Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: c+zufhTT+vD7NQRnpu0TanJEGZ43TlGgBFjHBeG7enM=
Subject key identifier: 7F:9C:9E:93:CC:B2:EC:B9:BF:BC:DA:3F:F1:FA:F4:F8:1E:CB:6E:37
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 019DECA49E6E6BAC9D0B253AC84FA6AC4C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 1364
Signing time: Sun 03 May 2026 07:01:44 +0000
Manifest this update: Sun 03 May 2026 07:01:44 +0000
Manifest next update: Mon 04 May 2026 07:01:44 +0000
Files and hashes: 1: TUvmrgBE44ev_WdD8HZ7-Tqrsvk.roa (hash: eGtgmPAMsFLuXajQP6UacgNI2KT3PlnsWKJ/DF91EtU=)
2: v87hPEGnMIsf-U-27Xa5aB7InJ0.roa (hash: vpt3+IR1X8NAWDYMxgQL6E8vBwuUgUGdnpH6ThIVLCI=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: MnUcJfSTOTUxJczZRZ7yFKgH47RFuitibuuF3AMWNR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:a4:9e:6e:6b:ac:9d:0b:25:3a:c8:4f:a6:ac:4c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: May 3 07:01:44 2026 GMT
Not After : May 4 07:01:44 2026 GMT
Subject: CN=7f9c9e93ccb2ecb9bfbcda3ff1faf4f81ecb6e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:6e:85:4f:f4:00:c6:28:77:e7:b8:25:05:
95:67:e3:b7:94:6a:8e:8b:54:b9:26:f6:3f:17:98:
16:ca:4a:69:80:4f:c9:8c:df:f4:e0:5a:2c:ca:0a:
c9:0e:66:10:23:44:4f:e5:ca:f6:12:87:60:1a:b4:
57:fe:fe:92:90:6f:a7:c1:e0:95:09:b8:04:ec:df:
d7:f7:bd:12:60:ae:dc:05:a7:8d:15:5c:37:94:27:
ad:30:95:e7:cb:dc:b0:76:25:1f:9b:99:dc:cc:4f:
f6:7f:80:09:61:91:d1:dd:39:82:16:f8:33:a2:99:
b7:42:60:ae:33:e0:93:68:f5:7e:7d:23:91:13:23:
ac:0b:4f:7f:c5:fb:eb:31:3b:e1:86:4e:96:45:b5:
29:1b:0c:89:35:2d:46:40:4a:e0:90:18:8b:e3:18:
5d:0a:04:8f:cc:b2:39:53:c3:04:c9:dc:57:1e:c2:
66:a6:15:b0:e5:f7:96:c5:5b:7a:7f:b1:be:6a:94:
52:39:c9:c6:94:04:17:8f:93:2e:c2:0b:28:6c:07:
f4:13:17:6e:4e:fc:cc:da:19:f2:2e:6c:7a:21:59:
79:c7:5c:3d:4e:f6:d2:a7:33:5d:3d:0f:1b:52:99:
2a:74:5c:f9:71:6a:03:0f:a2:8b:c1:f3:cc:4e:be:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9C:9E:93:CC:B2:EC:B9:BF:BC:DA:3F:F1:FA:F4:F8:1E:CB:6E:37
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:5b:bd:e8:4b:7c:60:70:ef:59:8e:4e:e1:28:cd:39:d1:ff:
5e:0c:35:30:2c:09:e4:96:da:0b:f2:99:c9:57:2a:82:0f:ed:
51:fd:3f:c0:94:40:35:3e:4b:9d:ef:e6:c3:df:c3:f1:c3:2a:
24:7e:84:c9:6c:f2:2d:05:f3:03:05:6e:2d:8c:23:d9:e9:dc:
d2:14:7a:59:ad:cc:2a:91:41:68:a3:98:aa:8b:9b:fb:cd:26:
a2:85:1e:ed:57:f8:1a:7d:a8:40:c0:ff:6e:38:c1:7b:81:e0:
1c:65:b0:c4:af:30:e9:78:93:5c:1f:f8:de:17:3d:9e:63:30:
a4:f9:22:38:8e:d6:a0:e6:7f:4c:d2:cf:56:19:5b:6a:47:d5:
be:34:4a:21:ec:cb:a2:66:ff:d2:31:77:69:3a:1d:2f:d6:16:
e3:1b:18:b8:78:95:f3:6c:3e:43:5d:80:a3:12:1b:fd:c6:2d:
c4:fe:71:60:59:75:8c:9e:06:5b:36:d3:8c:e5:66:e2:fc:57:
8a:82:1d:87:a9:66:ec:e5:b4:45:ef:ac:e3:e9:2a:12:f3:9b:
c7:f6:0e:9d:2b:4b:67:41:c5:70:bf:d4:d7:69:92:75:a1:fa:
4a:e8:42:9c:49:df:9e:79:cc:f3:b1:0e:36:b3:5f:c6:35:ec:
2c:a3:98:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3spJ5ua6ydCyU6yE+mrExhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDM1NzkwODMwY2U3NDY5YTk0YzU5YjJlMmNjYmJmNWUz
NmQxM2YwHhcNMjYwNTAzMDcwMTQ0WhcNMjYwNTA0MDcwMTQ0WjAzMTEwLwYDVQQD
Eyg3ZjljOWU5M2NjYjJlY2I5YmZiY2RhM2ZmMWZhZjRmODFlY2I2ZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiFuhU/0AMYod+e4JQWVZ+O3lGqO
i1S5JvY/F5gWykppgE/JjN/04FosygrJDmYQI0RP5cr2EodgGrRX/v6SkG+nweCV
CbgE7N/X970SYK7cBaeNFVw3lCetMJXny9ywdiUfm5nczE/2f4AJYZHR3TmCFvgz
opm3QmCuM+CTaPV+fSOREyOsC09/xfvrMTvhhk6WRbUpGwyJNS1GQErgkBiL4xhd
CgSPzLI5U8MEydxXHsJmphWw5feWxVt6f7G+apRSOcnGlAQXj5MuwgsobAf0Exdu
TvzM2hnyLmx6IVl5x1w9TvbSpzNdPQ8bUpkqdFz5cWoDD6KLwfPMTr495wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+cnpPMsuy5v7zaP/H69Pgey243MB8GA1UdIwQY
MBaAFMzTV5CDDOdGmpTFmy4sy79eNtE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAt
YzVkMTNlODhlNGRlLzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAtYzVkMTNlODhlNGRl
LzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA31u96Et8
YHDvWY5O4SjNOdH/Xgw1MCwJ5JbaC/KZyVcqgg/tUf0/wJRANT5Lne/mw9/D8cMq
JH6EyWzyLQXzAwVuLYwj2enc0hR6Wa3MKpFBaKOYqoub+80mooUe7Vf4Gn2oQMD/
bjjBe4HgHGWwxK8w6XiTXB/43hc9nmMwpPkiOI7WoOZ/TNLPVhlbakfVvjRKIezL
omb/0jF3aTodL9YW4xsYuHiV82w+Q12AoxIb/cYtxP5xYFl1jJ4GWzbTjOVm4vxX
ioIdh6lm7OW0Re+s4+kqEvObx/YOnStLZ0HFcL/U12mSdaH6SuhCnEnfnnnM87EO
NrNfxjXsLKOYqw==
-----END CERTIFICATE-----
Generated at Sun May 3 17:07:51 2026 by rpki-client