Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
File: zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft (raw, json)
Hash identifier: MJgF0ONRS80FkNZ7li/+LWhe9Oc/gpABBhlIWoJUxDA=
Subject key identifier: 41:3A:FA:87:F3:BA:37:55:9B:05:0C:44:1B:3C:44:86:52:2C:E5:D7
Authority key identifier: CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
Certificate issuer: /CN=cef501d2d052185d4f6569218c28bf35859000fc
Certificate serial: 019CADC82E3F7995521E6B39D49514EA1167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
Manifest number: F9
Signing time: Mon 02 Mar 2026 09:01:43 +0000
Manifest this update: Mon 02 Mar 2026 09:01:43 +0000
Manifest next update: Tue 03 Mar 2026 09:01:43 +0000
Files and hashes: 1: VtiYaN97FHtpr9nyOV9FFG85g5o.roa (hash: YRi8yVEk1+9sLs2A+db3vBfa8pzorD5js8IjbX492Nk=)
2: gIvmrtP4qhP-p_HNvQknynsugUc.roa (hash: T7F6BSJaNt+yN8P1agGWT43ZlvcgWoTw7wuq3mofmEI=)
3: zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl (hash: LjGm7QM1eWRkBZ4XcThBJKWcMJ0J36Qp86YFK+0imec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:2e:3f:79:95:52:1e:6b:39:d4:95:14:ea:11:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef501d2d052185d4f6569218c28bf35859000fc
Validity
Not Before: Mar 2 09:01:43 2026 GMT
Not After : Mar 3 09:01:43 2026 GMT
Subject: CN=413afa87f3ba37559b050c441b3c4486522ce5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:79:cd:a2:2a:b4:33:4e:a3:8a:c9:1d:7e:81:
82:d1:e7:bd:20:5f:e9:b5:07:e1:18:ee:5e:e1:6c:
82:f7:2e:21:71:dd:b8:4f:9a:b9:f5:db:25:f1:78:
fe:59:25:ed:1d:21:d4:46:a8:21:5b:7f:3a:ac:0d:
a7:10:3f:1c:5f:62:6d:b6:00:35:95:90:11:bb:f0:
45:20:60:c3:99:bb:03:61:84:b5:51:ab:c7:e8:f2:
c5:ee:f1:e1:e4:fe:25:9a:22:54:82:22:78:4a:50:
de:3b:8d:93:6c:65:9d:3c:f3:f2:79:8a:9b:bb:37:
0c:06:63:d4:6e:04:a6:24:b5:9b:6f:52:6d:3d:8b:
71:20:0e:ef:de:89:3e:33:e4:db:a2:18:ab:5b:c0:
0e:4b:b2:1e:3f:5f:77:51:20:c4:18:e8:23:58:bd:
8f:fc:ef:61:d8:55:61:31:06:6b:12:30:de:b7:af:
b8:2c:48:96:7d:9d:ba:ec:2b:21:37:89:bc:0c:e6:
72:f7:ce:9e:00:f3:93:1b:aa:a0:5e:c0:b6:91:bd:
f0:49:9b:83:a5:99:75:33:9a:91:da:ce:a7:9c:ba:
a0:35:de:27:59:76:e8:ec:81:e8:32:b9:66:1d:2a:
7b:eb:1b:d7:15:e0:2b:ae:17:b5:fc:9a:71:d5:c4:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3A:FA:87:F3:BA:37:55:9B:05:0C:44:1B:3C:44:86:52:2C:E5:D7
X509v3 Authority Key Identifier:
