Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: A/YUsr+kyoptX55AbTz133dueQxQtapVrgrXZvPicKw=
Subject key identifier: FA:0E:B8:32:0A:26:EA:B1:85:C1:0D:50:FC:1F:A2:C8:BD:57:3A:76
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 019CAB6B8F96DF30AA6EA603063AAA63B82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 22:01:18 +0000
Manifest this update: Sun 01 Mar 2026 22:01:18 +0000
Manifest next update: Mon 02 Mar 2026 22:01:18 +0000
Files and hashes: 1: 75fBNZWLkaIgBslw6k4wj9TuWLU.roa (hash: 4wF5n3UNqfrrLDlgzkwFZTHYRGLcTzRGNjrqJ23IGDg=)
2: DtP5TcC78Ta0vQQBaiLRrng7HAY.roa (hash: UWu+orQumNbAH2JdcDqNioK0n/VPs+KPuoKy/0wsRxw=)
3: HMlykTFhJH5cvI6c0OarlpUJDqs.roa (hash: g8eLru3YcyEqpK1Le+3Ioeg74n09HD2Zgis3A6Pccf4=)
4: Lvzo7yRE3WpT5EYDLhSSeLUPlTk.roa (hash: D+3VEtIjeFFyH74NbH/nvflt6PdAMwmPfUa/7eerROU=)
5: OTVDRcN1TmMcNu7534YmVHjTGr8.roa (hash: Jm46+7IZBN8HTblZILZ7pnz9O68HO8MAoZHQtdvbMDo=)
6: VS6MLVQpkdaiAIxY7kJpoBr6xr4.roa (hash: VfzUbYxIaz3gdc5tYwHn/fzQQCfDwQ+LkT1IeDAOjfw=)
7: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: RjSLZzbNG0rc/bEt/K913TiqdZLxOnXu+VtA2xnEGpo=)
8: Zyrvvt-0YaM1oJVY3gEtrt1vmFI.roa (hash: bZNszqhnT3nG89SByGHQ2OOopVxYZGpnqUauM45GA3A=)
9: kGyEsCn19zoIZ3OpXCDKCkPYY1Q.roa (hash: X+y2Jd7yFczruWkZJreObIi24u/UfR4tlr84LgLHENM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:8f:96:df:30:aa:6e:a6:03:06:3a:aa:63:b8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Mar 1 22:01:18 2026 GMT
Not After : Mar 2 22:01:18 2026 GMT
Subject: CN=fa0eb8320a26eab185c10d50fc1fa2c8bd573a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:18:1f:6a:5a:62:19:87:ed:6b:f7:f2:84:
28:dd:1d:24:6d:64:1a:8f:03:66:45:d3:57:e6:cb:
95:fb:ca:50:42:d2:9c:36:67:67:67:64:9f:4c:89:
4d:13:45:03:bf:f9:e3:0b:3b:7b:0d:3b:b7:8f:aa:
ef:80:0b:7d:61:78:0b:24:0d:f3:2a:f3:4a:1d:0f:
95:46:e2:85:ec:33:fc:3e:7c:07:52:73:f3:9f:35:
57:97:28:94:54:db:98:ff:52:01:d4:bc:79:dd:26:
28:9a:7b:a0:1c:27:43:c0:df:cb:73:a3:64:0f:44:
53:72:2f:0c:1d:c9:d3:e8:3c:9c:c5:4f:53:40:2d:
6e:cb:48:1f:ed:8c:f0:19:4a:fd:8d:e8:b5:10:7c:
bf:66:1d:6e:ea:19:56:58:b1:4c:88:29:0e:e4:89:
ad:b6:04:ba:7d:02:5c:23:bc:19:f6:11:9b:5c:6f:
49:99:c4:f6:d1:3e:ef:2f:11:a5:ea:c2:c8:17:18:
12:0f:a5:c3:d6:1b:78:d1:6f:ca:21:3a:58:eb:f2:
85:72:de:16:3a:b2:78:d6:0d:f3:21:c5:df:75:d2:
d9:8e:ad:61:41:29:d8:fd:35:3d:ec:d1:79:85:ab:
0e:fd:1d:50:3d:30:30:52:6d:ab:52:73:b9:b6:54:
