:96:d9:23:a8:54:48:e4:dc:02:7a:76:5c:25:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: Mar 1 17:00:58 2026 GMT
Not After : Mar 2 17:00:58 2026 GMT
Subject: CN=95325da0da628c7fbc1dd26fbac7fc09d2670e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:a1:46:0a:77:db:3e:38:54:1e:16:c9:b2:
d6:29:ee:1f:3c:e0:c9:21:1d:81:3c:c3:a9:cd:08:
c7:19:cb:79:bb:77:c8:61:50:8f:7d:26:3d:a3:bf:
b2:d8:1b:5e:4f:e5:49:56:71:6a:da:3d:76:b1:c2:
1d:0b:af:ad:d0:57:b5:f7:14:2f:72:91:25:e5:86:
f9:97:9f:66:d0:12:f8:75:60:ec:95:f9:f3:eb:8c:
9a:23:b8:e1:8f:0a:a0:2f:33:e9:8d:af:28:82:26:
16:2e:25:79:fe:4f:ee:d2:1d:ca:be:d1:87:d1:d1:
98:0f:0a:09:94:54:12:df:b9:78:96:83:22:57:5e:
0d:06:d2:74:ff:c9:22:30:ff:f4:8c:63:92:e9:dc:
24:a9:52:76:f8:62:3a:17:f7:85:9b:03:4c:b5:57:
6a:3e:3b:48:28:06:7c:81:68:b3:34:2b:3a:4b:f8:
a2:23:f9:ba:24:96:b7:83:de:ef:80:a2:66:6b:78:
ed:a7:6f:bd:e7:36:98:b5:5e:b4:64:12:d8:22:be:
92:c7:64:b4:3a:2b:89:b7:61:4e:83:e7:92:09:34:
e6:43:aa:f9:42:6d:c2:5d:eb:aa:64:e8:a2:aa:06:
77:41:4f:cf:cb:68:e9:09:6b:07:5c:6d:5c:e4:a6:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:32:5D:A0:DA:62:8C:7F:BC:1D:D2:6F:BA:C7:FC:09:D2:67:0E:26
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8d:3a:4b:17:b4:64:61:5d:98:5b:7e:d9:e0:a5:88:6a:37:
25:1a:83:35:3d:31:cf:0c:3e:ce:9b:e2:37:e5:48:ef:85:2a:
6a:20:31:70:70:5f:81:48:40:ba:30:2c:76:82:ab:fd:99:eb:
3e:9d:09:84:c0:c3:5a:df:90:50:00:74:66:4b:43:15:60:7f:
a0:b9:62:f8:df:91:ed:c9:60:5c:d1:05:c5:c0:0c:6e:fc:98:
47:35:95:6f:08:17:84:df:b0:d1:02:e6:05:1c:64:ea:af:f9:
b2:5d:bb:e2:10:70:20:f4:35:99:76:a9:12:63:10:e0:a9:25:
78:54:95:ad:65:0f:3a:f0:20:5e:e1:15:ec:f0:49:3c:a1:bc:
2d:a3:6c:7f:6a:23:96:1f:48:d1:83:a0:67:32:cc:6a:0c:0d:
dc:b0:4f:33:e9:ab:dc:08:7b:08:01:94:c5:14:df:19:b8:0b:
1c:57:76:88:be:ab:eb:ee:25:88:68:2f:6d:64:62:3f:58:78:
47:e7:40:82:ec:69:8e:2a:e4:e4:fa:21:f3:86:86:8c:e4:6a:
80:38:36:3b:9f:68:37:09:28:60:3c:b5:30:33:4f:b5:39:34:
b0:9d:ec:0e:b4:12:40:51:ea:31:81:40:b0:94:d2:6e:1b:f1:
31:2f:4a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWJbZI6hUSOTcAnp2XCWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OTZmYjg5YThhMjNjYmU0ZjJhZGIxNjVjODlmMjZkZThh
Yjc4NzYwHhcNMjYwMzAxMTcwMDU4WhcNMjYwMzAyMTcwMDU4WjAzMTEwLwYDVQQD
Eyg5NTMyNWRhMGRhNjI4YzdmYmMxZGQyNmZiYWM3ZmMwOWQyNjcwZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQOhRgp32z44VB4WybLWKe4fPODJ
IR2BPMOpzQjHGct5u3fIYVCPfSY9o7+y2BteT+VJVnFq2j12scIdC6+t0Fe19xQv
cpEl5Yb5l59m0BL4dWDslfnz64yaI7jhjwqgLzPpja8ogiYWLiV5/k/u0h3KvtGH
0dGYDwoJlFQS37l4loMiV14NBtJ0/8kiMP/0jGOS6dwkqVJ2+GI6F/eFmwNMtVdq
PjtIKAZ8gWizNCs6S/iiI/m6JJa3g97vgKJma3jtp2+95zaYtV60ZBLYIr6Sx2S0
OiuJt2FOg+eSCTTmQ6r5Qm3CXeuqZOiiqgZ3QU/Py2jpCWsHXG1c5KY/twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUyXaDaYox/vB3Sb7rH/AnSZw4mMB8GA1UdIwQY
MBaAFGWW+4moojy+TyrbFlyJ8m3oq3h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUt
MjAyZTE5YzA4OGIxLzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUtMjAyZTE5YzA4OGIx
LzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXY06Sxe0
ZGFdmFt+2eCliGo3JRqDNT0xzww+zpviN+VI74UqaiAxcHBfgUhAujAsdoKr/Znr
Pp0JhMDDWt+QUAB0ZktDFWB/oLli+N+R7clgXNEFxcAMbvyYRzWVbwgXhN+w0QLm
BRxk6q/5sl274hBwIPQ1mXapEmMQ4KkleFSVrWUPOvAgXuEV7PBJPKG8LaNsf2oj
lh9I0YOgZzLMagwN3LBPM+mr3Ah7CAGUxRTfGbgLHFd2iL6r6+4liGgvbWRiP1h4
R+dAguxpjirk5Poh84aGjORqgDg2O59oNwkoYDy1MDNPtTk0sJ3sDrQSQFHqMYFA
sJTSbhvxMS9K5A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:16 2026 by rpki-client