Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
File: zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json)
Hash identifier: x341RgSfekOfC7YKJYuSv09Q1OG1yj/5u1EkbF864UI=
Subject key identifier: 70:25:80:29:29:CE:79:B3:B2:E3:ED:6F:70:F8:3A:1A:24:4E:B3:83
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Certificate issuer: /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial: 019CF2DF9EFFBB1704FA1AB040D7E96F50AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
Manifest number: 0416
Signing time: Sun 15 Mar 2026 19:01:07 +0000
Manifest this update: Sun 15 Mar 2026 19:01:07 +0000
Manifest next update: Mon 16 Mar 2026 19:01:07 +0000
Files and hashes: 1: CVwCEsbzumpXgEnKDDCCAaIDrYM.roa (hash: lxu8mh9bo97HPFI+56oJ6vzMl5ukNpSkTrJqrOGog30=)
2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: OrpvvBQC0fDMoP7Rn0Vb7h4py/+cSAuHM/NKyHofxbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:df:9e:ff:bb:17:04:fa:1a:b0:40:d7:e9:6f:50:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Validity
Not Before: Mar 15 19:01:07 2026 GMT
Not After : Mar 16 19:01:07 2026 GMT
Subject: CN=7025802929ce79b3b2e3ed6f70f83a1a244eb383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:61:2e:ac:47:76:da:5d:33:19:5c:ba:a8:
4f:c9:9a:6d:08:f8:0e:c2:36:03:1f:9b:6f:a0:ad:
4a:e8:e9:7d:1a:52:f4:7b:f3:af:cc:82:bc:b4:0a:
07:33:6c:ed:50:c4:72:0e:c3:a0:49:24:a6:72:a6:
0a:96:bf:00:ff:ff:28:8a:c3:99:92:52:c7:5b:2e:
e9:93:77:24:ac:95:84:af:ad:40:aa:c8:7f:68:55:
48:79:c9:84:36:45:44:52:c5:ea:7a:7c:df:a5:7f:
84:ac:f9:9d:ea:95:7a:8d:82:3b:7d:1f:72:02:98:
9d:56:56:c2:32:e2:47:3b:d7:15:09:9e:3f:50:06:
09:b7:06:21:2e:44:91:3c:d5:cb:6f:06:5f:19:5f:
09:ae:2b:f4:f7:60:d9:17:21:dd:e7:07:17:c5:24:
8d:d1:10:60:4e:88:a6:d2:ab:81:de:9b:37:e7:8b:
98:78:09:42:10:0b:4f:6b:27:2d:2a:fc:27:c8:f1:
8b:26:30:43:f1:60:8f:1c:e0:74:de:e8:5e:8b:c5:
c0:2a:ad:0a:d4:76:cb:e4:7f:77:80:d8:01:b4:c5:
22:8e:0f:b2:ac:5c:12:e5:f3:1a:97:a8:42:e5:c1:
75:52:2a:41:83:37:de:93:cb:96:a8:51:f4:1b:f5:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:25:80:29:29:CE:79:B3:B2:E3:ED:6F:70:F8:3A:1A:24:4E:B3:83
X509v3 Authority Key Identifier:
keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:df:48:54:97:a3:e5:5a:46:e3:55:30:ea:4d:38:16:96:86:
f9:3a:9f:36:25:f0:e3:58:18:d0:bd:68:75:e4:51:68:31:70:
