Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: J0nV0SXkTmIoDUSH3jeElZp7NA7aCZJPIC+jymDAMVQ=
Subject key identifier: 09:83:98:F4:B1:25:AB:71:33:C6:1D:7D:AD:52:8B:1F:1A:DA:F2:38
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 019CA9463A7E0CE6899E5D9139173783BFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 0667
Signing time: Sun 01 Mar 2026 12:01:17 +0000
Manifest this update: Sun 01 Mar 2026 12:01:17 +0000
Manifest next update: Mon 02 Mar 2026 12:01:17 +0000
Files and hashes: 1: DQ01J-Cq4hUemzI_hsxFb8NofP8.asa (hash: fcPlXypjGU8YaSASqBijwf7gz4frCYBc1/uFvytFDWw=)
2: sQDcvzwfINZL1YKhOjuNrTumwws.roa (hash: 1SADRpnWZPKf4KWSJGPvG1rU1NGMXTSVZgSGEdq16/Q=)
3: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: qrOnAW+D3UqxIwjrECm/4GngmBza/DNoESZc2WZ4XL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:3a:7e:0c:e6:89:9e:5d:91:39:17:37:83:bf:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Mar 1 12:01:17 2026 GMT
Not After : Mar 2 12:01:17 2026 GMT
Subject: CN=098398f4b125ab7133c61d7dad528b1f1adaf238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:b9:c3:27:80:22:df:5b:6a:41:47:ab:27:
da:bf:2a:38:8c:f2:7f:11:73:82:4d:d1:e1:6e:b2:
09:24:02:94:62:7f:9f:4c:fb:0e:38:56:6e:a9:0a:
5b:68:2a:6c:b3:be:e6:d9:d4:1c:c0:53:64:dc:dc:
c7:eb:8d:49:5c:eb:d5:99:c9:df:f3:99:ab:ba:3f:
23:3a:de:29:72:f9:f4:98:01:7c:ca:99:eb:f8:28:
b5:fc:6a:06:d8:0d:07:c4:01:a5:61:ab:92:06:6a:
9e:2b:7d:2f:fc:b6:9c:59:7c:cd:d2:39:dc:a3:10:
2d:23:d8:70:5a:10:41:91:b4:0c:55:bd:7c:79:c5:
0a:e5:92:2f:ff:c3:41:b5:2a:91:e4:43:8a:71:90:
f6:e2:8f:36:bb:b7:fc:e5:51:0f:92:73:97:ae:1c:
75:92:e5:76:7a:93:25:e8:46:3d:4d:7d:a6:09:0b:
ee:0f:3c:da:7c:27:a3:a3:06:ec:67:45:22:36:bc:
d0:e7:91:34:7a:89:63:81:83:db:86:70:ce:6f:59:
8d:c5:d1:85:26:e1:d7:16:ca:12:d0:59:63:dd:d8:
1e:12:2c:a1:d8:5b:42:ad:a3:81:a2:ec:e9:26:f4:
b8:ba:e7:15:01:10:db:cf:b4:68:1c:29:e9:a6:25:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:83:98:F4:B1:25:AB:71:33:C6:1D:7D:AD:52:8B:1F:1A:DA:F2:38
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:30:4a:e9:0a:c6:82:d0:26:cd:fe:86:45:51:3a:1f:24:57:
5a:3f:50:b1:fd:dd:ef:e0:7b:33:36:e1:98:4c:c4:b9:30:f8:
2f:e8:0b:20:08:99:07:60:ab:8b:f5:e3:25:d5:e9:ef:d5:1f:
00:43:80:90:ca:36:6b:f8:c8:2b:5e:af:35:03:fb:85:d5:28:
c9:77:f4:7b:96:d5:17:37:d1:69:82:5f:ac:e5:83:52:5e:b1:
5d:87:aa:ea:70:6d:94:10:ab:70:46:6d:bc:da:1e:91:9a:88:
b7:7c:24:f1:6b:fc:f1:7b:8c:99:80:cc:92:b7:d1:28:de:66:
c3:30:95:f2:56:ee:9a:bf:27:3a:e5:9d:fa:aa:e9:89:9b:7f:
a2:55:71:fb:8b:e2:cf:5e:f5:e8:e4:eb:41:be:a7:c1:22:e5:
83:1b:d0:51:17:21:08:00:5a:ed:6c:d1:1c:cb:ea:ac:d3:d9:
05:47:b5:d8:b8:3e:04:b9:6a:64:13:6b:af:c6:8a:a3:86:83:
db:62:d6:fe:97:ba:82:99:99:64:4d:53:8f:f6:ce:55:a9:36:
c3:ca:ca:7b:a5:4a:84:31:94:7c:33:13:7b:36:fe:92:12:2a:
ce:ca:dc:32:6a:74:56:73:77:4e:ee:7f:fa:5a:38:fe:fd:38:
b0:41:c4:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRjp+DOaJnl2RORc3g7/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTRmY2U5YjE5YTVlZWE1MzJlMTdkODNkYThjMWRjZDFk
ZTE4YzAwHhcNMjYwMzAxMTIwMTE3WhcNMjYwMzAyMTIwMTE3WjAzMTEwLwYDVQQD
EygwOTgzOThmNGIxMjVhYjcxMzNjNjFkN2RhZDUyOGIxZjFhZGFmMjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrO5wyeAIt9bakFHqyfavyo4jPJ/
EXOCTdHhbrIJJAKUYn+fTPsOOFZuqQpbaCpss77m2dQcwFNk3NzH641JXOvVmcnf
85mruj8jOt4pcvn0mAF8ypnr+Ci1/GoG2A0HxAGlYauSBmqeK30v/LacWXzN0jnc
oxAtI9hwWhBBkbQMVb18ecUK5ZIv/8NBtSqR5EOKcZD24o82u7f85VEPknOXrhx1
kuV2epMl6EY9TX2mCQvuDzzafCejowbsZ0UiNrzQ55E0eoljgYPbhnDOb1mNxdGF
JuHXFsoS0Flj3dgeEiyh2FtCraOBouzpJvS4uucVARDbz7RoHCnppiXyiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmDmPSxJatxM8Ydfa1Six8a2vI4MB8GA1UdIwQY
MBaAFM8U/Omxml7qUy4X2D2owdzR3hjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMt
NTljMTA4N2U0ODU2LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMtNTljMTA4N2U0ODU2
LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjBK6QrG
gtAmzf6GRVE6HyRXWj9Qsf3d7+B7MzbhmEzEuTD4L+gLIAiZB2Cri/XjJdXp79Uf
AEOAkMo2a/jIK16vNQP7hdUoyXf0e5bVFzfRaYJfrOWDUl6xXYeq6nBtlBCrcEZt
vNoekZqIt3wk8Wv88XuMmYDMkrfRKN5mwzCV8lbumr8nOuWd+qrpiZt/olVx+4vi
z1716OTrQb6nwSLlgxvQURchCABa7WzRHMvqrNPZBUe12Lg+BLlqZBNrr8aKo4aD
22LW/pe6gpmZZE1Tj/bOVak2w8rKe6VKhDGUfDMTezb+khIqzsrcMmp0VnN3Tu5/
+lo4/v04sEHEXg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:14 2026 by rpki-client