Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: hy01Mbj55D6QYjZMK0PCOjzeI9nzKFJA7uwSIsFmyxg=
Subject key identifier: 22:F0:A9:5B:85:9B:73:5D:52:95:02:61:83:2A:B3:4E:92:EE:2A:D7
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 019CAC469E492B5492F144074C42332D73C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 07F7
Signing time: Mon 02 Mar 2026 02:00:35 +0000
Manifest this update: Mon 02 Mar 2026 02:00:35 +0000
Manifest next update: Tue 03 Mar 2026 02:00:35 +0000
Files and hashes: 1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: ijuRalVk6B5apEiW6qrfey9SEGLG7K5sqiIGI2TAass=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:9e:49:2b:54:92:f1:44:07:4c:42:33:2d:73:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Mar 2 02:00:35 2026 GMT
Not After : Mar 3 02:00:35 2026 GMT
Subject: CN=22f0a95b859b735d52950261832ab34e92ee2ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d5:c9:45:6c:f2:0d:87:8a:d9:83:c8:bb:04:
57:81:e7:de:b2:00:8b:94:bd:2e:54:2f:c3:31:15:
60:4e:12:6a:c0:81:e8:18:2b:8a:a0:21:bb:10:8f:
0e:c1:21:9f:74:69:58:f4:50:60:84:7e:44:26:7b:
5b:f7:09:d8:5b:75:b4:b7:19:dc:b1:78:7c:c6:cb:
67:31:73:46:ed:e5:4c:b2:c9:a0:1a:1b:2f:12:13:
07:b5:d9:6c:e4:e7:b3:43:d3:f4:29:71:e6:00:a0:
da:59:b3:e7:98:81:9c:fe:62:27:f3:63:ff:94:18:
68:b0:18:90:cc:a4:ee:4c:68:50:4b:0d:23:a0:71:
d4:8b:fb:9f:fc:aa:f5:f9:5a:a3:6b:4e:a3:01:9b:
bb:e0:25:3d:a5:41:16:7a:cc:13:7e:e1:31:06:b9:
14:75:d7:9c:70:09:33:c6:d5:c5:36:20:1f:b4:96:
56:f0:03:0b:ad:a3:b0:a4:a2:15:35:77:8c:99:f8:
94:19:4c:87:8e:46:30:47:de:80:53:85:72:9a:9f:
ab:15:99:b5:e5:93:5c:e8:75:54:3d:ae:c5:f7:32:
db:10:a0:45:27:8c:23:fb:36:ff:36:10:3d:b4:83:
1e:20:54:ea:2b:95:97:94:29:91:00:a3:15:11:55:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F0:A9:5B:85:9B:73:5D:52:95:02:61:83:2A:B3:4E:92:EE:2A:D7
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e9:60:54:3e:39:21:a9:d1:64:09:7d:0c:ac:b2:b2:28:47:
b7:a6:3c:61:4b:7d:a5:74:50:c0:72:c0:ec:c2:32:6a:43:ea:
2e:db:39:4d:71:97:eb:b8:79:66:ce:9e:47:0b:29:89:e3:3a:
b6:89:b9:0b:0f:c7:94:12:45:1b:4c:00:97:78:b0:1b:ae:43:
b6:71:96:29:2d:36:d9:38:16:5e:00:bb:8f:f6:d2:f8:8d:31:
7d:7e:1a:37:03:50:0e:9a:25:44:da:88:f4:f2:d6:19:06:6c:
45:91:cc:46:e9:4d:eb:ba:91:92:14:75:09:8c:5c:a8:5e:1b:
8f:34:75:2a:f9:e5:86:0d:3c:6c:dd:d8:c4:6f:c5:05:30:e5:
c3:74:bb:cf:9e:9d:a2:3f:74:df:36:60:95:e8:03:89:c2:6e:
1a:cf:7e:93:a6:fb:a9:48:2c:65:3c:45:ce:d8:4a:55:c5:62:
86:76:52:7f:71:90:d1:b2:1d:c4:4a:30:ed:a5:fe:37:75:a7:
53:a8:78:ef:97:a3:a1:ab:2d:a1:d7:e1:2d:80:5c:90:09:43:
b6:b9:21:60:a6:8b:47:36:c8:bc:b3:43:75:6b:57:39:9c:04:
20:9a:da:b6:ca:c8:46:99:4e:78:3a:58:61:7a:36:8e:7b:55:
76:0a:42:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRp5JK1SS8UQHTEIzLXPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMzg0NzY2NzUxMGY0ZjJlNTliYjFiMzk0YWUyN2U4ZGFk
MGRjOTcwHhcNMjYwMzAyMDIwMDM1WhcNMjYwMzAzMDIwMDM1WjAzMTEwLwYDVQQD
EygyMmYwYTk1Yjg1OWI3MzVkNTI5NTAyNjE4MzJhYjM0ZTkyZWUyYWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NXJRWzyDYeK2YPIuwRXgefesgCL
lL0uVC/DMRVgThJqwIHoGCuKoCG7EI8OwSGfdGlY9FBghH5EJntb9wnYW3W0txnc
sXh8xstnMXNG7eVMssmgGhsvEhMHtdls5OezQ9P0KXHmAKDaWbPnmIGc/mIn82P/
lBhosBiQzKTuTGhQSw0joHHUi/uf/Kr1+Vqja06jAZu74CU9pUEWeswTfuExBrkU
ddeccAkzxtXFNiAftJZW8AMLraOwpKIVNXeMmfiUGUyHjkYwR96AU4Vymp+rFZm1
5ZNc6HVUPa7F9zLbEKBFJ4wj+zb/NhA9tIMeIFTqK5WXlCmRAKMVEVUgtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLwqVuFm3NdUpUCYYMqs06S7irXMB8GA1UdIwQY
MBaAFM44R2Z1EPTy5Zuxs5SuJ+ja0NyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2It
NGJhNDQzNzdiZDg2LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2ItNGJhNDQzNzdiZDg2
LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+lgVD45
IanRZAl9DKyysihHt6Y8YUt9pXRQwHLA7MIyakPqLts5TXGX67h5Zs6eRwspieM6
tom5Cw/HlBJFG0wAl3iwG65DtnGWKS022TgWXgC7j/bS+I0xfX4aNwNQDpolRNqI
9PLWGQZsRZHMRulN67qRkhR1CYxcqF4bjzR1Kvnlhg08bN3YxG/FBTDlw3S7z56d
oj903zZglegDicJuGs9+k6b7qUgsZTxFzthKVcVihnZSf3GQ0bIdxEow7aX+N3Wn
U6h475ejoastodfhLYBckAlDtrkhYKaLRzbIvLNDdWtXOZwEIJratsrIRplOeDpY
YXo2jntVdgpCbw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:46 2026 by rpki-client