Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier: UGgCcwTpA1DnHOBHW+Xfh+JoPzfyUj8KHy66FRGypuk=
Subject key identifier: 1E:07:D9:C3:E4:2F:A2:E0:85:24:62:B7:2D:2B:D8:83:DF:35:51:D2
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 019CACB482388B27880C3F4FCC67526DC212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number: 1451
Signing time: Mon 02 Mar 2026 04:00:36 +0000
Manifest this update: Mon 02 Mar 2026 04:00:36 +0000
Manifest next update: Tue 03 Mar 2026 04:00:36 +0000
Files and hashes: 1: CCg7ZzvUdqSwi3wrsZm9eByU8vc.roa (hash: HBpENohXTL9696cy+vQSR5gQjTAWhSwEwHzFSm9x6Tg=)
2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: Xbwrc5ReLp6QTqidirw2VDYmexWx8iumxT38uDS6KvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:82:38:8b:27:88:0c:3f:4f:cc:67:52:6d:c2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: Mar 2 04:00:36 2026 GMT
Not After : Mar 3 04:00:36 2026 GMT
Subject: CN=1e07d9c3e42fa2e0852462b72d2bd883df3551d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:95:f1:b9:79:9b:54:9a:65:cb:4d:2b:8a:
02:10:91:b7:36:77:93:e3:d1:db:43:aa:e4:51:9f:
9e:50:25:8e:89:43:8e:87:0d:3a:4b:90:cb:23:10:
2f:5a:38:40:a6:96:9f:58:65:98:fd:0f:a3:ef:22:
54:f3:20:3d:37:5a:b2:e1:aa:d7:22:d0:d9:c3:be:
23:54:50:a6:89:eb:c5:d2:a2:2f:17:7b:ad:b0:63:
57:f7:32:96:30:a6:d7:4a:7a:c3:4d:8f:26:ad:f3:
96:66:25:6b:25:fc:1c:3c:ba:19:9a:91:5f:01:a3:
1b:ce:05:e8:d9:bc:4d:e4:e3:af:2b:0a:0e:3d:77:
5e:db:cb:61:26:0d:92:b5:95:fb:98:68:ed:c7:de:
e1:c5:91:55:2a:98:4f:94:d3:cd:76:f2:f9:04:e9:
6b:8a:fd:40:e0:1b:6d:94:e1:18:5f:56:45:f7:19:
bc:4e:0c:90:14:49:cb:0b:92:13:5e:9e:1b:d0:c5:
f6:d1:88:59:d4:8c:f4:f7:9b:d6:0d:69:78:2f:07:
da:2d:69:de:11:62:df:2e:15:bd:ec:d9:0f:e3:f1:
45:96:90:8d:92:dd:6c:0c:e9:23:dc:1e:eb:2f:51:
5e:30:a4:6a:a9:ab:ad:98:bb:3d:57:e3:7c:71:50:
de:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:07:D9:C3:E4:2F:A2:E0:85:24:62:B7:2D:2B:D8:83:DF:35:51:D2
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:af:13:59:e0:ae:1c:4c:69:31:d0:72:04:29:f7:82:bc:0d:
3a:09:d4:80:12:88:a1:cd:90:6f:83:04:6c:7c:03:71:e4:49:
03:8a:8d:23:b9:af:af:42:e7:e0:20:67:7a:79:f8:55:33:cd:
7b:da:02:51:92:83:65:f4:79:65:cf:0d:98:91:00:fc:69:29:
96:e0:53:3e:b7:16:2b:51:56:32:e4:e9:6a:4a:2d:ec:2d:6d:
cf:d3:f3:e8:1a:2e:63:ad:c6:d7:d8:79:90:c9:6d:a2:c9:6c:
37:eb:80:92:33:48:3d:5f:85:06:bb:f0:b8:6b:72:62:7e:0f:
c3:d0:85:a1:a9:11:f7:33:ba:5f:78:6d:db:30:5c:24:bd:ec:
86:17:4a:33:f9:a1:8e:75:82:c8:cf:b9:9f:15:76:8b:61:81:
ce:11:e2:0c:38:5a:21:cf:87:5e:36:d4:05:d2:53:cf:7e:f4:
e6:24:8a:4c:7f:d7:eb:19:5d:49:49:f7:ae:c4:f1:06:45:e0:
92:0e:c6:63:08:95:eb:f2:e1:57:09:72:12:41:25:03:3a:29:
ab:d8:6b:4d:a9:62:8c:5c:99:95:10:77:f1:23:6f:21:ad:e9:
e1:fe:4b:fb:e1:aa:db:da:b7:02:f1:0d:2b:19:3a:72:a4:a5:
46:7b:28:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystII4iyeIDD9PzGdSbcISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YTk4NTZkYjFhYjNiMjRmMDllOWNiOTI3NDM3Njg2Njgz
MDE0MTEwHhcNMjYwMzAyMDQwMDM2WhcNMjYwMzAzMDQwMDM2WjAzMTEwLwYDVQQD
EygxZTA3ZDljM2U0MmZhMmUwODUyNDYyYjcyZDJiZDg4M2RmMzU1MWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA102V8bl5m1SaZctNK4oCEJG3NneT
49HbQ6rkUZ+eUCWOiUOOhw06S5DLIxAvWjhAppafWGWY/Q+j7yJU8yA9N1qy4arX
ItDZw74jVFCmievF0qIvF3utsGNX9zKWMKbXSnrDTY8mrfOWZiVrJfwcPLoZmpFf
AaMbzgXo2bxN5OOvKwoOPXde28thJg2StZX7mGjtx97hxZFVKphPlNPNdvL5BOlr
iv1A4BttlOEYX1ZF9xm8TgyQFEnLC5ITXp4b0MX20YhZ1Iz095vWDWl4LwfaLWne
EWLfLhW97NkP4/FFlpCNkt1sDOkj3B7rL1FeMKRqqautmLs9V+N8cVDeGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4H2cPkL6LghSRity0r2IPfNVHSMB8GA1UdIwQY
MBaAFGSphW2xqzsk8J6cuSdDdoZoMBQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYt
MzdhNDQyZTY1ZjE4LzEvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYtMzdhNDQyZTY1ZjE4
LzEvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIq8TWeCu
HExpMdByBCn3grwNOgnUgBKIoc2Qb4MEbHwDceRJA4qNI7mvr0Ln4CBnenn4VTPN
e9oCUZKDZfR5Zc8NmJEA/GkpluBTPrcWK1FWMuTpakot7C1tz9Pz6BouY63G19h5
kMltoslsN+uAkjNIPV+FBrvwuGtyYn4Pw9CFoakR9zO6X3ht2zBcJL3shhdKM/mh
jnWCyM+5nxV2i2GBzhHiDDhaIc+HXjbUBdJTz3705iSKTH/X6xldSUn3rsTxBkXg
kg7GYwiV6/LhVwlyEkElAzopq9hrTalijFyZlRB38SNvIa3p4f5L++Gq29q3AvEN
Kxk6cqSlRnso2A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:00 2026 by rpki-client