Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
File: zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft (raw, json)
Hash identifier: eE5x/w4vZlIgtdHA/yIB9/FN3t96LdS3kvKvGNIZXLQ=
Subject key identifier: 36:76:47:91:6C:F9:99:71:FC:94:02:6C:88:34:0F:70:5F:26:F9:94
Authority key identifier: CC:38:7A:84:04:12:33:1A:E1:91:3D:ED:D0:BE:A4:C6:19:B8:A7:30
Certificate issuer: /CN=cc387a840412331ae1913dedd0bea4c619b8a730
Certificate serial: 019DDC8CEE4A3703B9AEBD67ED7D90AB9B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
Manifest number: 99
Signing time: Thu 30 Apr 2026 04:01:56 +0000
Manifest this update: Thu 30 Apr 2026 04:01:56 +0000
Manifest next update: Fri 01 May 2026 04:01:56 +0000
Files and hashes: 1: qIYB0A4RSZN6LE7W59v3zP7y3P0.roa (hash: 5gqhlF6BkyZHYPK5fz4mRNQz3WRvXUePbuSTbTO9q8g=)
2: zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl (hash: xkTHM7vWtGTzFgO+oTAA2MWe7uqv4/tCru2mLIkYXGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 04:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:8c:ee:4a:37:03:b9:ae:bd:67:ed:7d:90:ab:9b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc387a840412331ae1913dedd0bea4c619b8a730
Validity
Not Before: Apr 30 04:01:56 2026 GMT
Not After : May 1 04:01:56 2026 GMT
Subject: CN=367647916cf99971fc94026c88340f705f26f994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:f5:ad:fb:33:03:66:4f:e7:74:28:7f:af:
2e:f6:21:50:7d:dc:6a:89:be:86:ad:60:4f:94:5f:
d7:ba:47:74:5e:a7:15:91:66:39:d6:54:61:bc:52:
f3:29:93:34:ec:15:e7:89:98:33:e5:25:15:f6:87:
a4:82:89:bb:1f:d4:1c:ff:22:0d:82:e2:f5:73:be:
0d:c9:d5:f5:f7:9b:69:28:00:d3:fd:c9:b2:03:40:
b7:7c:15:b6:0f:a6:59:c6:51:f7:00:88:8b:2e:78:
ab:fa:65:f8:35:c5:7d:55:a2:03:1d:53:ab:28:8a:
f0:75:78:91:b5:f0:93:25:b6:6f:8e:90:3d:6e:ff:
41:b9:a2:30:13:12:96:4c:d8:0b:4f:cd:fc:49:31:
3e:59:4f:78:9c:79:ff:49:bd:33:96:9e:f3:35:17:
15:e8:89:44:d7:ba:3d:98:ce:1f:c2:4a:34:29:b1:
60:91:3e:ee:9e:11:97:52:c1:b2:b9:a6:6a:cb:77:
f8:5e:8b:56:a6:8b:84:40:52:c5:de:6a:bb:a5:22:
1d:21:12:54:3e:5b:7a:58:0d:ca:4f:bc:d2:6f:85:
67:de:9f:58:bf:b5:39:c5:b9:98:43:d3:6e:e4:1c:
fa:5c:36:3f:4e:87:d9:ac:dc:b5:48:22:93:e6:ad:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:76:47:91:6C:F9:99:71:FC:94:02:6C:88:34:0F:70:5F:26:F9:94
X509v3 Authority Key Identifier:
keyid:CC:38:7A:84:04:12:33:1A:E1:91:3D:ED:D0:BE:A4:C6:19:B8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDh6hAQSMxrhkT3t0L6kxhm4pzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/zDh6hAQSMxrhkT3t0L6kxhm4pzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e3:f3:e2:9c:5e:94:99:bc:ed:6c:32:b3:1a:44:7a:91:ff:
