Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
File: ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft (raw, json)
Hash identifier: pCDX6C92iLxhw+X8OxSxorG5gCV+DGRJCCxldkq3BzY=
Subject key identifier: 2F:BF:9B:C5:CF:F7:2F:2C:F9:22:F0:3E:4F:AE:09:45:DC:9F:A7:63
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial: 019CAA58CC66BC2C96B1AA2AB84788532CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
Manifest number: 0AD3
Signing time: Sun 01 Mar 2026 17:01:11 +0000
Manifest this update: Sun 01 Mar 2026 17:01:11 +0000
Manifest next update: Mon 02 Mar 2026 17:01:11 +0000
Files and hashes: 1: TuuctTXsnDfzjdp1XhJCuSQCZBE.roa (hash: lL87XCaQxmWdIfEo3Mlnj0oxnulHe23ylI5Y0lZ+hHA=)
2: ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl (hash: GLX5YP4nV/9S9YySDiGNU8UkzrHPVMKMu4DPbtA1ymQ=)
3: k5dogf-BFW_dvSXrkiHgEtagTVo.roa (hash: JTI2nYP0LahJQKoGJLojDrE8fYXChxKujAnQaXvPJgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:cc:66:bc:2c:96:b1:aa:2a:b8:47:88:53:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Validity
Not Before: Mar 1 17:01:11 2026 GMT
Not After : Mar 2 17:01:11 2026 GMT
Subject: CN=2fbf9bc5cff72f2cf922f03e4fae0945dc9fa763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:68:1c:8a:8f:4c:44:39:2b:3b:14:46:6f:
98:b3:b1:95:9c:a3:ea:ad:07:3d:a9:89:75:f7:8c:
e1:c2:ce:fe:8b:3b:c5:94:40:b8:6c:d1:89:b3:1d:
34:86:85:21:02:1a:48:a1:a3:e1:c4:8d:f5:c9:a6:
67:01:b6:ac:af:ae:14:6e:67:50:ab:b1:12:b6:3e:
70:17:5f:2b:b0:23:50:3c:56:cc:cf:4a:1b:a5:95:
19:d7:9c:34:66:1c:5f:3c:bf:f7:1e:0b:70:38:98:
19:a7:b9:aa:4b:19:4f:d5:09:72:b5:8c:03:39:df:
d3:48:c2:cd:02:81:63:79:0b:b4:27:59:29:eb:a6:
ce:45:30:07:4b:d4:d2:0f:8c:11:a8:c2:56:d6:8e:
be:72:94:98:e7:63:a9:b1:4a:66:2c:62:6e:96:e2:
31:03:f0:6a:e1:2b:7e:97:c6:8d:aa:ea:74:b2:30:
e9:95:e2:f6:fc:af:77:7a:45:73:e6:7a:7c:10:34:
23:70:fa:b0:26:6f:71:06:d6:b7:eb:85:2a:79:95:
56:c6:59:fd:24:fc:e0:6e:3a:a4:d7:31:6a:b6:7b:
34:33:ab:3b:91:24:ee:59:77:e5:0b:9e:f6:9c:a7:
cf:1d:1c:33:e6:ba:e6:bf:c0:c9:4c:72:8e:77:41:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BF:9B:C5:CF:F7:2F:2C:F9:22:F0:3E:4F:AE:09:45:DC:9F:A7:63
X509v3 Authority Key Identifier:
keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:db:74:44:a6:18:8b:f2:0c:bb:8f:e4:13:0e:21:81:fb:01:
94:b4:18:16:80:aa:81:da:da:1e:8d:e9:0e:0e:6f:ba:0e:fc:
fc:e9:57:d6:f4:f4:28:d7:c0:07:d0:c8:af:14:5c:f5:a5:e8:
cc:3e:fe:fd:33:24:28:61:01:03:72:ad:6b:87:47:75:87:ea:
43:f2:e4:21:86:39:ea:72:aa:08:fe:5c:7c:62:eb:6d:e6:4a:
98:62:12:bc:28:a8:f0:b1:1b:2b:7a:b6:e5:69:2b:fa:c1:63:
e2:84:0f:72:bc:85:37:1f:79:42:f3:5a:ca:3d:b2:42:3e:ff:
78:be:c3:fa:69:5f:3d:dc:be:ed:51:51:1e:09:8c:54:08:e9:
cd:47:f8:bf:88:39:a6:b9:03:2c:fb:97:10:21:67:d1:b8:56:
eb:35:3e:25:ae:09:7f:6a:94:53:c4:8c:80:b4:2a:ac:1e:2d:
79:12:06:8d:ea:5a:7d:28:7d:0d:3b:71:ab:f7:a6:81:02:9b:
57:bc:6d:09:b3:25:0b:db:7e:fa:e2:8d:14:28:aa:bf:7d:f9:
ec:c6:77:66:d2:40:a9:17:ff:34:41:b0:a8:30:3e:be:88:c0:
b7:3c:2e:03:0e:a3:ef:25:e3:d3:5a:79:59:39:3d:ef:e0:51:
f5:a3:53:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWMxmvCyWsaoquEeIUyzgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGM1MGQxZGFkZjhiODRiMTc0ZmRiMDU4N2FmYjVmNDJk
ZjhhNWYwHhcNMjYwMzAxMTcwMTExWhcNMjYwMzAyMTcwMTExWjAzMTEwLwYDVQQD
EygyZmJmOWJjNWNmZjcyZjJjZjkyMmYwM2U0ZmFlMDk0NWRjOWZhNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMZoHIqPTEQ5KzsURm+Ys7GVnKPq
rQc9qYl194zhws7+izvFlEC4bNGJsx00hoUhAhpIoaPhxI31yaZnAbasr64UbmdQ
q7EStj5wF18rsCNQPFbMz0obpZUZ15w0ZhxfPL/3HgtwOJgZp7mqSxlP1QlytYwD
Od/TSMLNAoFjeQu0J1kp66bORTAHS9TSD4wRqMJW1o6+cpSY52OpsUpmLGJuluIx
A/Bq4St+l8aNqup0sjDpleL2/K93ekVz5np8EDQjcPqwJm9xBta364UqeZVWxln9
JPzgbjqk1zFqtns0M6s7kSTuWXflC572nKfPHRwz5rrmv8DJTHKOd0HLJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+/m8XP9y8s+SLwPk+uCUXcn6djMB8GA1UdIwQY
MBaAFGRMUNHa34uEsXT9sFh6+19C34pfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yOGJkZTMtYTRjYS00ODhkLTgwNjEt
ZDM4ZDg0M2JmYTFkLzEvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yOGJkZTMtYTRjYS00ODhkLTgwNjEtZDM4ZDg0M2JmYTFk
LzEvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdt0RKYY
i/IMu4/kEw4hgfsBlLQYFoCqgdraHo3pDg5vug78/OlX1vT0KNfAB9DIrxRc9aXo
zD7+/TMkKGEBA3Kta4dHdYfqQ/LkIYY56nKqCP5cfGLrbeZKmGISvCio8LEbK3q2
5Wkr+sFj4oQPcryFNx95QvNayj2yQj7/eL7D+mlfPdy+7VFRHgmMVAjpzUf4v4g5
prkDLPuXECFn0bhW6zU+Ja4Jf2qUU8SMgLQqrB4teRIGjepafSh9DTtxq/emgQKb
V7xtCbMlC9t++uKNFCiqv3357MZ3ZtJAqRf/NEGwqDA+vojAtzwuAw6j7yXj01p5
WTk97+BR9aNTiw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:10 2026 by rpki-client