Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: uMLNxxPPugDzAzL2eWKaG8zFb5ud4K+2YAvO6cW5NQI=
Subject key identifier: 15:44:7D:17:B3:0C:17:EA:14:3F:34:12:2D:41:D2:09:AA:08:2A:E4
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019D394153CFAFFBC94ACA9FB354959A1F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 05B1
Signing time: Sun 29 Mar 2026 11:01:15 +0000
Manifest this update: Sun 29 Mar 2026 11:01:15 +0000
Manifest next update: Mon 30 Mar 2026 11:01:15 +0000
Files and hashes: 1: VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa (hash: VVaZ8MZsUSIufXGhoXhGO0V1DGyl/LodpDCAxeW4mZ0=)
2: voKmqzxnpt1_Etyi16YW_6f_LiA.roa (hash: FSyRyjfIYpd8tAuhdZ0kMGNXftsQsnkKkGGZLUK2+XE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: 3xPoJ0K08DYmAUkTwswyFw27iM3VGhPsbPqqX+gB0WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:53:cf:af:fb:c9:4a:ca:9f:b3:54:95:9a:1f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Mar 29 11:01:15 2026 GMT
Not After : Mar 30 11:01:15 2026 GMT
Subject: CN=15447d17b30c17ea143f34122d41d209aa082ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c5:5d:e8:28:ab:40:3d:97:df:e7:5d:07:d9:
32:4f:79:b5:c6:d5:07:2c:3d:b5:bd:8f:3e:d3:f3:
f3:57:ca:3e:a8:d1:44:0d:20:05:4c:7d:9b:aa:e6:
ae:55:51:6b:db:07:73:02:9e:9d:b4:ed:8c:59:5f:
d5:59:68:87:6a:f1:29:ab:c7:2e:5a:9b:f0:b8:08:
31:ab:75:e3:b8:69:8a:5f:ab:8b:a7:c8:9e:79:e9:
0d:6b:1a:d0:da:39:18:f5:32:fb:2f:23:83:b0:6b:
a5:7d:9d:33:02:14:ba:b7:2c:0d:10:be:2e:ba:ba:
7b:de:c6:f1:4d:29:09:3c:cd:fa:72:73:d3:3c:9b:
0a:a8:a1:62:55:3a:51:61:29:78:9e:cf:d2:19:03:
aa:7e:68:0c:77:c7:84:6d:ae:03:69:f7:ea:9f:a2:
36:0d:49:85:9b:59:41:ac:91:e6:a5:10:3d:82:e8:
9e:81:e5:f5:50:74:66:f1:37:ab:49:77:df:84:65:
f6:94:d3:01:30:f7:f3:71:80:32:ba:b1:e1:41:09:
7c:d6:64:3c:49:da:59:38:b6:16:97:7e:a4:54:04:
cd:ac:c4:c3:89:1e:dd:e9:c5:50:07:bf:2e:18:ca:
e2:68:6e:57:a6:47:21:4d:89:ba:97:48:05:d0:11:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:44:7D:17:B3:0C:17:EA:14:3F:34:12:2D:41:D2:09:AA:08:2A:E4
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c8:95:6d:c9:ad:0e:aa:06:ab:4c:68:fb:eb:bf:fa:3e:de:
a1:f3:15:a8:e4:09:a9:ee:48:6b:66:01:a8:b3:c5:86:e8:ce:
66:36:56:09:4f:45:3e:76:8a:af:ec:86:a0:0b:5f:70:4e:0e:
97:89:80:76:f9:3e:e4:45:fe:f2:a1:79:bb:39:51:c5:1f:62:
14:b0:b5:0d:64:5d:54:dc:cb:a8:fe:8d:55:90:a2:a5:ab:03:
8b:92:d0:b7:93:2a:e8:94:41:d9:8e:37:36:8e:1d:9a:7a:19:
d9:ea:5f:78:60:b0:78:93:3c:75:58:73:99:cc:18:0e:8d:f8:
02:fd:4c:68:19:70:2b:d0:95:ab:67:57:88:3b:8b:86:a8:ae:
9b:f4:5a:23:f0:23:5c:cb:cc:b9:c5:54:5f:d4:43:33:f2:a5:
9e:e2:6d:32:ce:52:af:4f:30:a7:87:9f:4e:7e:fb:35:67:84:
08:5b:1a:6c:05:77:4e:f3:ff:93:ec:cf:bf:54:80:89:7d:e6:
00:df:fd:90:96:8b:8f:d1:3f:fd:95:82:4f:86:42:e3:86:70:
2e:5a:b0:fa:eb:a4:51:cb:3b:05:e4:1c:cf:e0:7d:b7:5e:6c:
8c:d5:0c:64:2f:d8:2b:c7:e8:99:53:d1:54:6b:c4:69:a3:e0:
70:9e:c5:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QVPPr/vJSsqfs1SVmh+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNWJmMGYxOWE5OTRjN2Y2ODZkNTVhYmZjMTY4NzVkMzll
NWQ0ZTIwHhcNMjYwMzI5MTEwMTE1WhcNMjYwMzMwMTEwMTE1WjAzMTEwLwYDVQQD
EygxNTQ0N2QxN2IzMGMxN2VhMTQzZjM0MTIyZDQxZDIwOWFhMDgyYWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsVd6CirQD2X3+ddB9kyT3m1xtUH
LD21vY8+0/PzV8o+qNFEDSAFTH2bquauVVFr2wdzAp6dtO2MWV/VWWiHavEpq8cu
WpvwuAgxq3XjuGmKX6uLp8ieeekNaxrQ2jkY9TL7LyODsGulfZ0zAhS6tywNEL4u
urp73sbxTSkJPM36cnPTPJsKqKFiVTpRYSl4ns/SGQOqfmgMd8eEba4Daffqn6I2
DUmFm1lBrJHmpRA9guiegeX1UHRm8TerSXffhGX2lNMBMPfzcYAyurHhQQl81mQ8
SdpZOLYWl36kVATNrMTDiR7d6cVQB78uGMriaG5XpkchTYm6l0gF0BHIVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVEfRezDBfqFD80Ei1B0gmqCCrkMB8GA1UdIwQY
MBaAFM9b8PGamUx/aG1Vq/wWh1055dTiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMt
MzQwZmFjM2Y2YmFmLzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMtMzQwZmFjM2Y2YmFm
LzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8iVbcmt
DqoGq0xo++u/+j7eofMVqOQJqe5Ia2YBqLPFhujOZjZWCU9FPnaKr+yGoAtfcE4O
l4mAdvk+5EX+8qF5uzlRxR9iFLC1DWRdVNzLqP6NVZCipasDi5LQt5Mq6JRB2Y43
No4dmnoZ2epfeGCweJM8dVhzmcwYDo34Av1MaBlwK9CVq2dXiDuLhqium/RaI/Aj
XMvMucVUX9RDM/KlnuJtMs5Sr08wp4efTn77NWeECFsabAV3TvP/k+zPv1SAiX3m
AN/9kJaLj9E//ZWCT4ZC44ZwLlqw+uukUcs7BeQcz+B9t15sjNUMZC/YK8fomVPR
VGvEaaPgcJ7Fag==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:50:55 2026 by rpki-client