1b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0E:B8:32:0A:26:EA:B1:85:C1:0D:50:FC:1F:A2:C8:BD:57:3A:76
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:05:e0:c3:df:5c:56:28:3f:bf:e2:c6:02:a8:6b:20:46:5d:
e2:60:15:eb:bd:e8:f2:a4:c7:f5:a1:82:9a:1e:17:81:23:f8:
54:65:13:7c:82:68:77:ef:2c:ab:4b:15:01:d1:8a:da:2e:2f:
a7:df:27:85:92:0e:39:32:a1:f8:68:0b:fa:91:38:ba:92:6c:
bf:9a:05:f5:11:bf:ad:2d:10:e9:5e:21:3d:76:38:c1:a8:b5:
35:57:5a:18:48:bb:75:e1:df:68:fb:7b:a1:b5:33:7f:dc:a5:
e2:9e:c7:9e:e4:3f:70:68:2b:b0:2f:27:b7:a8:42:60:89:f2:
a6:b4:76:d4:19:3d:c1:7d:be:be:94:0c:59:67:cf:b8:19:e6:
c4:a1:41:57:53:5b:9a:40:05:16:8a:b1:e5:f8:7b:a7:81:7e:
c6:00:be:6e:9d:ea:cc:88:aa:ce:30:86:72:96:f0:ce:bb:16:
ea:6b:82:67:78:42:81:c0:e8:cf:cc:88:69:4d:fb:b6:4d:9b:
af:86:5e:77:5e:81:d5:bd:9e:d7:d3:fa:7d:33:01:7c:76:b9:
fd:f8:4c:96:b1:65:75:00:da:98:4d:30:c7:f3:73:b8:f9:be:
43:f9:ed:df:48:93:ff:0b:ae:28:ad:83:72:cf:2b:f4:3a:12:
15:72:1c:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra4+W3zCqbqYDBjqqY7gvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGUxZDlkY2RiMjVjMWU1MzJjNWM5YjY5ZGZhNzU3ZTMw
NjIxMGUwHhcNMjYwMzAxMjIwMTE4WhcNMjYwMzAyMjIwMTE4WjAzMTEwLwYDVQQD
EyhmYTBlYjgzMjBhMjZlYWIxODVjMTBkNTBmYzFmYTJjOGJkNTczYTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1sYH2paYhmH7Wv38oQo3R0kbWQa
jwNmRdNX5suV+8pQQtKcNmdnZ2SfTIlNE0UDv/njCzt7DTu3j6rvgAt9YXgLJA3z
KvNKHQ+VRuKF7DP8PnwHUnPznzVXlyiUVNuY/1IB1Lx53SYomnugHCdDwN/Lc6Nk
D0RTci8MHcnT6DycxU9TQC1uy0gf7YzwGUr9jei1EHy/Zh1u6hlWWLFMiCkO5Imt
tgS6fQJcI7wZ9hGbXG9JmcT20T7vLxGl6sLIFxgSD6XD1ht40W/KITpY6/KFct4W
OrJ41g3zIcXfddLZjq1hQSnY/TU97NF5hasO/R1QPTAwUm2rUnO5tlQbiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoOuDIKJuqxhcENUPwfosi9Vzp2MB8GA1UdIwQY
MBaAFGbeHZ3NslweUyxcm2nfp1fjBiEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYt
NDA0Nzk4NzA5NzZlLzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC82MGZjZmUtN2IyYy00NjcyLWJjMmYtNDA0Nzk4NzA5NzZl
LzEvWnQ0ZG5jMnlYQjVUTEZ5YmFkLW5WLU1HSVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwXgw99c
Vig/v+LGAqhrIEZd4mAV673o8qTH9aGCmh4XgSP4VGUTfIJod+8sq0sVAdGK2i4v
p98nhZIOOTKh+GgL+pE4upJsv5oF9RG/rS0Q6V4hPXY4wai1NVdaGEi7deHfaPt7
obUzf9yl4p7HnuQ/cGgrsC8nt6hCYInyprR21Bk9wX2+vpQMWWfPuBnmxKFBV1Nb
mkAFFoqx5fh7p4F+xgC+bp3qzIiqzjCGcpbwzrsW6muCZ3hCgcDoz8yIaU37tk2b
r4Zed16B1b2e19P6fTMBfHa5/fhMlrFldQDamE0wx/NzuPm+Q/nt30iT/wuuKK2D
cs8r9DoSFXIcXQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:10 2026 by rpki-client