Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
File: ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft (raw, json)
Hash identifier: 5ZtWoXjjsdguOb4HkS6+avbvsrBGBltAHZvRUnCJLAw=
Subject key identifier: 97:B9:3F:9E:58:18:B0:17:82:99:0D:9A:45:E6:4F:43:5B:1F:BB:5C
Authority key identifier: 64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
Certificate issuer: /CN=64d4054d1b62158b8335a2019f0548b3872a3443
Certificate serial: 019CAAC7104C5192123B60C45586BC8718E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
Manifest number: 64
Signing time: Sun 01 Mar 2026 19:01:38 +0000
Manifest this update: Sun 01 Mar 2026 19:01:38 +0000
Manifest next update: Mon 02 Mar 2026 19:01:38 +0000
Files and hashes: 1: 9dBOo0WfbmhAedqmv9blBB7wIOA.asa (hash: 9SNFHtDDXsfIN9yYQ8+BOP7ExSFS+qpoLs8vGcM3PoQ=)
2: ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl (hash: UEkTFrN9VXQb75ZtLJsM2w83ubM5codGUy/GmjvnuOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:10:4c:51:92:12:3b:60:c4:55:86:bc:87:18:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4054d1b62158b8335a2019f0548b3872a3443
Validity
Not Before: Mar 1 19:01:38 2026 GMT
Not After : Mar 2 19:01:38 2026 GMT
Subject: CN=97b93f9e5818b01782990d9a45e64f435b1fbb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:1b:ad:7d:ad:2f:bb:05:5b:6e:fe:37:0f:
9d:56:7a:97:ba:69:02:af:c6:7f:49:4f:7b:05:15:
1e:e2:c4:4d:81:13:44:08:44:ee:df:45:c4:4d:b6:
26:16:12:8d:34:48:33:0b:9b:96:fe:39:a4:76:39:
4a:3d:20:b0:bf:c6:dd:c5:99:7a:de:88:ef:7d:c5:
fb:7e:d2:2e:97:ed:9b:00:ef:21:03:1c:d5:46:89:
50:f9:c2:fa:93:5f:ec:84:ff:ca:62:8e:63:b5:6c:
cb:76:dd:5a:ce:15:c1:6f:6f:a6:48:dd:0e:71:36:
a9:64:00:5e:ac:45:1c:dc:5b:cc:82:1d:c9:dc:96:
4d:f8:d1:de:8b:20:82:24:67:f5:d2:38:7c:5a:d8:
7f:1f:d5:d6:12:cd:dc:11:0f:93:2b:30:b8:96:75:
48:f1:d8:fb:98:b9:5e:ed:02:a1:ee:78:15:13:e4:
f6:ad:09:79:30:5a:27:5e:56:53:70:d0:fd:b1:9b:
02:11:97:59:95:e8:69:f6:c9:23:8b:ec:41:8e:6a:
85:a0:ce:c8:9b:9f:5b:12:b1:b2:e3:10:24:0f:d0:
71:9e:05:08:e4:d6:20:a3:16:58:ae:81:f9:3b:ec:
0b:9c:32:d3:9c:67:cb:3f:de:6c:cf:5c:b2:5b:1f:
ea:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B9:3F:9E:58:18:B0:17:82:99:0D:9A:45:E6:4F:43:5B:1F:BB:5C
X509v3 Authority Key Identifier:
keyid:64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:15:2f:09:be:7f:c2:42:83:a8:d7:63:03:e8:b3:8f:92:3c:
12:df:33:83:db:83:17:f0:a3:c5:e7:5a:04:c6:93:d4:e4:93:
79:15:81:dc:ac:83:b1:83:4d:49:27:f2:60:28:5a:66:f2:d0:
c6:71:95:d6:c4:2c:f3:1c:2d:bf:e7:8b:40:d0:23:48:e9:8c:
1d:0c:da:43:d2:29:aa:32:4c:60:4d:2a:50:09:19:19:eb:0c:
84:f3:ac:f5:4a:5b:61:c6:d4:3d:05:9a:f6:f8:a7:8c:db:4b:
dc:61:90:31:bf:b9:67:07:2a:5b:50:24:1b:5a:ea:97:1e:46:
5d:13:ce:ac:c7:95:f0:32:98:c7:2c:5d:44:5f:2f:a6:40:3f:
6c:4f:72:05:88:cf:e1:fb:00:c1:bf:12:4c:ab:2d:a0:9f:07:
81:e2:eb:74:4c:1c:35:a1:09:2c:e9:c7:f2:e5:f7:13:db:26:
fb:37:2f:66:df:73:de:89:74:60:ee:6c:2c:61:08:b8:14:26:
d9:c2:56:55:0a:d9:77:b3:51:da:a8:09:08:21:44:89:32:e0:
5c:0e:87:4b:eb:13:9e:ac:93:70:4b:82:32:eb:d4:f7:da:43:
74:45:d2:92:c0:02:65:aa:52:ed:03:de:3e:1c:45:eb:5b:03:
cc:a1:5d:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxxBMUZISO2DEVYa8hxjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDQwNTRkMWI2MjE1OGI4MzM1YTIwMTlmMDU0OGIzODcy
YTM0NDMwHhcNMjYwMzAxMTkwMTM4WhcNMjYwMzAyMTkwMTM4WjAzMTEwLwYDVQQD
Eyg5N2I5M2Y5ZTU4MThiMDE3ODI5OTBkOWE0NWU2NGY0MzViMWZiYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq0brX2tL7sFW27+Nw+dVnqXumkC
r8Z/SU97BRUe4sRNgRNECETu30XETbYmFhKNNEgzC5uW/jmkdjlKPSCwv8bdxZl6
3ojvfcX7ftIul+2bAO8hAxzVRolQ+cL6k1/shP/KYo5jtWzLdt1azhXBb2+mSN0O
cTapZABerEUc3FvMgh3J3JZN+NHeiyCCJGf10jh8Wth/H9XWEs3cEQ+TKzC4lnVI
8dj7mLle7QKh7ngVE+T2rQl5MFonXlZTcND9sZsCEZdZlehp9skji+xBjmqFoM7I
m59bErGy4xAkD9BxngUI5NYgoxZYroH5O+wLnDLTnGfLP95sz1yyWx/qfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJe5P55YGLAXgpkNmkXmT0NbH7tcMB8GA1UdIwQY
MBaAFGTUBU0bYhWLgzWiAZ8FSLOHKjRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMDBkNGUtNzUyOC00ZjVlLWIzNjUt
NmI0ODUyNTcwYjhhLzEvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMDBkNGUtNzUyOC00ZjVlLWIzNjUtNmI0ODUyNTcwYjhh
LzEvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvBUvCb5/
wkKDqNdjA+izj5I8Et8zg9uDF/CjxedaBMaT1OSTeRWB3KyDsYNNSSfyYChaZvLQ
xnGV1sQs8xwtv+eLQNAjSOmMHQzaQ9IpqjJMYE0qUAkZGesMhPOs9UpbYcbUPQWa
9vinjNtL3GGQMb+5ZwcqW1AkG1rqlx5GXRPOrMeV8DKYxyxdRF8vpkA/bE9yBYjP
4fsAwb8STKstoJ8HgeLrdEwcNaEJLOnH8uX3E9sm+zcvZt9z3ol0YO5sLGEIuBQm
2cJWVQrZd7NR2qgJCCFEiTLgXA6HS+sTnqyTcEuCMuvU99pDdEXSksACZapS7QPe
PhxF61sDzKFddA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:00 2026 by rpki-client