c6:72:58:6d:59:c5:27:4b:f3:9f:be:a2:d9:4f:3f:10:df:38:
70:44:c4:6b:d3:f0:64:f5:b5:3b:13:e0:18:c1:04:d9:f0:7a:
35:71:6f:d5:8a:d1:a9:1c:b5:15:22:a1:a7:ca:52:2d:41:c8:
02:fb:c7:fd:f4:63:55:23:68:79:2f:41:69:e1:af:42:3c:31:
bf:3d:65:33:32:4e:b4:dd:ea:54:b8:45:67:7f:54:dd:2c:7f:
97:c9:59:3f:d0:c0:a6:61:37:f9:81:5e:7d:97:00:0a:22:70:
37:34:d5:7f:83:06:90:86:90:ff:ea:15:7c:4b:a8:af:e5:bf:
2e:58:b7:6e:5f:3e:71:e0:a8:39:3a:fb:a3:e1:bc:f5:44:4f:
67:1a:e5:eb:23:aa:79:8b:1a:e6:67:af:fa:3d:15:35:26:5d:
d5:7e:09:73:c8:31:e6:4a:60:cb:8c:d7:dc:01:97:07:08:00:
2b:05:bc:b1:fc:d1:d6:86:6c:1f:a4:7c:fe:d5:20:4f:0b:42:
e0:4c:dc:fe:74:53:71:3e:d2:0c:d1:1e:e3:5a:d2:78:e7:ee:
f1:d6:04:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzy357/uxcE+hqwQNfpb1CuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNGUyYmFjNTFkOWNiNzI5YjFhNzU2MjhlZTZiNGM5YzFl
OWZmYzgwHhcNMjYwMzE1MTkwMTA3WhcNMjYwMzE2MTkwMTA3WjAzMTEwLwYDVQQD
Eyg3MDI1ODAyOTI5Y2U3OWIzYjJlM2VkNmY3MGY4M2ExYTI0NGViMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulJhLqxHdtpdMxlcuqhPyZptCPgO
wjYDH5tvoK1K6Ol9GlL0e/OvzIK8tAoHM2ztUMRyDsOgSSSmcqYKlr8A//8oisOZ
klLHWy7pk3ckrJWEr61Aqsh/aFVIecmENkVEUsXqenzfpX+ErPmd6pV6jYI7fR9y
ApidVlbCMuJHO9cVCZ4/UAYJtwYhLkSRPNXLbwZfGV8Jriv092DZFyHd5wcXxSSN
0RBgToim0quB3ps354uYeAlCEAtPayctKvwnyPGLJjBD8WCPHOB03uhei8XAKq0K
1HbL5H93gNgBtMUijg+yrFwS5fMal6hC5cF1UipBgzfek8uWqFH0G/WyhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAlgCkpznmzsuPtb3D4OhokTrODMB8GA1UdIwQY
MBaAFMxOK6xR2ctymxp1Yo7mtMnB6f/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekU0cnJGSFp5M0tiR25WaWp1YTB5Y0hwXzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNTg4MDMtMjRlNy00NmNmLWIyNDQt
OWRhNzg4N2Y2YTJmLzEvekU0cnJGSFp5M0tiR25WaWp1YTB5Y0hwXzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hNTg4MDMtMjRlNy00NmNmLWIyNDQtOWRhNzg4N2Y2YTJm
LzEvekU0cnJGSFp5M0tiR25WaWp1YTB5Y0hwXzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbd9IVJej
5VpG41Uw6k04FpaG+TqfNiXw41gY0L1odeRRaDFwxnJYbVnFJ0vzn76i2U8/EN84
cETEa9PwZPW1OxPgGMEE2fB6NXFv1YrRqRy1FSKhp8pSLUHIAvvH/fRjVSNoeS9B
aeGvQjwxvz1lMzJOtN3qVLhFZ39U3Sx/l8lZP9DApmE3+YFefZcACiJwNzTVf4MG
kIaQ/+oVfEuor+W/Lli3bl8+ceCoOTr7o+G89URPZxrl6yOqeYsa5mev+j0VNSZd
1X4Jc8gx5kpgy4zX3AGXBwgAKwW8sfzR1oZsH6R8/tUgTwtC4Ezc/nRTcT7SDNEe
41rSeOfu8dYEng==
-----END CERTIFICATE-----
Generated at Mon Mar 16 04:25:32 2026 by rpki-client