Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: FkmlLkyabR/h/m3iDonaMbL1aNumKb89JcuXAWhf7kg=
Subject key identifier: 2D:FD:22:FA:9F:9E:A7:CA:34:65:8F:BF:9F:AC:22:03:55:85:41:CB
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 019DCF75BEEDCC9F98A702655E6AA094EFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0EE5
Signing time: Mon 27 Apr 2026 15:01:33 +0000
Manifest this update: Mon 27 Apr 2026 15:01:33 +0000
Manifest next update: Tue 28 Apr 2026 15:01:33 +0000
Files and hashes: 1: 2_k_HZd8W3XpuxNJe50aSdmXyGk.roa (hash: fblUX67x5XT5dcCCQ4gbZ0xddj2udVIWNnjAZBdQkUU=)
2: 5w2GQsmluME7TY1nPdqfrlgiIhU.roa (hash: YsFPorWldlvTTXN7yy0IuoUUD15lyphFyE2sSDvKCEA=)
3: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: GbOC1xc2Z/I9rixmmBVSPs3tCO10pU+K0hHwQBRfhQY=)
4: SO3BlzN82wuSE26PkAHoL9gdWK0.roa (hash: 2lTdc7W5+lUgsLYun9vUAbt/KzErih08Dxdrvh4+kG8=)
5: lGdSHulI1aCQa7Y7_s7DEeMThKg.roa (hash: DuDTAKwJ9a+im27pqZxeXh7ZRg71UIpf2vEZIS5LbXg=)
6: xzU_R1urm6OQwv7-i4Miu0Lg7FI.roa (hash: 83vwjevGkm7TeLLNTTDiOn/v2zo45wBKwUV/hw2Ppgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:be:ed:cc:9f:98:a7:02:65:5e:6a:a0:94:ef:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Apr 27 15:01:33 2026 GMT
Not After : Apr 28 15:01:33 2026 GMT
Subject: CN=2dfd22fa9f9ea7ca34658fbf9fac2203558541cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:67:a5:d4:56:56:3b:3c:d5:3b:2d:0f:1b:
28:c4:f6:bd:90:59:32:6d:78:7f:0b:f8:0f:72:de:
91:9a:6a:7a:bd:98:f8:cc:33:0e:31:b2:cb:56:8f:
82:94:2d:5b:8f:cb:93:87:8a:04:39:7f:18:73:74:
89:50:a1:d3:24:25:15:2e:52:e8:0f:c9:51:f2:79:
f8:b1:67:5f:68:98:5c:91:6d:b9:0b:20:5c:26:18:
c9:61:30:8b:a0:1a:4a:3d:6c:1f:6e:bd:ca:7c:ad:
c6:43:8b:ce:8a:c9:19:4e:ee:55:76:7f:f3:90:2e:
65:09:41:e1:e1:50:85:d4:e3:97:8e:36:ee:8b:f2:
94:b3:99:df:7d:82:ad:f5:88:ab:a3:65:15:66:ea:
71:5c:45:9f:53:84:98:7d:ba:fe:d6:6a:f0:35:be:
56:c4:34:12:fc:ab:7a:ba:96:98:d5:24:64:0e:fb:
b3:36:65:78:b1:39:e3:ce:33:13:29:b9:e8:94:1b:
83:f0:25:fd:8e:47:1d:32:22:6d:00:13:30:a4:39:
ca:5f:91:ca:0e:dd:89:4c:91:1c:67:d0:f1:69:bd:
91:75:2c:7c:e4:93:6e:f3:ba:b4:5f:36:c4:b8:96:
38:b2:2e:f8:72:8e:e7:97:05:27:ce:83:a6:d6:49:
e8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FD:22:FA:9F:9E:A7:CA:34:65:8F:BF:9F:AC:22:03:55:85:41:CB