b1:57:33:ed:e9:5b:4f:a0:b7:4d:30:75:ba:33:c5:8d:2e:0d:
ce:44:46:8d:9d:b3:b4:10:5a:2d:7e:81:67:ee:c4:49:e8:a9:
2e:a2:8b:99:43:62:1d:e1:89:84:0c:96:5d:b1:71:7c:d6:37:
70:fd:5d:6e:a4:09:e7:90:39:39:11:d0:fd:ee:c4:38:72:ac:
0e:8c:a1:a7:9d:e4:d1:c7:76:9e:0d:c6:23:ab:a3:16:5c:8a:
c1:c7:28:66:23:a7:82:18:52:1d:47:88:f1:ee:eb:ec:20:85:
63:cd:a2:cb:60:e1:a5:2d:fe:0a:40:66:4f:2f:79:9f:0e:09:
b0:9f:f9:c1:e7:05:d7:71:bf:19:59:29:0b:50:1b:b2:a7:ef:
ed:f5:ba:21:86:98:5a:e2:8f:22:26:8f:cf:60:32:9b:63:67:
02:5a:c4:ad:34:91:2d:aa:e0:14:55:b3:96:eb:e5:fb:dc:8e:
2c:e5:b6:cb:66:2c:ca:85:f4:6e:e4:7a:ea:bc:c1:90:36:de:
b0:d3:5e:81:53:ae:bd:bb:bf:07:8a:fa:c3:2c:4d:52:26:b6:
bc:83:40:e6:96:8b:b2:89:ba:e0:31:15:2d:cc:fb:21:76:29:
20:e0:14:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3cjO5KNwO5rr1n7X2Qq5tvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMzg3YTg0MDQxMjMzMWFlMTkxM2RlZGQwYmVhNGM2MTli
OGE3MzAwHhcNMjYwNDMwMDQwMTU2WhcNMjYwNTAxMDQwMTU2WjAzMTEwLwYDVQQD
EygzNjc2NDc5MTZjZjk5OTcxZmM5NDAyNmM4ODM0MGY3MDVmMjZmOTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDX1rfszA2ZP53Qof68u9iFQfdxq
ib6GrWBPlF/Xukd0XqcVkWY51lRhvFLzKZM07BXniZgz5SUV9oekgom7H9Qc/yIN
guL1c74NydX195tpKADT/cmyA0C3fBW2D6ZZxlH3AIiLLnir+mX4NcV9VaIDHVOr
KIrwdXiRtfCTJbZvjpA9bv9BuaIwExKWTNgLT838STE+WU94nHn/Sb0zlp7zNRcV
6IlE17o9mM4fwko0KbFgkT7unhGXUsGyuaZqy3f4XotWpouEQFLF3mq7pSIdIRJU
Plt6WA3KT7zSb4Vn3p9Yv7U5xbmYQ9Nu5Bz6XDY/TofZrNy1SCKT5q2P1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZ2R5Fs+Zlx/JQCbIg0D3BfJvmUMB8GA1UdIwQY
MBaAFMw4eoQEEjMa4ZE97dC+pMYZuKcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekRoNmhBUVNNeHJoa1QzdDBMNmt4aG00cHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wZjQxOWUtOTQyYy00YmM0LWE3NWQt
MmM3ZDE4MTJiYTNlLzEvekRoNmhBUVNNeHJoa1QzdDBMNmt4aG00cHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8wZjQxOWUtOTQyYy00YmM0LWE3NWQtMmM3ZDE4MTJiYTNl
LzEvekRoNmhBUVNNeHJoa1QzdDBMNmt4aG00cHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuPz4pxe
lJm87WwysxpEepH/sVcz7elbT6C3TTB1ujPFjS4NzkRGjZ2ztBBaLX6BZ+7ESeip
LqKLmUNiHeGJhAyWXbFxfNY3cP1dbqQJ55A5ORHQ/e7EOHKsDoyhp53k0cd2ng3G
I6ujFlyKwccoZiOnghhSHUeI8e7r7CCFY82iy2DhpS3+CkBmTy95nw4JsJ/5wecF
13G/GVkpC1Absqfv7fW6IYaYWuKPIiaPz2Aym2NnAlrErTSRLargFFWzluvl+9yO
LOW2y2YsyoX0buR66rzBkDbesNNegVOuvbu/B4r6wyxNUia2vINA5paLsom64DEV
Lcz7IXYpIOAUZQ==
-----END CERTIFICATE-----
Generated at Thu Apr 30 13:48:24 2026 by rpki-client