Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
File: zPFCMN6e_sYQ_90zngxEgLaLrUU.mft (raw, json)
Hash identifier: jQKekJafjqIirX0zea7jphTG9tspaiKbF8rwV2UmyKA=
Subject key identifier: 39:98:99:2C:81:9B:CB:EB:B8:FD:0B:7C:A1:81:69:42:31:B8:29:F5
Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Certificate serial: 019D39E5C0695B196317418B827F26D07ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
Manifest number: 059B
Signing time: Sun 29 Mar 2026 14:00:51 +0000
Manifest this update: Sun 29 Mar 2026 14:00:51 +0000
Manifest next update: Mon 30 Mar 2026 14:00:51 +0000
Files and hashes: 1: eRXGxBwJlbiDcH7nJzSjyPxJr4E.roa (hash: +PdqisLU84EBbEvA+O/DTTZgUzTBpNitn0IrUKYkAQo=)
2: zPFCMN6e_sYQ_90zngxEgLaLrUU.crl (hash: K795jyRd6n/ycJwzwAdHs7QCo7Wnb8mN1mVvXgCs7vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:c0:69:5b:19:63:17:41:8b:82:7f:26:d0:7e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Validity
Not Before: Mar 29 14:00:51 2026 GMT
Not After : Mar 30 14:00:51 2026 GMT
Subject: CN=3998992c819bcbebb8fd0b7ca181694231b829f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:2f:47:b8:d7:8d:42:9a:fa:cc:fd:aa:72:
6b:8f:30:70:97:58:80:20:17:1a:bf:88:13:f0:ea:
10:24:4c:4a:9c:bb:39:2d:84:47:8d:0c:09:b3:9e:
fd:42:ca:0f:44:07:26:f3:d6:28:6b:e0:d8:f2:61:
0a:c3:bb:1b:bd:67:2c:ed:c8:73:ab:eb:98:0d:3a:
92:2d:f4:31:d7:12:3b:94:b2:05:19:43:25:42:d6:
46:db:1a:c8:9d:57:7f:6a:b5:7b:dc:3c:7a:d1:2d:
a4:91:9c:ab:87:22:6a:db:49:44:46:58:67:00:fa:
10:27:69:87:d4:ab:dd:b2:36:63:ad:96:86:cc:df:
9e:32:f8:2b:81:1c:4e:7a:20:e5:43:32:76:d7:67:
a9:25:46:72:91:71:0a:23:89:62:2d:c8:54:06:ba:
f4:ff:23:cd:84:3d:20:a6:a4:1a:82:4e:9e:71:b8:
65:bc:b7:a6:04:3a:4b:c5:88:73:aa:51:d2:b6:3c:
b2:d9:98:b4:14:1d:e6:de:78:f2:f9:1b:02:ba:bf:
5e:b5:3d:16:1f:27:09:44:5d:27:a7:e9:61:91:83:
77:c1:cc:cf:d2:08:91:ff:87:b9:07:25:da:87:ed:
59:d1:c3:42:c1:3a:c2:21:75:ed:52:41:2d:4c:d8:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:98:99:2C:81:9B:CB:EB:B8:FD:0B:7C:A1:81:69:42:31:B8:29:F5
X509v3 Authority Key Identifier:
keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:68:29:cc:cf:55:8b:19:d5:89:46:05:e2:cb:24:f1:0a:b6:
28:41:43:3e:d3:6d:88:3c:04:c2:71:73:3e:d5:9b:80:0e:57:
96:08:26:6c:eb:18:7b:9a:45:22:34:e0:05:04:09:f6:e3:60:
3c:c3:51:81:2b:95:d7:ad:7c:93:a8:41:23:0f:0b:08:b9:6d:
9e:45:34:ed:63:2c:c6:e8:5d:62:1f:87:e7:4f:a8:0e:ee:29:
ad:66:9f:06:58:23:b5:8f:7f:ee:ae:a5:eb:52:c1:2b:c3:0e:
96:46:e6:61:8b:d0:83:d3:4a:ec:3b:01:27:f7:31:4f:02:48:
33:a7:c3:3d:5d:90:64:d2:59:fa:6c:65:ef:a1:a1:cf:15:c9:
fa:69:01:7b:17:9e:35:23:6e:fc:52:4f:ef:40:91:3f:d0:04:
a3:ed:d9:f3:6f:43:ee:5c:cb:16:7a:c2:83:a4:1a:c0:83:be:
5a:34:57:1a:1f:5f:98:2a:09:98:26:67:8a:8d:a7:f2:2b:09:
d2:70:33:d7:30:c7:83:d5:5c:72:e0:1f:27:98:06:92:0f:fb:
25:60:c2:38:3c:b3:35:87:da:51:ba:04:7e:7b:99:71:9f:f5:
6e:1a:b1:ee:1a:d9:f9:de:84:ee:4b:d0:99:2a:c2:1b:73:29:
ed:95:11:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055cBpWxljF0GLgn8m0H7KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjE0MjMwZGU5ZWZlYzYxMGZmZGQzMzllMGM0NDgwYjY4
YmFkNDUwHhcNMjYwMzI5MTQwMDUxWhcNMjYwMzMwMTQwMDUxWjAzMTEwLwYDVQQD
EygzOTk4OTkyYzgxOWJjYmViYjhmZDBiN2NhMTgxNjk0MjMxYjgyOWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArswvR7jXjUKa+sz9qnJrjzBwl1iA
IBcav4gT8OoQJExKnLs5LYRHjQwJs579QsoPRAcm89Yoa+DY8mEKw7sbvWcs7chz
q+uYDTqSLfQx1xI7lLIFGUMlQtZG2xrInVd/arV73Dx60S2kkZyrhyJq20lERlhn
APoQJ2mH1KvdsjZjrZaGzN+eMvgrgRxOeiDlQzJ212epJUZykXEKI4liLchUBrr0
/yPNhD0gpqQagk6ecbhlvLemBDpLxYhzqlHStjyy2Zi0FB3m3njy+RsCur9etT0W
HycJRF0np+lhkYN3wczP0giR/4e5ByXah+1Z0cNCwTrCIXXtUkEtTNjdrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmYmSyBm8vruP0LfKGBaUIxuCn1MB8GA1UdIwQY
MBaAFMzxQjDenv7GEP/dM54MRIC2i61FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80ODI2MzMtYzlhOS00NjMzLWIxMzgt
YTE3YjgyZTZkNzg2LzEvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80ODI2MzMtYzlhOS00NjMzLWIxMzgtYTE3YjgyZTZkNzg2
LzEvelBGQ01ONmVfc1lRXzkwem5neEVnTGFMclVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWgpzM9V
ixnViUYF4ssk8Qq2KEFDPtNtiDwEwnFzPtWbgA5XlggmbOsYe5pFIjTgBQQJ9uNg
PMNRgSuV1618k6hBIw8LCLltnkU07WMsxuhdYh+H50+oDu4prWafBlgjtY9/7q6l
61LBK8MOlkbmYYvQg9NK7DsBJ/cxTwJIM6fDPV2QZNJZ+mxl76GhzxXJ+mkBexee
NSNu/FJP70CRP9AEo+3Z829D7lzLFnrCg6QawIO+WjRXGh9fmCoJmCZnio2n8isJ
0nAz1zDHg9VccuAfJ5gGkg/7JWDCODyzNYfaUboEfnuZcZ/1bhqx7hrZ+d6E7kvQ
mSrCG3Mp7ZUR5Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:02 2026 by rpki-client