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e2:5b:ed:e4:c3:e3:8b:6f:60:17:16:72:27:44:57:9e:06:
42:d6:8d:7c:91:69:6f:e5:fc:da:d0:53:c7:c3:41:c1:26:af:
e7:2a:d6:7b:27:87:bc:28:68:4e:63:e0:d8:38:2d:69:dd:23:
47:35:22:52:95:36:42:58:74:ee:a3:07:e7:f2:35:2b:19:73:
a0:05:c3:db:72:cf:4e:a2:f5:75:64:02:11:ee:70:5c:7f:98:
1e:48:da:c6:bd:b9:43:46:45:2d:64:fe:f4:31:ab:dd:6f:61:
fc:ad:9e:49:24:b5:b3:e1:08:40:4f:95:1e:6e:1d:c5:b4:54:
df:15:93:01:03:79:81:9a:fa:b4:7a:aa:72:ef:4d:65:9e:9b:
54:10:20:98:8e:81:f3:63:c6:d9:f5:be:d0:b0:1c:fb:0c:53:
33:55:f1:9f:e9:f9:e4:e5:d3:0e:7d:c4:10:b9:9b:de:c5:e9:
32:7f:e2:d0:b3:22:fe:b0:b4:69:09:70:9d:ab:80:fc:cf:29:
be:e7:83:9f:48:7d:30:f1:e8:9a:72:de:1d:f3:24:30:d6:5d:
d8:0e:a6:6c:0a:d9:82:73:96:c4:96:3c:e7:2d:5c:9b:ff:fe:
b9:f7:ba:b2:67:05:62:62:7b:2b:a5:29:1f:10:1b:2a:7f:c9:
44:3f:b7:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Pdb7tzJ+YpwJlXmqglO/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZWNjYzlkMWE3NmU5MTQ2OWNiNjNiMTJiZjcyNWQ3ZGVi
YWZiMWIwHhcNMjYwNDI3MTUwMTMzWhcNMjYwNDI4MTUwMTMzWjAzMTEwLwYDVQQD
EygyZGZkMjJmYTlmOWVhN2NhMzQ2NThmYmY5ZmFjMjIwMzU1ODU0MWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZBnpdRWVjs81TstDxsoxPa9kFky
bXh/C/gPct6Rmmp6vZj4zDMOMbLLVo+ClC1bj8uTh4oEOX8Yc3SJUKHTJCUVLlLo
D8lR8nn4sWdfaJhckW25CyBcJhjJYTCLoBpKPWwfbr3KfK3GQ4vOiskZTu5Vdn/z
kC5lCUHh4VCF1OOXjjbui/KUs5nffYKt9Yiro2UVZupxXEWfU4SYfbr+1mrwNb5W
xDQS/Kt6upaY1SRkDvuzNmV4sTnjzjMTKbnolBuD8CX9jkcdMiJtABMwpDnKX5HK
Dt2JTJEcZ9Dxab2RdSx85JNu87q0XzbEuJY4si74co7nlwUnzoOm1kno0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC39IvqfnqfKNGWPv5+sIgNVhUHLMB8GA1UdIwQY
MBaAFEvszJ0adukUactjsSv3JdfeuvsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTkt
NGY0Yjk5NGUwZWIyLzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTktNGY0Yjk5NGUwZWIy
LzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeJb7eTD
44tvYBcWcidEV54GQtaNfJFpb+X82tBTx8NBwSav5yrWeyeHvChoTmPg2Dgtad0j
RzUiUpU2Qlh07qMH5/I1KxlzoAXD23LPTqL1dWQCEe5wXH+YHkjaxr25Q0ZFLWT+
9DGr3W9h/K2eSSS1s+EIQE+VHm4dxbRU3xWTAQN5gZr6tHqqcu9NZZ6bVBAgmI6B
82PG2fW+0LAc+wxTM1Xxn+n55OXTDn3EELmb3sXpMn/i0LMi/rC0aQlwnauA/M8p
vueDn0h9MPHomnLeHfMkMNZd2A6mbArZgnOWxJY85y1cm//+ufe6smcFYmJ7K6Up
HxAbKn/JRD+38Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:13:33 2026 by rpki-client