
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File: k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier: ZHAw12WZkWS8FrnEl/o7QqOBxckzEFu6qnN4G/CIirM=
Subject key identifier: 60:2C:A1:1D:C7:30:95:C8:03:9F:3E:89:B8:40:DD:84:DB:78:9D:F4
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial: 019CAB6BE866E9446A7AF6D6263334706986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number: 0680
Signing time: Sun 01 Mar 2026 22:01:41 +0000
Manifest this update: Sun 01 Mar 2026 22:01:41 +0000
Manifest next update: Mon 02 Mar 2026 22:01:41 +0000
Files and hashes: 1: GOVhumxEPoL4neQZjjckJeN-KNI.roa (hash: z0Kl7cRQ4EqgIEyAr3hQ9onG9NvsLkz7qIrC+ywOwnQ=)
2: JvoVnRFtvmJ3ApS1lx8-RReMZv0.roa (hash: mtH7HEjcUoSWBPqGTrN+mDrgbsMUT6MnlsAyD0vzcjQ=)
3: MvgVDAqPSE3okj5m3PcFfzXBk1w.roa (hash: WTJgxLOGGaH3LR8ATwMwf+dORKDlRpVth28vAu1Woxg=)
4: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: MiDN8wpSaicBzLmS9dHWfGGf2d+9nr/8WrT4YLCSjLs=)
5: qtFDXfqFUBLJDQBHvKu-Ftisy3I.roa (hash: qvGoNoCRQntmYEg+0c4U7acM5ZfQZI3DoYIhNNGSNp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e8:66:e9:44:6a:7a:f6:d6:26:33:34:70:69:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Validity
Not Before: Mar 1 22:01:41 2026 GMT
Not After : Mar 2 22:01:41 2026 GMT
Subject: CN=602ca11dc73095c8039f3e89b840dd84db789df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:e6:19:70:50:7a:ff:c7:80:d7:c0:8f:44:
99:ce:74:17:b3:b8:7e:0f:b9:b7:3b:de:3b:24:0d:
49:f0:a2:10:4a:c7:65:d7:cc:4e:89:cc:e6:81:d1:
1b:42:26:68:9f:f6:6d:28:22:9b:cd:ad:ea:b3:85:
08:f4:7c:91:27:8e:51:56:f0:bf:41:55:85:b2:d5:
9a:7c:4a:f9:2e:4d:e1:eb:2a:11:1e:03:9c:0e:d9:
40:61:33:cb:12:40:7f:ef:18:90:5f:38:82:8e:cc:
f7:0d:ca:0b:f0:45:cf:82:d3:09:16:1a:d1:87:02:
d7:5f:3e:ba:91:b0:16:63:cb:66:e0:59:d0:6b:91:
00:7b:88:ba:a0:0d:1a:6c:d3:ec:eb:f4:5c:25:4b:
24:3a:ce:68:47:77:02:31:47:aa:67:29:d2:22:e7:
e9:f5:ed:1d:e7:5f:4b:aa:99:a6:5f:ea:1c:ad:4f:
14:a4:be:bc:93:3a:ae:07:37:3f:45:3c:c5:74:0f:
c2:35:b4:f4:d9:c6:9d:d5:f9:38:2f:01:85:1c:07:
66:b7:05:4e:55:a5:e4:58:f5:38:4b:7c:c8:30:20:
39:d7:78:97:1b:9d:f8:80:f6:ae:de:34:b7:01:7d:
ef:7a:8b:c5:58:d8:4c:21:7b:d2:e9:a4:d4:88:4e:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:A1:1D:C7:30:95:C8:03:9F:3E:89:B8:40:DD:84:DB:78:9D:F4
X509v3 Authority Key Identifier:
keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:49:41:2d:c0:e9:36:49:6c:d3:5d:7d:ac:e2:71:c2:b7:dc:
c4:5b:f4:bd:1e:ca:5c:da:5a:a3:4e:d3:b8:1a:19:4c:23:f2:
61:83:87:85:fa:e7:92:b1:91:02:8c:b9:0d:40:25:8f:7a:25:
23:fc:77:92:52:de:9a:3c:e2:54:27:87:60:d2:b4:26:55:53:
db:8b:96:1f:37:f7:fa:61:ac:5a:2e:ff:92:31:3f:90:45:f0:
7e:8e:d8:d5:d3:d9:9f:77:c8:99:f9:f7:ba:08:8f:59:52:7f:
21:14:c2:82:ea:64:5e:6e:62:7a:8d:00:72:e6:b0:e1:09:b4:
50:8e:8c:63:3e:d5:a2:64:89:ab:73:0a:e6:c2:f3:52:2d:9f:
c7:17:0e:79:9a:ce:1c:17:cf:31:93:90:40:e5:21:66:72:24:
c2:7a:ad:3d:3c:83:9e:72:6e:43:da:89:7c:31:33:bb:29:4f:
ba:15:e8:b0:60:68:28:3d:f1:5e:75:15:93:2a:a4:88:8e:69:
fc:8f:dc:64:44:85:1f:33:f2:3f:36:d4:4a:2a:73:28:f7:de:
fd:db:d8:03:04:aa:bc:4d:74:b0:1b:a7:52:87:2f:a7:8a:32:
7f:76:c2:f1:e1:47:05:f2:0a:89:30:28:1b:f1:1e:12:88:cc:
fe:c3:cd:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra+hm6URqevbWJjM0cGmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWNlNzgwZGZkYTQzYWI0YTg0MTcyN2ViMjBkNzFmYzc2
NTI4YmMwHhcNMjYwMzAxMjIwMTQxWhcNMjYwMzAyMjIwMTQxWjAzMTEwLwYDVQQD
Eyg2MDJjYTExZGM3MzA5NWM4MDM5ZjNlODliODQwZGQ4NGRiNzg5ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr53mGXBQev/HgNfAj0SZznQXs7h+
D7m3O947JA1J8KIQSsdl18xOiczmgdEbQiZon/ZtKCKbza3qs4UI9HyRJ45RVvC/
QVWFstWafEr5Lk3h6yoRHgOcDtlAYTPLEkB/7xiQXziCjsz3DcoL8EXPgtMJFhrR
hwLXXz66kbAWY8tm4FnQa5EAe4i6oA0abNPs6/RcJUskOs5oR3cCMUeqZynSIufp
9e0d519LqpmmX+ocrU8UpL68kzquBzc/RTzFdA/CNbT02cad1fk4LwGFHAdmtwVO
VaXkWPU4S3zIMCA513iXG534gPau3jS3AX3veovFWNhMIXvS6aTUiE4maQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAsoR3HMJXIA58+ibhA3YTbeJ30MB8GA1UdIwQY
MBaAFJPs54Df2kOrSoQXJ+sg1x/HZSi8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUt
YTRkNDEzZDdmODljLzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUtYTRkNDEzZDdmODlj
LzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcElBLcDp
Nkls0119rOJxwrfcxFv0vR7KXNpao07TuBoZTCPyYYOHhfrnkrGRAoy5DUAlj3ol
I/x3klLemjziVCeHYNK0JlVT24uWHzf3+mGsWi7/kjE/kEXwfo7Y1dPZn3fImfn3
ugiPWVJ/IRTCgupkXm5ieo0Acuaw4Qm0UI6MYz7VomSJq3MK5sLzUi2fxxcOeZrO
HBfPMZOQQOUhZnIkwnqtPTyDnnJuQ9qJfDEzuylPuhXosGBoKD3xXnUVkyqkiI5p
/I/cZESFHzPyPzbUSipzKPfe/dvYAwSqvE10sBunUocvp4oyf3bC8eFHBfIKiTAo
G/EeEojM/sPNYA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:27 2026 by rpki-client