Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: VluTTD/VCfDQuj6Zo8xuJGX6UH1ZuZszmkFGwjjQmGo=
Subject key identifier: 68:2F:C3:E2:1C:CB:42:D9:69:D8:92:73:98:9F:B5:0E:9C:F4:06:05
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 019CAB6BB65FBCF687B0F946DD38AE308CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:01:28 +0000
Manifest this update: Sun 01 Mar 2026 22:01:28 +0000
Manifest next update: Mon 02 Mar 2026 22:01:28 +0000
Files and hashes: 1: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: Ldhc+9NzUHX5gWl5mw+crYakOkVkl6D76dwMk1oIFLE=)
2: ftUP8AhWyKSCfDygp2EvHTO8Boo.roa (hash: ewSYxaolal/Z6l87pd6PUdDa+voxm7gfdPqRbZdlcCk=)
3: h7hfu83GdfBNM7Zx2PElKBPYyGY.roa (hash: HsgzFT58UTHg7xZoI81l8ngXvJujr6TYdyM2zeg4nXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b6:5f:bc:f6:87:b0:f9:46:dd:38:ae:30:8c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Mar 1 22:01:28 2026 GMT
Not After : Mar 2 22:01:28 2026 GMT
Subject: CN=682fc3e21ccb42d969d89273989fb50e9cf40605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:b4:7f:37:6b:70:b3:5b:96:6b:4a:68:87:
55:97:b3:19:77:ad:e0:69:46:86:6e:f2:5d:b8:f1:
8a:37:d4:5b:bf:79:33:e4:cd:6c:51:b9:f0:17:8a:
d1:aa:c2:30:14:ce:9b:0d:7e:e2:5b:6e:47:b8:88:
21:52:00:24:fc:f5:3a:e7:c9:a4:d5:df:4e:ee:1b:
20:93:a1:c0:a0:9b:05:d0:11:61:9b:05:c4:37:e9:
d2:eb:4d:91:e0:f0:c2:ac:e2:87:33:23:0f:12:9e:
6a:21:a5:84:4a:e2:6f:70:db:c4:44:02:0c:6f:44:
0b:55:a7:ac:c4:43:8d:e4:5a:be:b0:b3:41:b9:e3:
81:44:57:7f:5d:7f:c3:fc:40:5b:c1:1f:8e:a5:60:
6a:02:ba:48:e1:b0:e5:d8:41:36:45:d5:76:3a:46:
26:c6:9e:1c:a0:79:3d:b9:d4:21:bb:f7:1b:34:0b:
3a:83:42:f6:22:54:ec:46:9c:55:37:53:c3:c2:a0:
d2:d3:27:ea:19:76:02:ce:4e:5b:da:77:af:a4:68:
fa:e0:2a:ac:99:17:51:19:2b:bb:ff:6c:53:b5:b7:
fa:25:d4:3a:56:76:6a:67:b1:a2:52:72:b8:e1:63:
71:73:b5:64:e8:65:5f:f0:66:d6:d2:c8:d2:e4:aa:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2F:C3:E2:1C:CB:42:D9:69:D8:92:73:98:9F:B5:0E:9C:F4:06:05
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:90:a3:5b:e2:92:ac:55:19:fc:02:38:d3:cc:c0:b7:b8:e1:
7c:9a:79:3d:6e:9e:d3:51:9d:48:4c:e0:6a:fa:71:fb:5d:9b:
bc:b9:1a:46:e5:26:f6:a3:78:20:da:8f:4e:fd:1a:65:fe:a6:
63:30:85:be:1f:f4:eb:e2:a3:e6:e7:7d:03:b1:b6:24:2d:36:
c9:b4:ff:54:d7:8e:44:49:a3:0a:77:be:cb:b2:e6:ff:87:5b:
00:f6:00:94:28:2b:d9:49:1c:25:90:f5:d3:a9:9c:17:1a:7a:
b8:02:63:73:c7:be:41:79:cf:55:1e:f5:e9:32:a0:60:66:49:
48:39:d0:77:5d:10:62:8a:97:fd:75:d1:c8:19:d4:54:a2:7e:
ec:1c:fa:c6:5e:e3:3b:f9:31:37:93:50:eb:d0:0e:34:2e:b6:
05:88:2a:27:44:35:87:2d:00:16:0c:ab:95:6a:a1:60:e5:77:
d3:39:f5:8b:b2:5d:df:e7:03:a8:e7:ba:f3:47:16:c7:ab:02:
eb:78:e7:2c:c2:f8:80:4a:4b:45:93:49:88:41:5f:7f:5b:63:
1d:fa:18:49:5d:dc:4d:86:63:ba:62:23:12:56:2e:95:e7:9b:
69:9b:95:cf:1f:97:5f:02:a8:11:0d:d1:a3:0a:b6:d3:85:f9:
44:d6:16:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra7ZfvPaHsPlG3TiuMIzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Mzk1ZDZhMWEyODg4ZDljMzU2ZWVkMzI3ODllNjI3ZDIz
ZDUxNmUwHhcNMjYwMzAxMjIwMTI4WhcNMjYwMzAyMjIwMTI4WjAzMTEwLwYDVQQD
Eyg2ODJmYzNlMjFjY2I0MmQ5NjlkODkyNzM5ODlmYjUwZTljZjQwNjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9G0fzdrcLNblmtKaIdVl7MZd63g
aUaGbvJduPGKN9Rbv3kz5M1sUbnwF4rRqsIwFM6bDX7iW25HuIghUgAk/PU658mk
1d9O7hsgk6HAoJsF0BFhmwXEN+nS602R4PDCrOKHMyMPEp5qIaWESuJvcNvERAIM
b0QLVaesxEON5Fq+sLNBueOBRFd/XX/D/EBbwR+OpWBqArpI4bDl2EE2RdV2OkYm
xp4coHk9udQhu/cbNAs6g0L2IlTsRpxVN1PDwqDS0yfqGXYCzk5b2nevpGj64Cqs
mRdRGSu7/2xTtbf6JdQ6VnZqZ7GiUnK44WNxc7Vk6GVf8GbW0sjS5KqD+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgvw+Icy0LZadiSc5iftQ6c9AYFMB8GA1UdIwQY
MBaAFGQ5XWoaKIjZw1bu0yeJ5ifSPVFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYt
OGQ4MzU5NDhlODc5LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYtOGQ4MzU5NDhlODc5
LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZCjW+KS
rFUZ/AI408zAt7jhfJp5PW6e01GdSEzgavpx+12bvLkaRuUm9qN4INqPTv0aZf6m
YzCFvh/06+Kj5ud9A7G2JC02ybT/VNeOREmjCne+y7Lm/4dbAPYAlCgr2UkcJZD1
06mcFxp6uAJjc8e+QXnPVR716TKgYGZJSDnQd10QYoqX/XXRyBnUVKJ+7Bz6xl7j
O/kxN5NQ69AONC62BYgqJ0Q1hy0AFgyrlWqhYOV30zn1i7Jd3+cDqOe680cWx6sC
63jnLML4gEpLRZNJiEFff1tjHfoYSV3cTYZjumIjElYuleebaZuVzx+XXwKoEQ3R
owq204X5RNYW1A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:42 2026 by rpki-client