Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
File: znQefeZX5KEPk8qSxReoGywLJR4.mft (raw, json)
Hash identifier: Yrx/o0P6qECKcwYA4tUCvtr84koaoJZ/Kp9t42eIsVo=
Subject key identifier: CF:29:82:93:32:2B:6B:CA:38:F2:2F:23:A5:99:BB:D6:96:25:5F:F0
Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Certificate serial: 019CAC7E3EF34B6E261EE6AF269D360439DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
Manifest number: 0E3B
Signing time: Mon 02 Mar 2026 03:01:20 +0000
Manifest this update: Mon 02 Mar 2026 03:01:20 +0000
Manifest next update: Tue 03 Mar 2026 03:01:20 +0000
Files and hashes: 1: 9As_XsenM5-QTmM1X_BCn4yPeqA.roa (hash: Dxtnn5XYXXhgv4gymsVhkJbLhB4m0DGlBCGRadS6kHQ=)
2: znQefeZX5KEPk8qSxReoGywLJR4.crl (hash: uFNj8iUMmCkgN3Cy3g0e7KCpk9n+0gVq9memYj1Re4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:3e:f3:4b:6e:26:1e:e6:af:26:9d:36:04:39:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e
Validity
Not Before: Mar 2 03:01:20 2026 GMT
Not After : Mar 3 03:01:20 2026 GMT
Subject: CN=cf298293322b6bca38f22f23a599bbd696255ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:ec:67:ce:2e:9b:55:6a:be:35:e6:9c:06:
c2:c3:d6:63:50:ed:b7:bc:18:d9:7f:2c:ae:ff:5f:
fa:d1:e7:3c:1a:01:93:ee:50:37:3e:79:2e:00:b4:
ca:24:97:5c:d1:c7:6e:67:bc:f3:21:ee:fe:c9:ef:
f7:ff:ee:19:b3:ef:e4:74:5c:50:13:d5:ef:35:07:
2c:d9:22:8f:a9:4e:d0:0c:26:5d:96:97:d0:a0:a2:
3b:46:94:ac:3d:51:5e:d4:b7:73:d3:47:81:86:64:
52:80:37:47:f0:6d:36:36:10:4f:95:14:42:6a:90:
5e:53:cf:bf:b2:b9:9d:57:37:36:91:88:6a:fc:e7:
49:88:a7:e2:7f:df:77:40:07:3e:79:f4:bd:29:e3:
37:c2:35:b3:c0:b1:f2:d9:0e:79:e6:55:ff:1e:2c:
92:aa:5a:9b:a4:77:bf:34:a3:64:8b:2b:76:81:0c:
42:c6:35:ed:12:1d:22:34:79:62:75:ec:a5:82:77:
45:f0:63:43:50:ca:8f:65:94:fc:a7:4e:44:26:a4:
64:32:4c:3b:d8:6b:c1:de:9f:ed:1d:d3:e6:6d:8c:
37:37:e8:bb:a1:0d:d8:14:e3:8c:00:d4:5d:49:ec:
a0:02:a9:b3:31:41:73:59:84:2e:72:4a:91:41:cd:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:29:82:93:32:2B:6B:CA:38:F2:2F:23:A5:99:BB:D6:96:25:5F:F0
X509v3 Authority Key Identifier:
keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:26:09:30:07:03:dc:de:84:f1:64:74:a9:d9:50:db:6c:d1:
ed:ff:70:15:fa:bc:d4:fa:d0:34:ee:99:07:0c:87:ce:a5:54:
47:4a:27:50:eb:a0:99:c6:1b:67:84:5f:c8:11:02:fb:de:3a:
b2:a5:bb:37:10:6d:cb:b6:32:ab:4c:30:f6:b9:48:f8:ee:e6:
37:c1:cb:f8:02:04:9e:2d:ca:c7:9d:c0:f8:4a:01:4a:7f:5c:
7b:f6:f6:01:de:5e:ad:00:15:6a:e2:26:30:7e:00:42:22:91:
e1:dd:89:5d:aa:f4:11:33:14:ce:3f:1f:c7:56:7e:ea:6f:51:
2b:0b:e2:b3:b6:bb:82:37:e6:6d:9c:e0:3f:8a:3f:de:5d:9e:
83:62:7e:4e:9e:8e:dd:6e:4a:e5:fb:e2:80:24:21:a9:0c:59:
05:6f:61:8b:b1:4d:e9:0d:79:82:2d:a2:5a:64:6d:6e:3a:4b:
b4:12:29:8f:92:d6:2d:b8:63:a9:8e:5d:e9:47:1a:eb:48:c6:
79:b4:42:fa:5e:9b:4d:1b:da:46:00:e4:29:fd:78:2e:3b:20:
8d:71:2f:1f:09:3e:07:d3:4a:2b:0c:cc:94:04:ec:93:95:53:
d1:68:a8:cf:24:68:4c:b6:ea:64:81:f2:16:f4:69:cd:f7:77:
c1:a0:c8:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfj7zS24mHuavJp02BDnfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzQxZTdkZTY1N2U0YTEwZjkzY2E5MmM1MTdhODFiMmMw
YjI1MWUwHhcNMjYwMzAyMDMwMTIwWhcNMjYwMzAzMDMwMTIwWjAzMTEwLwYDVQQD
EyhjZjI5ODI5MzMyMmI2YmNhMzhmMjJmMjNhNTk5YmJkNjk2MjU1ZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIjsZ84um1VqvjXmnAbCw9ZjUO23
vBjZfyyu/1/60ec8GgGT7lA3PnkuALTKJJdc0cduZ7zzIe7+ye/3/+4Zs+/kdFxQ
E9XvNQcs2SKPqU7QDCZdlpfQoKI7RpSsPVFe1Ldz00eBhmRSgDdH8G02NhBPlRRC
apBeU8+/srmdVzc2kYhq/OdJiKfif993QAc+efS9KeM3wjWzwLHy2Q555lX/HiyS
qlqbpHe/NKNkiyt2gQxCxjXtEh0iNHlideylgndF8GNDUMqPZZT8p05EJqRkMkw7
2GvB3p/tHdPmbYw3N+i7oQ3YFOOMANRdSeygAqmzMUFzWYQuckqRQc1fFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8pgpMyK2vKOPIvI6WZu9aWJV/wMB8GA1UdIwQY
MBaAFM50Hn3mV+ShD5PKksUXqBssCyUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jOWE5ZDEtYjEzYy00MDNkLWJkMWMt
ZDEyYTM3MmY1MTczLzEvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jOWE5ZDEtYjEzYy00MDNkLWJkMWMtZDEyYTM3MmY1MTcz
LzEvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeiYJMAcD
3N6E8WR0qdlQ22zR7f9wFfq81PrQNO6ZBwyHzqVUR0onUOugmcYbZ4RfyBEC+946
sqW7NxBty7Yyq0ww9rlI+O7mN8HL+AIEni3Kx53A+EoBSn9ce/b2Ad5erQAVauIm
MH4AQiKR4d2JXar0ETMUzj8fx1Z+6m9RKwvis7a7gjfmbZzgP4o/3l2eg2J+Tp6O
3W5K5fvigCQhqQxZBW9hi7FN6Q15gi2iWmRtbjpLtBIpj5LWLbhjqY5d6Uca60jG
ebRC+l6bTRvaRgDkKf14LjsgjXEvHwk+B9NKKwzMlATsk5VT0WiozyRoTLbqZIHy
FvRpzfd3waDIuw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:40 2026 by rpki-client