keyid:CE:F5:01:D2:D0:52:18:5D:4F:65:69:21:8C:28:BF:35:85:90:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvUB0tBSGF1PZWkhjCi_NYWQAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/999647-1e7f-499b-9d48-f950327f88d3/1/zvUB0tBSGF1PZWkhjCi_NYWQAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:bc:d1:80:2a:cc:56:1f:f2:ca:68:34:da:74:74:89:e9:0c:
7f:23:bb:9e:a6:29:a0:47:ad:c3:ab:f7:bb:4d:33:14:4e:24:
2a:81:c3:4f:16:d9:5f:4c:b8:61:70:97:90:ac:8b:ca:10:e7:
59:f8:a2:99:52:76:ae:31:77:a7:90:0b:8a:7e:5b:90:ab:a5:
55:ab:5d:a8:36:3e:08:2f:32:20:c4:3b:b6:e8:47:0b:98:a6:
2a:7d:1a:a4:0f:da:cc:a8:21:c5:c5:54:0f:bc:4e:5e:7d:ff:
2b:ac:f5:cf:6e:bd:8b:5f:69:2b:29:fc:5d:ba:5b:12:40:ab:
00:8d:f5:07:e8:92:06:8c:b5:25:29:7b:94:11:0b:15:d5:71:
43:c7:99:de:c3:82:66:08:02:32:7f:76:b6:fc:a1:a1:94:8f:
24:ee:0c:f6:e3:48:41:0e:77:87:32:32:f5:55:60:c0:7f:bc:
e7:44:55:5c:24:05:72:cd:00:2c:c3:fe:dc:94:6e:25:03:39:
5f:6c:79:db:8e:80:1c:e9:f8:74:0b:b4:3f:99:24:16:8d:0b:
65:c2:39:35:9c:2e:71:c4:32:6a:2e:84:d0:9e:98:b8:f5:87:
09:0c:19:55:e3:e5:ab:6c:82:60:85:e7:41:d8:4e:f7:23:24:
9e:7a:92:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyC4/eZVSHms51JUU6hFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjUwMWQyZDA1MjE4NWQ0ZjY1NjkyMThjMjhiZjM1ODU5
MDAwZmMwHhcNMjYwMzAyMDkwMTQzWhcNMjYwMzAzMDkwMTQzWjAzMTEwLwYDVQQD
Eyg0MTNhZmE4N2YzYmEzNzU1OWIwNTBjNDQxYjNjNDQ4NjUyMmNlNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HnNoiq0M06jiskdfoGC0ee9IF/p
tQfhGO5e4WyC9y4hcd24T5q59dsl8Xj+WSXtHSHURqghW386rA2nED8cX2JttgA1
lZARu/BFIGDDmbsDYYS1UavH6PLF7vHh5P4lmiJUgiJ4SlDeO42TbGWdPPPyeYqb
uzcMBmPUbgSmJLWbb1JtPYtxIA7v3ok+M+TbohirW8AOS7IeP193USDEGOgjWL2P
/O9h2FVhMQZrEjDet6+4LEiWfZ267CshN4m8DOZy986eAPOTG6qgXsC2kb3wSZuD
pZl1M5qR2s6nnLqgNd4nWXbo7IHoMrlmHSp76xvXFeArrhe1/Jpx1cSQOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEE6+ofzujdVmwUMRBs8RIZSLOXXMB8GA1UdIwQY
MBaAFM71AdLQUhhdT2VpIYwovzWFkAD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85OTk2NDctMWU3Zi00OTliLTlkNDgt
Zjk1MDMyN2Y4OGQzLzEvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85OTk2NDctMWU3Zi00OTliLTlkNDgtZjk1MDMyN2Y4OGQz
LzEvenZVQjB0QlNHRjFQWldraGpDaV9OWVdRQVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7zRgCrM
Vh/yymg02nR0iekMfyO7nqYpoEetw6v3u00zFE4kKoHDTxbZX0y4YXCXkKyLyhDn
WfiimVJ2rjF3p5ALin5bkKulVatdqDY+CC8yIMQ7tuhHC5imKn0apA/azKghxcVU
D7xOXn3/K6z1z269i19pKyn8XbpbEkCrAI31B+iSBoy1JSl7lBELFdVxQ8eZ3sOC
ZggCMn92tvyhoZSPJO4M9uNIQQ53hzIy9VVgwH+850RVXCQFcs0ALMP+3JRuJQM5
X2x5246AHOn4dAu0P5kkFo0LZcI5NZwuccQyai6E0J6YuPWHCQwZVePlq2yCYIXn
QdhO9yMknnqSAw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:25 2026 by rpki-client