Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: f9hxMzplgjAxqjL4uxsjDJXrZJ810c8WyTgRp92+CXA=
Subject key identifier: 61:D7:60:44:0E:F6:C0:2E:21:96:BC:D7:67:58:3E:71:04:4C:EE:D4
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 019CAC4732F38D752DB0EB74A63D44FBBFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 085B
Signing time: Mon 02 Mar 2026 02:01:13 +0000
Manifest this update: Mon 02 Mar 2026 02:01:13 +0000
Manifest next update: Tue 03 Mar 2026 02:01:13 +0000
Files and hashes: 1: uqlwtwz2Qs2EiNBrxD0-ZbsYVHs.roa (hash: IkhV4yizozk2dsaRcLN2hmBNAiBYulp+U7a9yEZXbLk=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: IA5xu8oB98/3t1gF2PUb+SBhc/yVAjQA6gYvVzED3vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:32:f3:8d:75:2d:b0:eb:74:a6:3d:44:fb:bf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Mar 2 02:01:13 2026 GMT
Not After : Mar 3 02:01:13 2026 GMT
Subject: CN=61d760440ef6c02e2196bcd767583e71044ceed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:07:f6:26:20:8f:77:42:2a:c3:c0:d3:f3:
90:36:b3:66:43:23:cd:ba:38:c6:8e:4a:47:63:23:
13:ea:1b:04:67:ba:54:7f:5c:0c:83:23:da:73:00:
7d:40:29:a5:e5:70:ce:dd:4f:ce:db:82:79:67:fd:
16:33:27:02:12:fe:9e:ab:4f:54:6c:3d:d3:5e:af:
9d:1e:0f:8a:c0:01:6d:67:be:b8:bb:0f:80:f2:48:
50:7f:5e:ec:07:c5:ab:e2:fe:6a:58:91:59:d4:5b:
f0:08:23:0b:51:26:7f:74:40:11:39:81:1c:4e:3e:
0c:20:08:f7:5c:54:a1:be:cc:f8:6f:7f:22:9e:78:
f6:54:72:72:fe:b4:27:66:26:a8:59:84:d3:21:cd:
71:78:42:4c:94:13:bf:f7:fe:5e:54:5f:91:be:0a:
9b:d6:e8:17:e5:5a:12:93:c5:6c:e7:9c:bc:e1:7a:
f7:aa:b0:9f:bc:04:70:5e:56:73:42:e7:f5:76:40:
94:be:84:50:2d:7e:c1:97:92:cf:c4:87:f6:dc:be:
6d:57:ee:ee:eb:8b:5e:9c:58:ea:76:c3:bc:ba:60:
32:de:08:6c:26:c4:a5:af:05:0e:88:94:32:60:ad:
8e:7d:11:36:e9:23:ab:b5:c7:ab:c8:e7:be:00:89:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D7:60:44:0E:F6:C0:2E:21:96:BC:D7:67:58:3E:71:04:4C:EE:D4
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:76:c3:7b:cf:0f:aa:09:f7:b6:df:54:dc:aa:59:df:a3:67:
13:da:62:10:a1:c8:64:ac:43:5a:d0:b4:7e:dc:53:d8:28:ab:
1c:6a:12:d3:49:14:10:ce:f0:34:68:db:cb:bb:5e:ba:10:b6:
82:2f:51:90:53:1e:a1:bf:88:78:3e:97:95:76:21:07:30:1a:
4d:fe:44:20:87:83:19:57:2c:63:bd:4d:34:da:52:4a:33:fa:
c0:c5:c6:a3:4e:06:4e:24:af:75:74:c7:de:be:d6:0e:66:b7:
e5:06:52:fa:aa:35:7a:35:c3:8b:98:3c:1f:75:30:e5:92:c2:
38:d4:cb:9f:a1:8a:92:85:fb:71:fe:9b:2e:e8:2f:bb:7a:0f:
3b:cd:ea:a0:f5:9d:c4:44:ea:3b:9a:74:b0:e6:8d:52:ee:90:
25:bd:d3:b1:f5:c0:a1:52:12:ec:af:1b:3a:c7:1f:41:d6:f4:
d2:0d:54:31:6e:c3:c3:be:82:9e:5f:db:2c:fd:91:21:5a:4f:
29:a8:24:55:a3:9e:89:4c:87:c9:bc:40:76:7e:c6:03:b8:15:
f3:02:b7:13:f8:a5:01:b1:93:99:82:e1:d6:42:4a:6f:50:ef:
99:d4:3f:74:37:12:04:d1:0e:a1:b4:7b:db:2a:f6:ae:97:5c:
ff:f9:5c:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRzLzjXUtsOt0pj1E+7+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOWQwNjQ3ZGMxNzE0MWQ4NDJiMzJmNTExNWQ5OWFhOWM5
ZjMzZGQwHhcNMjYwMzAyMDIwMTEzWhcNMjYwMzAzMDIwMTEzWjAzMTEwLwYDVQQD
Eyg2MWQ3NjA0NDBlZjZjMDJlMjE5NmJjZDc2NzU4M2U3MTA0NGNlZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg4H9iYgj3dCKsPA0/OQNrNmQyPN
ujjGjkpHYyMT6hsEZ7pUf1wMgyPacwB9QCml5XDO3U/O24J5Z/0WMycCEv6eq09U
bD3TXq+dHg+KwAFtZ764uw+A8khQf17sB8Wr4v5qWJFZ1FvwCCMLUSZ/dEAROYEc
Tj4MIAj3XFShvsz4b38innj2VHJy/rQnZiaoWYTTIc1xeEJMlBO/9/5eVF+Rvgqb
1ugX5VoSk8Vs55y84Xr3qrCfvARwXlZzQuf1dkCUvoRQLX7Bl5LPxIf23L5tV+7u
64tenFjqdsO8umAy3ghsJsSlrwUOiJQyYK2OfRE26SOrtceryOe+AIkwkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHXYEQO9sAuIZa812dYPnEETO7UMB8GA1UdIwQY
MBaAFM6dBkfcFxQdhCsy9RFdmaqcnzPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGIt
ODBmYWVjYTljMmVlLzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGItODBmYWVjYTljMmVl
LzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXbDe88P
qgn3tt9U3KpZ36NnE9piEKHIZKxDWtC0ftxT2CirHGoS00kUEM7wNGjby7teuhC2
gi9RkFMeob+IeD6XlXYhBzAaTf5EIIeDGVcsY71NNNpSSjP6wMXGo04GTiSvdXTH
3r7WDma35QZS+qo1ejXDi5g8H3Uw5ZLCONTLn6GKkoX7cf6bLugvu3oPO83qoPWd
xETqO5p0sOaNUu6QJb3TsfXAoVIS7K8bOscfQdb00g1UMW7Dw76Cnl/bLP2RIVpP
KagkVaOeiUyHybxAdn7GA7gV8wK3E/ilAbGTmYLh1kJKb1DvmdQ/dDcSBNEOobR7
2yr2rpdc//lciQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:17 2026 by rpki-client