Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: 2WI264c2YwWoCIwFIzJZotT8ti9iKWxG+pEgtegVKfk=
Subject key identifier: 20:AF:68:1D:B1:CA:3D:5E:98:DF:5A:D8:FB:00:76:C8:A4:71:77:99
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 019CAF47C29FC5668F4CA6E77DA92CD18E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 0413
Signing time: Mon 02 Mar 2026 16:00:41 +0000
Manifest this update: Mon 02 Mar 2026 16:00:41 +0000
Manifest next update: Tue 03 Mar 2026 16:00:41 +0000
Files and hashes: 1: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: vR9+Kd55FJp1XrLzfZeJWs/KF6DbdaVzeZu4pwObG14=)
2: axtr1Yfq33sGPOPOJoi8LjJUh7Q.roa (hash: nE9lYWD+wgHpWX2b2+6stth4mhkUfCemKJyIsoT/t6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:47:c2:9f:c5:66:8f:4c:a6:e7:7d:a9:2c:d1:8e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Mar 2 16:00:41 2026 GMT
Not After : Mar 3 16:00:41 2026 GMT
Subject: CN=20af681db1ca3d5e98df5ad8fb0076c8a4717799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:18:a9:5b:6d:df:83:f0:83:88:61:5c:2f:
65:fc:75:ad:2d:46:22:7a:fb:cd:69:08:0a:c4:c9:
db:73:34:96:1f:c7:bb:26:8a:ff:ba:86:1b:86:00:
ea:75:2c:26:dd:64:3d:d7:ef:14:19:76:30:bc:91:
dc:87:2c:34:24:25:65:ad:f0:d6:22:72:b4:2e:aa:
9b:41:aa:61:ab:f6:10:f9:ac:38:95:60:c1:df:6b:
43:7e:79:35:93:5b:c6:29:db:40:35:b1:7d:f5:77:
2d:69:ba:d4:07:67:30:b1:73:15:79:a8:8f:6b:65:
b1:d2:d9:e3:10:57:94:62:49:9c:2d:0d:ca:03:9b:
68:16:00:23:e0:9b:91:84:7b:51:3f:dc:8a:a0:4f:
00:ab:75:0c:71:0d:27:30:41:6a:29:41:2c:6c:fe:
2f:e1:e5:ad:98:61:8b:1b:c9:2e:fa:7f:4c:eb:85:
26:b7:48:47:f5:6b:47:a7:ce:34:2b:8f:48:88:98:
b1:15:5f:03:32:f6:53:77:d9:1e:ba:63:1f:28:a9:
b2:64:0a:5b:b7:25:12:eb:c6:65:5c:48:80:d6:bc:
d1:d7:bb:bd:55:6e:60:67:26:62:d1:14:ce:bc:d3:
fc:60:84:d2:81:99:61:45:a0:de:33:86:9d:ed:0b:
5a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AF:68:1D:B1:CA:3D:5E:98:DF:5A:D8:FB:00:76:C8:A4:71:77:99
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5e:34:7d:3c:59:9f:12:59:4b:88:17:e1:81:f6:b3:9d:bd:
44:6d:ef:de:a3:30:21:9d:77:f2:ca:1b:0d:f2:a1:d9:d6:4a:
7b:1d:5e:5e:39:40:62:87:5e:69:82:90:52:a6:6b:18:0c:5a:
95:46:71:e8:71:06:bc:e9:46:b6:23:f2:f8:17:8c:a3:56:5e:
8e:79:ad:24:2c:e9:42:b3:c7:c5:91:3e:5a:31:45:e5:69:a0:
6e:e0:98:6a:31:8a:f5:a9:3d:a1:8b:43:8e:e7:42:9d:d2:24:
1a:2e:12:bb:69:77:6c:6a:95:66:dd:75:b0:17:6a:ad:28:f8:
d5:95:e4:94:e1:d6:8d:ca:8f:37:f7:e7:a2:44:4c:86:c8:fb:
25:8c:cc:b9:09:11:46:85:77:cd:3f:f1:38:eb:c9:dd:ce:f8:
1e:88:69:d8:8e:df:8f:59:da:57:d5:6b:0a:8e:ac:43:86:00:
4e:5d:41:b5:e0:5e:c5:49:22:2c:f9:b7:97:84:68:2b:8f:20:
dd:86:f0:56:ee:f0:4d:6b:7a:8a:ba:10:e3:f5:a6:0e:a3:fa:
48:91:9e:c2:00:31:c4:71:6b:bf:69:9e:f0:1e:10:ec:67:ee:
46:88:38:28:c1:9f:9e:17:fb:cb:21:32:89:db:90:1a:1b:97:
bf:33:11:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvR8KfxWaPTKbnfaks0Y45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDQxMGU3MDdiNTc5NzFiMTRhNTQzMDlmMDIwYmFjYmI0
ZDIxYjEwHhcNMjYwMzAyMTYwMDQxWhcNMjYwMzAzMTYwMDQxWjAzMTEwLwYDVQQD
EygyMGFmNjgxZGIxY2EzZDVlOThkZjVhZDhmYjAwNzZjOGE0NzE3Nzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJkYqVtt34Pwg4hhXC9l/HWtLUYi
evvNaQgKxMnbczSWH8e7Jor/uoYbhgDqdSwm3WQ91+8UGXYwvJHchyw0JCVlrfDW
InK0LqqbQaphq/YQ+aw4lWDB32tDfnk1k1vGKdtANbF99XctabrUB2cwsXMVeaiP
a2Wx0tnjEFeUYkmcLQ3KA5toFgAj4JuRhHtRP9yKoE8Aq3UMcQ0nMEFqKUEsbP4v
4eWtmGGLG8ku+n9M64Umt0hH9WtHp840K49IiJixFV8DMvZTd9keumMfKKmyZApb
tyUS68ZlXEiA1rzR17u9VW5gZyZi0RTOvNP8YITSgZlhRaDeM4ad7Qta9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCvaB2xyj1emN9a2PsAdsikcXeZMB8GA1UdIwQY
MBaAFGfUEOcHtXlxsUpUMJ8CC6y7TSGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3Mzct
YjA5ZTc2NTUzODUyLzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3MzctYjA5ZTc2NTUzODUy
LzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdl40fTxZ
nxJZS4gX4YH2s529RG3v3qMwIZ138sobDfKh2dZKex1eXjlAYodeaYKQUqZrGAxa
lUZx6HEGvOlGtiPy+BeMo1ZejnmtJCzpQrPHxZE+WjFF5WmgbuCYajGK9ak9oYtD
judCndIkGi4Su2l3bGqVZt11sBdqrSj41ZXklOHWjcqPN/fnokRMhsj7JYzMuQkR
RoV3zT/xOOvJ3c74Hohp2I7fj1naV9VrCo6sQ4YATl1BteBexUkiLPm3l4RoK48g
3YbwVu7wTWt6iroQ4/WmDqP6SJGewgAxxHFrv2me8B4Q7GfuRog4KMGfnhf7yyEy
iduQGhuXvzMRBQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:36 2026 by rpki-client