Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: C4eG5sHTK0ZFX2nKUlQEn6O2UUzsAP5M740gy5+NQ3Q=
Subject key identifier: 22:80:17:58:02:CB:02:38:74:5D:D9:0B:18:69:18:35:3F:1F:33:39
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 019CAB6BA6CCCD9B8C2E4E17F63FA3A63FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:01:24 +0000
Manifest this update: Sun 01 Mar 2026 22:01:24 +0000
Manifest next update: Mon 02 Mar 2026 22:01:24 +0000
Files and hashes: 1: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: uRBr1ODWsUKZWFW6U5KGygImrPSB9AWr4e1of8nOg6g=)
2: tLzYTCMgcEaSpA6pqJ49xM0mJhg.roa (hash: v1AukhZWCgWLe1okLFBBNkZmMt/d4/1gGQHfd9186v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a6:cc:cd:9b:8c:2e:4e:17:f6:3f:a3:a6:3f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Mar 1 22:01:24 2026 GMT
Not After : Mar 2 22:01:24 2026 GMT
Subject: CN=2280175802cb0238745dd90b186918353f1f3339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:be:88:c1:97:65:36:6f:5c:f7:6f:97:47:
85:21:9f:36:23:4b:cd:56:13:0a:58:4d:10:61:8c:
28:17:44:a0:ca:59:24:ab:ac:3c:2d:57:8e:1d:90:
1c:3a:6b:63:2e:42:28:3c:ea:ca:fb:53:dc:d5:b0:
01:8b:60:c5:00:44:da:66:2d:fb:13:ca:7b:df:71:
8c:4a:64:8b:f8:49:be:a7:c4:58:b6:ee:ba:85:1f:
3e:a1:de:20:fa:c9:66:2d:9e:85:2e:de:f2:73:46:
8d:fa:7e:5e:f0:73:9b:c9:99:2b:65:be:8a:98:be:
bd:4f:64:6f:23:28:f9:b8:56:dc:c7:06:dd:8e:ed:
82:4c:7e:94:0e:1e:2c:fa:5d:10:3b:40:b0:13:a5:
a6:40:1f:7c:e5:c0:a1:f3:bf:89:90:b3:a6:1d:30:
bb:d7:9d:32:b4:3b:2d:0a:96:0a:02:46:2d:0e:a3:
d7:0e:98:68:2d:96:5c:35:61:b3:48:ae:79:ea:39:
82:de:1d:a6:67:d4:56:7a:02:fc:43:71:7d:88:34:
5a:eb:ff:ce:c5:53:7e:4d:5a:a5:31:d8:fb:f9:a5:
12:76:aa:c9:9d:65:78:a1:95:f9:56:12:5c:d7:b3:
8d:ca:19:7f:5b:33:de:bf:1d:aa:71:20:fc:a1:da:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:80:17:58:02:CB:02:38:74:5D:D9:0B:18:69:18:35:3F:1F:33:39
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3a:e2:c8:42:f6:c5:62:da:c6:54:82:17:85:99:fc:a6:00:
e5:e9:7e:d2:33:d6:19:35:71:34:b0:34:03:c6:bf:ef:5a:1d:
19:99:28:f1:5c:26:ff:6a:af:60:ac:50:34:38:1e:60:10:75:
59:0c:4a:40:6c:17:19:49:e0:f4:2f:7b:53:01:37:f9:94:f0:
e1:37:c4:c1:53:6b:1e:cc:46:d3:e5:e6:0b:34:07:a9:3e:eb:
29:6b:9c:7d:35:81:c1:f4:21:44:16:9d:7b:f6:86:e1:0f:69:
64:85:dd:00:9a:de:07:68:0a:f4:38:b2:18:2d:3d:48:6d:0a:
2f:c0:f5:60:5a:44:e0:9d:1c:dd:c9:38:ee:5b:ef:8d:e7:fa:
e9:10:69:9c:52:6a:3b:05:6a:12:98:53:b9:db:fc:21:55:46:
f5:91:3c:02:12:2f:de:06:ab:6b:35:cf:ee:e1:e4:9b:1e:9c:
f5:24:ec:8b:00:80:dc:e9:62:08:c6:c5:16:63:71:9d:a2:8c:
78:2a:cb:bd:15:2b:6b:15:6a:04:a0:ef:58:08:2a:e9:cf:c8:
88:c5:d7:86:07:a3:88:28:02:13:a7:96:a9:66:f3:86:b7:0c:
74:af:a2:b7:49:c2:63:16:b0:46:7e:a1:e6:c7:94:d2:28:43:
96:58:57:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra6bMzZuMLk4X9j+jpj+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YzI5MzM4MGJjNDFmNTJkOTEzMTU4NWE4NTgwMDM4Zjky
ZjVkY2MwHhcNMjYwMzAxMjIwMTI0WhcNMjYwMzAyMjIwMTI0WjAzMTEwLwYDVQQD
EygyMjgwMTc1ODAyY2IwMjM4NzQ1ZGQ5MGIxODY5MTgzNTNmMWYzMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu22+iMGXZTZvXPdvl0eFIZ82I0vN
VhMKWE0QYYwoF0Sgylkkq6w8LVeOHZAcOmtjLkIoPOrK+1Pc1bABi2DFAETaZi37
E8p733GMSmSL+Em+p8RYtu66hR8+od4g+slmLZ6FLt7yc0aN+n5e8HObyZkrZb6K
mL69T2RvIyj5uFbcxwbdju2CTH6UDh4s+l0QO0CwE6WmQB985cCh87+JkLOmHTC7
150ytDstCpYKAkYtDqPXDphoLZZcNWGzSK556jmC3h2mZ9RWegL8Q3F9iDRa6//O
xVN+TVqlMdj7+aUSdqrJnWV4oZX5VhJc17ONyhl/WzPevx2qcSD8odoW3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKAF1gCywI4dF3ZCxhpGDU/HzM5MB8GA1UdIwQY
MBaAFGXCkzgLxB9S2RMVhahYADj5L13MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYt
ZmU2ZGMxNzU4M2UzLzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYtZmU2ZGMxNzU4M2Uz
LzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDriyEL2
xWLaxlSCF4WZ/KYA5el+0jPWGTVxNLA0A8a/71odGZko8Vwm/2qvYKxQNDgeYBB1
WQxKQGwXGUng9C97UwE3+ZTw4TfEwVNrHsxG0+XmCzQHqT7rKWucfTWBwfQhRBad
e/aG4Q9pZIXdAJreB2gK9DiyGC09SG0KL8D1YFpE4J0c3ck47lvvjef66RBpnFJq
OwVqEphTudv8IVVG9ZE8AhIv3garazXP7uHkmx6c9STsiwCA3OliCMbFFmNxnaKM
eCrLvRUraxVqBKDvWAgq6c/IiMXXhgejiCgCE6eWqWbzhrcMdK+it0nCYxawRn6h
5seU0ihDllhXBQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:07 2026 by rpki-client