Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
File: zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json)
Hash identifier: OFTAabzd4mk9DOvaNeyO2NNIQIOv4fo2Dv8jhe8VZg4=
Subject key identifier: BD:19:EF:41:CB:B7:A2:DC:C2:A5:DC:CF:B7:A7:F4:53:2E:43:C6:94
Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Certificate serial: 019CAFEC55CF4AA4237370D642EE872D27DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
Manifest number: 03FE
Signing time: Mon 02 Mar 2026 19:00:26 +0000
Manifest this update: Mon 02 Mar 2026 19:00:26 +0000
Manifest next update: Tue 03 Mar 2026 19:00:26 +0000
Files and hashes: 1: kNIMwvIm17KNl4j_uiod0k8I7zA.roa (hash: UUpBz48IIuQvNQbtn+EM3409/ewRtq2gofruXX7xipw=)
2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: bAAGC5s8ytXAqqeDYSGvCR7tVeR3LsAS9jybh8urDXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:55:cf:4a:a4:23:73:70:d6:42:ee:87:2d:27:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Validity
Not Before: Mar 2 19:00:26 2026 GMT
Not After : Mar 3 19:00:26 2026 GMT
Subject: CN=bd19ef41cbb7a2dcc2a5dccfb7a7f4532e43c694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:83:50:40:05:cd:42:49:21:21:bc:0d:75:
20:e6:7b:51:f1:02:06:6c:d6:7e:fd:84:1d:5f:f2:
2c:e4:aa:e2:95:88:d3:8f:86:ad:e1:b3:7f:1f:fc:
f2:29:6c:06:be:a4:ff:aa:c6:39:1f:e3:94:89:6b:
c9:24:f1:a7:9d:b7:f5:6a:56:ed:95:f2:c2:cd:84:
b4:73:96:74:35:49:94:f8:6b:05:08:69:44:e3:27:
4b:88:20:f7:99:f8:8d:55:da:02:07:90:b8:2c:40:
fa:27:70:30:2d:12:9f:96:bd:83:44:7b:1e:63:67:
f6:74:1a:40:73:59:19:65:c7:53:07:9d:0c:ac:96:
ac:7c:99:a8:9b:74:b3:96:aa:11:80:a4:6a:3f:74:
9c:2a:a7:2e:70:a5:03:42:d6:6b:bb:c9:26:7f:fa:
04:34:79:96:a8:aa:ae:fb:a2:fc:45:18:00:5e:63:
f7:9e:e3:97:9a:84:66:da:b9:98:05:18:a9:3c:1e:
d0:f5:09:27:90:a7:0a:1b:38:77:d0:25:99:59:26:
fc:c4:ec:7a:cb:bf:60:04:fe:bc:cd:2d:1c:2d:41:
dc:74:d7:3c:34:a8:28:a1:65:de:ae:a8:c2:9d:aa:
d6:c9:1a:e9:87:cd:db:97:6a:84:94:3e:cc:63:db:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:19:EF:41:CB:B7:A2:DC:C2:A5:DC:CF:B7:A7:F4:53:2E:43:C6:94
X509v3 Authority Key Identifier:
keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:30:5f:79:7c:20:c9:5d:3e:d6:66:df:33:50:12:1c:d6:a1:
3a:9e:37:81:3f:6c:a3:fb:b9:94:fc:05:b1:dd:8a:d7:61:63:
93:a7:51:30:2b:9e:4f:c5:f1:4d:14:9c:c1:59:3e:9c:f1:0b:
49:42:8d:c0:32:03:65:f0:cc:90:c6:3a:76:fe:8d:32:67:e3:
1d:4d:ff:b0:0d:bc:4f:b5:92:cc:29:da:59:a4:0d:45:1d:35:
45:f6:b9:f8:e4:6a:9d:59:e2:61:bb:d7:2d:a5:a6:a9:af:eb:
b8:35:3d:9d:19:6f:c1:95:b2:74:6e:6a:c0:fc:5d:82:b4:88:
38:37:67:63:74:46:09:37:b9:b9:26:3e:f0:1d:14:ed:ec:d0:
b3:4d:d5:9f:d4:e0:67:6b:86:1c:ca:0a:5b:62:74:fc:97:61:
a7:be:d0:d0:3c:d6:13:3a:77:ef:04:07:d6:9d:02:c2:70:5a:
29:34:2e:d0:83:63:14:44:59:f5:4b:51:9f:a6:78:a4:e6:f6:
f4:93:7d:1b:7a:6f:d8:52:30:5f:b7:f6:ca:02:ce:da:84:a2:
27:f9:9c:76:fa:9b:13:2b:25:bb:54:2f:7d:2f:3f:29:5a:f9:
17:aa:79:66:47:72:c5:96:17:55:41:d9:7c:fd:63:3f:9d:18:
80:32:75:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyv7FXPSqQjc3DWQu6HLSffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDJkYzRmMzhmOTZiNmQ0Nzc5Njk4OGVjZGRmMGM2ZDBj
NGU4MzIwHhcNMjYwMzAyMTkwMDI2WhcNMjYwMzAzMTkwMDI2WjAzMTEwLwYDVQQD
EyhiZDE5ZWY0MWNiYjdhMmRjYzJhNWRjY2ZiN2E3ZjQ1MzJlNDNjNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthGDUEAFzUJJISG8DXUg5ntR8QIG
bNZ+/YQdX/Is5KrilYjTj4at4bN/H/zyKWwGvqT/qsY5H+OUiWvJJPGnnbf1albt
lfLCzYS0c5Z0NUmU+GsFCGlE4ydLiCD3mfiNVdoCB5C4LED6J3AwLRKflr2DRHse
Y2f2dBpAc1kZZcdTB50MrJasfJmom3SzlqoRgKRqP3ScKqcucKUDQtZru8kmf/oE
NHmWqKqu+6L8RRgAXmP3nuOXmoRm2rmYBRipPB7Q9QknkKcKGzh30CWZWSb8xOx6
y79gBP68zS0cLUHcdNc8NKgooWXerqjCnarWyRrph83bl2qElD7MY9vjFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0Z70HLt6LcwqXcz7en9FMuQ8aUMB8GA1UdIwQY
MBaAFMzS3E84+WttR3lpiOzd8MbQxOgyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YTJlNWYtOWJiOS00M2E0LWI0NTIt
NDYwYzg5YjM5MmIzLzEvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82YTJlNWYtOWJiOS00M2E0LWI0NTItNDYwYzg5YjM5MmIz
LzEvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTBfeXwg
yV0+1mbfM1ASHNahOp43gT9so/u5lPwFsd2K12Fjk6dRMCueT8XxTRScwVk+nPEL
SUKNwDIDZfDMkMY6dv6NMmfjHU3/sA28T7WSzCnaWaQNRR01Rfa5+ORqnVniYbvX
LaWmqa/ruDU9nRlvwZWydG5qwPxdgrSIODdnY3RGCTe5uSY+8B0U7ezQs03Vn9Tg
Z2uGHMoKW2J0/Jdhp77Q0DzWEzp37wQH1p0CwnBaKTQu0INjFERZ9UtRn6Z4pOb2
9JN9G3pv2FIwX7f2ygLO2oSiJ/mcdvqbEyslu1QvfS8/KVr5F6p5ZkdyxZYXVUHZ
fP1jP50YgDJ1+g==
-----END CERTIFICATE-----
Generated at Tue Mar 3 04:17:16 2026 by rpki-client