Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier: Bdx6uCUgvVYS+naQC8Wf0OXTaq3Ezm1YblV5i2ihpjs=
Subject key identifier: A0:5B:32:E5:EA:3C:52:3E:DD:09:45:97:9C:BA:32:D4:C2:59:05:54
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial: 019CAD22E7E62680150B3B7F4F990CF72ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number: 0C43
Signing time: Mon 02 Mar 2026 06:01:11 +0000
Manifest this update: Mon 02 Mar 2026 06:01:11 +0000
Manifest next update: Tue 03 Mar 2026 06:01:11 +0000
Files and hashes: 1: 3FX3dROebXazZ9k_8-Lo5o1qkkI.roa (hash: iLVy4lChJ6R/aX19zh/vuVIS2qDiRo8xZfWhdwKLT/E=)
2: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: 5llhA7QSscCvd8qWzymvRF4WQr3pP3OjOHBVK1HouXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:e7:e6:26:80:15:0b:3b:7f:4f:99:0c:f7:2a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Validity
Not Before: Mar 2 06:01:11 2026 GMT
Not After : Mar 3 06:01:11 2026 GMT
Subject: CN=a05b32e5ea3c523edd0945979cba32d4c2590554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:d9:c6:80:94:0f:5b:97:8c:1b:77:97:75:
0e:a0:f2:2d:ca:4a:0f:10:33:dc:db:df:14:c7:d8:
6d:7e:f5:c7:7c:ce:fb:87:b9:05:ab:7d:0c:d4:29:
4d:79:06:d4:75:96:33:0e:6d:8d:26:48:79:c2:ac:
5b:eb:24:c8:41:19:fb:cf:a4:0a:36:a9:e7:17:60:
cd:3e:04:ec:06:b9:c2:ad:02:90:40:1d:23:a7:b3:
0c:95:38:fd:7f:86:9e:69:9c:28:97:b8:71:70:01:
d0:a5:c1:a1:5a:da:b9:e9:17:3b:24:13:45:9d:c7:
77:02:d4:87:ea:58:52:af:b4:f1:5e:80:6c:03:17:
cc:6d:7d:aa:08:82:8c:bc:08:af:60:17:f1:81:53:
27:5a:c6:02:42:e7:ab:ae:e1:0a:07:d2:b5:8a:0e:
16:f7:68:12:98:2a:cf:cd:ea:cd:25:2a:34:bf:47:
b5:cd:14:b4:b9:db:37:f6:13:0a:7b:f0:89:c6:90:
d3:33:61:c0:5d:96:1e:04:54:f3:cc:14:cf:b9:bc:
a8:c1:63:2f:ad:bd:5b:42:45:39:9e:5b:3e:8a:13:
05:f6:a4:34:98:e7:4e:04:6e:bb:7f:61:3d:be:07:
f1:6f:81:e3:ae:f6:5a:dd:e7:00:34:1f:2d:b0:29:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5B:32:E5:EA:3C:52:3E:DD:09:45:97:9C:BA:32:D4:C2:59:05:54
X509v3 Authority Key Identifier:
keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:87:85:f7:a3:5e:42:0d:08:7d:46:01:bb:85:6f:4a:05:d2:
87:af:2a:b7:43:fd:25:32:1d:0c:d6:00:63:58:77:cf:3a:9a:
94:f4:c9:b7:0b:d0:6c:bb:f0:5e:e2:f0:72:ce:74:f5:69:8f:
b3:e9:e7:cc:df:c2:5d:f1:a8:f2:11:23:5d:4a:c1:fa:bb:48:
d6:e2:91:1f:5e:85:23:a5:fb:c0:56:66:91:ef:bf:f9:19:14:
4d:04:eb:8e:5c:9d:b4:bc:a5:e7:a3:72:42:66:8d:ef:67:36:
17:2a:46:48:19:c9:e8:92:e1:d0:3f:b2:5c:2b:69:c3:e0:b1:
59:93:25:2a:a7:f9:88:70:54:f5:6f:57:03:76:1b:95:0c:18:
d7:4a:e4:50:5b:de:db:4d:e6:c5:6b:f4:76:b0:ea:9b:81:b8:
ef:67:e4:7d:52:34:d5:ca:14:a6:54:22:e8:60:59:fb:ba:33:
4b:d8:1c:4e:50:0a:d3:5b:71:6c:00:78:27:42:ba:43:14:76:
94:78:31:1d:80:fc:35:8a:1f:2e:2e:07:41:15:f3:6c:e6:48:
c2:3e:82:ec:50:12:ee:4d:ae:9d:2f:50:d6:da:d5:b9:b1:4e:
d1:64:19:13:7d:10:10:83:f2:c7:e7:55:06:9b:e4:10:f2:a2:
38:82:b1:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIufmJoAVCzt/T5kM9yrKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDkxODgzY2I0YzUwMTIyZmRiMjc1NGI2MjUyZmRkNmZj
OWQ1MWYwHhcNMjYwMzAyMDYwMTExWhcNMjYwMzAzMDYwMTExWjAzMTEwLwYDVQQD
EyhhMDViMzJlNWVhM2M1MjNlZGQwOTQ1OTc5Y2JhMzJkNGMyNTkwNTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM/ZxoCUD1uXjBt3l3UOoPItykoP
EDPc298Ux9htfvXHfM77h7kFq30M1ClNeQbUdZYzDm2NJkh5wqxb6yTIQRn7z6QK
NqnnF2DNPgTsBrnCrQKQQB0jp7MMlTj9f4aeaZwol7hxcAHQpcGhWtq56Rc7JBNF
ncd3AtSH6lhSr7TxXoBsAxfMbX2qCIKMvAivYBfxgVMnWsYCQuerruEKB9K1ig4W
92gSmCrPzerNJSo0v0e1zRS0uds39hMKe/CJxpDTM2HAXZYeBFTzzBTPubyowWMv
rb1bQkU5nls+ihMF9qQ0mOdOBG67f2E9vgfxb4HjrvZa3ecANB8tsClcxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBbMuXqPFI+3QlFl5y6MtTCWQVUMB8GA1UdIwQY
MBaAFGZJGIPLTFASL9snVLYlL91vydUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEt
NzVkNmJlNGU1YzM3LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEtNzVkNmJlNGU1YzM3
LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoeF96Ne
Qg0IfUYBu4VvSgXSh68qt0P9JTIdDNYAY1h3zzqalPTJtwvQbLvwXuLwcs509WmP
s+nnzN/CXfGo8hEjXUrB+rtI1uKRH16FI6X7wFZmke+/+RkUTQTrjlydtLyl56Ny
QmaN72c2FypGSBnJ6JLh0D+yXCtpw+CxWZMlKqf5iHBU9W9XA3YblQwY10rkUFve
203mxWv0drDqm4G472fkfVI01coUplQi6GBZ+7ozS9gcTlAK01txbAB4J0K6QxR2
lHgxHYD8NYofLi4HQRXzbOZIwj6C7FAS7k2unS9Q1trVubFO0WQZE30QEIPyx+dV
BpvkEPKiOIKxqg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:03 2026 by rpki-client