Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
File: ZnsrG--6F48w0qMhxFG27qVGYnQ.mft (raw, json)
Hash identifier: UIXwVmXyvYwCiMUq2aI3pFT8ywysYAZt3d/JB8iKlkQ=
Subject key identifier: B4:CB:43:F8:02:52:62:87:2C:53:05:CC:49:C0:11:9A:E2:CA:02:B2
Authority key identifier: 66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
Certificate issuer: /CN=667b2b1befba178f30d2a321c451b6eea5466274
Certificate serial: 019CAC4713845018F645A99DA6D3BDF01F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
Manifest number: 115A
Signing time: Mon 02 Mar 2026 02:01:04 +0000
Manifest this update: Mon 02 Mar 2026 02:01:04 +0000
Manifest next update: Tue 03 Mar 2026 02:01:04 +0000
Files and hashes: 1: ZnsrG--6F48w0qMhxFG27qVGYnQ.crl (hash: jp3wXUKaLz+2MZ6X9nRp9cnDZCQMOHOEexf+IozdVeg=)
2: pf_a0nfpbks_qkQ4qrr2kzaKRXI.roa (hash: vxuQLy7AbojQx6rQzhF+7IW/BG/BLw5H+3NoMpcGW1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:13:84:50:18:f6:45:a9:9d:a6:d3:bd:f0:1f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667b2b1befba178f30d2a321c451b6eea5466274
Validity
Not Before: Mar 2 02:01:04 2026 GMT
Not After : Mar 3 02:01:04 2026 GMT
Subject: CN=b4cb43f8025262872c5305cc49c0119ae2ca02b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:17:86:c1:51:4f:51:d1:67:5e:43:e3:1b:
a7:81:94:c3:ef:5b:d8:81:55:60:14:c3:bc:5e:57:
e5:ac:c5:3d:a2:cd:f2:17:74:7a:e9:7d:12:cf:89:
09:64:7a:e6:34:e2:91:ae:3e:b1:4a:7c:31:29:3d:
5e:5b:b9:9a:31:39:62:42:c0:35:09:67:e2:c6:37:
c0:d0:8f:13:47:a1:8c:8e:69:46:9e:80:00:7f:5f:
49:8f:f9:5e:eb:d3:b3:11:94:25:de:2f:9a:d5:ea:
a5:4c:0f:4b:f7:01:99:b3:74:62:3e:d9:ce:cd:ee:
fb:2b:4c:56:df:74:5e:f3:81:2f:bd:1c:ec:d2:10:
68:0e:35:0b:ad:f6:67:23:4d:42:e2:4c:20:4a:11:
8c:29:e8:95:41:df:26:95:6a:2a:7f:3d:7a:02:0f:
e5:cc:7b:4a:92:86:8d:15:39:73:44:57:c4:ea:91:
1b:87:a9:d0:f0:2d:1c:b3:14:4a:13:17:ec:65:f7:
7a:7e:73:fc:d4:e6:ad:80:d2:86:b5:59:2d:e9:16:
9f:e5:b8:37:26:92:71:d9:14:8a:cf:b5:9d:f8:99:
b6:f9:01:42:d1:35:7b:ae:c6:44:79:ab:40:1a:19:
66:0f:7d:2b:10:ec:00:ff:f4:b1:84:60:ed:b6:49:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CB:43:F8:02:52:62:87:2C:53:05:CC:49:C0:11:9A:E2:CA:02:B2
X509v3 Authority Key Identifier:
keyid:66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e5:49:d0:e1:62:90:38:ec:67:72:61:52:9c:0f:e5:10:c1:
6c:38:1c:9c:c7:61:bd:5c:ca:b0:f1:18:7d:2d:6a:d5:c4:20:
75:2b:6b:ff:35:30:7f:e9:3f:23:ee:00:d0:63:cd:b4:cb:b9:
92:f6:c8:fd:0f:96:8b:fb:b8:cb:66:e3:7e:de:b6:de:76:67:
1f:59:4f:ca:ac:79:92:56:f8:95:0e:b2:38:37:43:c2:0b:8a:
2c:6e:de:4a:55:30:ac:d5:c6:a6:73:9c:2d:20:f0:66:11:8f:
43:9e:6e:35:01:c9:41:9b:ad:22:ff:8a:fb:f5:18:d9:49:68:
1e:96:fc:97:aa:79:ea:28:50:61:58:10:7f:8e:fb:d8:76:45:
5f:53:b7:7f:8a:6c:0f:bb:45:50:37:95:7e:be:d1:29:73:51:
b7:5e:b9:88:19:da:6c:40:8d:98:3b:0b:2f:98:c6:5a:68:05:
ce:a6:e9:1a:e6:73:55:23:e4:26:63:f1:7a:e6:65:db:01:02:
97:e3:3c:59:58:d8:51:de:d6:0c:c2:d5:c0:8c:6d:c2:e1:17:
73:f0:f3:f7:8a:1f:5d:fd:c1:0c:cc:23:cf:e6:5a:3d:2c:84:
82:86:5b:78:b1:fd:08:30:99:87:5e:ec:71:48:ff:fa:c9:fd:
5d:c4:77:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRxOEUBj2RamdptO98B8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2N2IyYjFiZWZiYTE3OGYzMGQyYTMyMWM0NTFiNmVlYTU0
NjYyNzQwHhcNMjYwMzAyMDIwMTA0WhcNMjYwMzAzMDIwMTA0WjAzMTEwLwYDVQQD
EyhiNGNiNDNmODAyNTI2Mjg3MmM1MzA1Y2M0OWMwMTE5YWUyY2EwMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnogXhsFRT1HRZ15D4xungZTD71vY
gVVgFMO8XlflrMU9os3yF3R66X0Sz4kJZHrmNOKRrj6xSnwxKT1eW7maMTliQsA1
CWfixjfA0I8TR6GMjmlGnoAAf19Jj/le69OzEZQl3i+a1eqlTA9L9wGZs3RiPtnO
ze77K0xW33Re84EvvRzs0hBoDjULrfZnI01C4kwgShGMKeiVQd8mlWoqfz16Ag/l
zHtKkoaNFTlzRFfE6pEbh6nQ8C0csxRKExfsZfd6fnP81OatgNKGtVkt6Raf5bg3
JpJx2RSKz7Wd+Jm2+QFC0TV7rsZEeatAGhlmD30rEOwA//SxhGDttknOaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTLQ/gCUmKHLFMFzEnAEZriygKyMB8GA1UdIwQY
MBaAFGZ7KxvvuhePMNKjIcRRtu6lRmJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYt
ZjhiZGQyZDc5MjdkLzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYtZjhiZGQyZDc5Mjdk
LzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeVJ0OFi
kDjsZ3JhUpwP5RDBbDgcnMdhvVzKsPEYfS1q1cQgdStr/zUwf+k/I+4A0GPNtMu5
kvbI/Q+Wi/u4y2bjft623nZnH1lPyqx5klb4lQ6yODdDwguKLG7eSlUwrNXGpnOc
LSDwZhGPQ55uNQHJQZutIv+K+/UY2UloHpb8l6p56ihQYVgQf4772HZFX1O3f4ps
D7tFUDeVfr7RKXNRt165iBnabECNmDsLL5jGWmgFzqbpGuZzVSPkJmPxeuZl2wEC
l+M8WVjYUd7WDMLVwIxtwuEXc/Dz94ofXf3BDMwjz+ZaPSyEgoZbeLH9CDCZh17s
cUj/+sn9XcR3bQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:35 2026 by rpki-client