Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
File: ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft (raw, json)
Hash identifier: m1EgcRAFfmka3sUn7HEQTvdPnJn+s5ooM0YXdvGoMKs=
Subject key identifier: 2A:E5:0E:BA:64:54:E6:97:5F:0F:73:93:E3:41:EC:A7:55:4F:00:9C
Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
Certificate issuer: /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Certificate serial: 019CAC102D55F64D2CCB2EB1B1693D07B92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 01:01:07 +0000
Manifest this update: Mon 02 Mar 2026 01:01:07 +0000
Manifest next update: Tue 03 Mar 2026 01:01:07 +0000
Files and hashes: 1: GiLRiv4zUbiilyFJpKK-23nRrjw.roa (hash: Kbnw8RS+Cm1uYqFyCwki9S+J7BCZ8MZV4GQgLuCN37I=)
2: ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl (hash: naxLSJiUnf/iODKM4so0IIgjA56cltJuU/PKpS7jxuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:2d:55:f6:4d:2c:cb:2e:b1:b1:69:3d:07:b9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Validity
Not Before: Mar 2 01:01:07 2026 GMT
Not After : Mar 3 01:01:07 2026 GMT
Subject: CN=2ae50eba6454e6975f0f7393e341eca7554f009c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:31:fc:3a:19:9a:19:fe:a4:f0:3e:52:ae:
61:c1:a9:88:ad:a4:4a:32:fa:ac:b0:7f:72:86:3e:
f4:86:7c:b3:69:7f:3d:f8:66:c1:22:74:f0:ad:d2:
e7:89:1e:3e:99:3d:73:ff:11:c4:54:6f:6f:ec:e8:
b1:2f:b7:f2:e8:6f:81:73:97:cb:67:5d:20:ea:95:
3a:00:f0:30:1b:db:85:fb:70:f7:7c:b8:51:91:51:
4c:83:ed:06:18:48:56:c3:fc:76:b4:1a:07:fd:f5:
b7:9a:1c:df:7e:e9:a8:03:14:9c:91:16:d9:5b:06:
62:39:61:78:99:3a:6f:f3:87:27:fb:a1:87:bf:b4:
8e:57:88:ce:bb:e2:a9:0a:de:40:36:9e:3f:05:02:
e9:06:e1:d9:81:4b:a4:9e:d9:e5:ba:b3:e9:da:f0:
b0:3b:63:72:37:3c:a2:f3:05:2b:f0:0f:bf:df:00:
78:92:c2:f1:85:e4:c5:70:77:bf:ca:4a:53:5c:22:
61:a7:c3:b3:1c:1c:f1:40:34:fc:5b:50:67:b9:ae:
07:16:7f:6d:6d:f5:72:02:86:3d:e6:d0:03:6e:2d:
12:41:d1:e4:7f:01:8d:23:29:4d:09:b7:0d:e7:2c:
a3:7f:56:8f:83:22:5e:1e:03:34:d0:97:77:60:ba:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E5:0E:BA:64:54:E6:97:5F:0F:73:93:E3:41:EC:A7:55:4F:00:9C
X509v3 Authority Key Identifier:
keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:94:ce:89:8e:e9:5b:1f:67:d9:a7:9c:be:e9:f9:2c:69:6c:
60:e7:cc:1c:d2:fe:02:0a:d7:82:89:32:70:84:16:a7:6c:6a:
84:ac:1f:03:62:6c:ab:63:1c:df:3d:e7:d0:33:b9:d9:79:7c:
36:a3:a5:01:a8:c0:87:a4:6e:e9:dd:f6:ec:5e:fa:41:00:d3:
83:60:08:ca:8b:0d:a6:96:96:51:3b:63:07:e1:77:70:a9:d2:
7c:9d:fe:3e:1d:c3:a5:24:ea:f3:ef:e3:4f:eb:c8:82:41:00:
cb:42:a2:3e:c5:4b:39:ed:28:9e:c7:e7:2d:cb:f1:9d:2d:58:
7c:b8:b8:86:60:cd:97:ee:09:5f:7e:b0:53:10:ac:22:0e:d3:
bf:b8:30:23:a8:4c:2c:5c:d2:00:2c:2e:6b:00:56:c9:86:4c:
75:95:da:56:63:a6:1a:4a:b5:19:e1:03:3e:f3:47:10:91:30:
33:de:84:a4:86:c1:47:a2:04:92:80:24:ca:ac:39:f5:c8:9c:
ff:63:9f:e6:97:68:62:22:38:e3:7d:09:1f:66:f4:e9:2f:dd:
c3:b0:6c:e6:8f:f9:6e:1b:e4:3f:51:af:a9:f4:7f:28:12:80:
4d:02:ea:2f:d4:86:28:c2:ff:d4:14:92:f8:70:73:eb:2c:81:
82:b8:71:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEC1V9k0syy6xsWk9B7krMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTUwZTRlNThkNmFjMjdmODBmMDlhNWVkMmYzMDI4Yjgx
YWU4Y2EwHhcNMjYwMzAyMDEwMTA3WhcNMjYwMzAzMDEwMTA3WjAzMTEwLwYDVQQD
EygyYWU1MGViYTY0NTRlNjk3NWYwZjczOTNlMzQxZWNhNzU1NGYwMDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokQx/DoZmhn+pPA+Uq5hwamIraRK
MvqssH9yhj70hnyzaX89+GbBInTwrdLniR4+mT1z/xHEVG9v7OixL7fy6G+Bc5fL
Z10g6pU6APAwG9uF+3D3fLhRkVFMg+0GGEhWw/x2tBoH/fW3mhzffumoAxSckRbZ
WwZiOWF4mTpv84cn+6GHv7SOV4jOu+KpCt5ANp4/BQLpBuHZgUukntnlurPp2vCw
O2NyNzyi8wUr8A+/3wB4ksLxheTFcHe/ykpTXCJhp8OzHBzxQDT8W1Bnua4HFn9t
bfVyAoY95tADbi0SQdHkfwGNIylNCbcN5yyjf1aPgyJeHgM00Jd3YLrabQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrlDrpkVOaXXw9zk+NB7KdVTwCcMB8GA1UdIwQY
MBaAFGSVDk5Y1qwn+A8Jpe0vMCi4GujKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMDAyMTEtMDkwOS00MjA2LTkxMzYt
ZTY2ZDQxMWZhNmEwLzEvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zMDAyMTEtMDkwOS00MjA2LTkxMzYtZTY2ZDQxMWZhNmEw
LzEvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJTOiY7p
Wx9n2aecvun5LGlsYOfMHNL+AgrXgokycIQWp2xqhKwfA2Jsq2Mc3z3n0DO52Xl8
NqOlAajAh6Ru6d327F76QQDTg2AIyosNppaWUTtjB+F3cKnSfJ3+Ph3DpSTq8+/j
T+vIgkEAy0KiPsVLOe0onsfnLcvxnS1YfLi4hmDNl+4JX36wUxCsIg7Tv7gwI6hM
LFzSACwuawBWyYZMdZXaVmOmGkq1GeEDPvNHEJEwM96EpIbBR6IEkoAkyqw59cic
/2Of5pdoYiI4430JH2b06S/dw7Bs5o/5bhvkP1GvqfR/KBKATQLqL9SGKML/1BSS
+HBz6yyBgrhx7w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:06 2026 by rpki-client