Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.mft
File: zH_FX_DsJGI0pOPK_maqzyg6j2k.mft (raw, json)
Hash identifier: 7i8LYuxClOzCb0oh4PYmAOLxFSbdnfkWx8DacC8SL2w=
Subject key identifier: 05:22:FD:8C:B6:83:CD:4F:6E:F5:57:68:30:BC:72:6D:40:CB:5F:9B
Authority key identifier: CC:7F:C5:5F:F0:EC:24:62:34:A4:E3:CA:FE:66:AA:CF:28:3A:8F:69
Certificate issuer: /CN=cc7fc55ff0ec246234a4e3cafe66aacf283a8f69
Certificate serial: 019D390A4840734C2696924DAB864880F67E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.mft
Manifest number: 010E
Signing time: Sun 29 Mar 2026 10:01:08 +0000
Manifest this update: Sun 29 Mar 2026 10:01:08 +0000
Manifest next update: Mon 30 Mar 2026 10:01:08 +0000
Files and hashes: 1: 4tHXUju7_s3qjkQe4-NIpaYhAJE.roa (hash: vN0diyZ4e6V+TpP4bUpaYl39s216dCxvp13J59q3eqM=)
2: zH_FX_DsJGI0pOPK_maqzyg6j2k.crl (hash: g+uu8yxbo0gxxuOwHEMeg5AtZ7kHTI9lzcgDtKrI7K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:48:40:73:4c:26:96:92:4d:ab:86:48:80:f6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7fc55ff0ec246234a4e3cafe66aacf283a8f69
Validity
Not Before: Mar 29 10:01:08 2026 GMT
Not After : Mar 30 10:01:08 2026 GMT
Subject: CN=0522fd8cb683cd4f6ef5576830bc726d40cb5f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:30:4c:6a:f3:a9:f5:ea:81:4c:05:32:54:
d3:8a:be:2d:3a:2c:5b:d8:4d:89:34:96:87:05:2d:
c6:fc:d2:0e:3b:7e:d3:ca:d3:9a:79:81:3e:84:25:
ef:09:9b:b8:d8:5c:12:9c:af:b1:a0:11:2e:f7:80:
17:f0:fd:15:99:af:58:9c:e7:d4:12:67:7d:57:ef:
b6:7b:55:4a:49:2d:2b:da:c0:5a:cc:e2:55:67:79:
32:32:60:5c:20:ee:06:b6:c0:11:28:25:d2:a5:95:
c7:2f:3d:5f:3e:6c:91:be:28:9f:9c:d1:00:f4:56:
67:da:fb:d8:87:c1:51:99:00:64:0e:c4:11:be:5d:
27:65:43:64:36:a4:59:cd:2c:08:95:99:c4:21:45:
1a:28:0d:de:dd:66:ab:d0:be:08:5c:4d:0c:a3:0f:
0b:30:71:52:c8:dc:17:d8:41:c5:00:04:86:dd:5c:
fc:69:f0:d8:af:a8:b4:95:a4:0c:dc:5a:11:54:fa:
e2:53:77:9a:d1:34:08:8d:4e:57:fe:71:22:7b:f0:
63:94:e2:7f:db:7e:4d:05:62:46:0f:a1:7b:76:d5:
1b:31:9f:80:5b:e2:db:96:f3:52:b8:35:76:e7:c8:
63:ce:a5:1a:9a:56:b2:4a:7a:8b:2f:47:7c:b4:49:
39:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:22:FD:8C:B6:83:CD:4F:6E:F5:57:68:30:BC:72:6D:40:CB:5F:9B
X509v3 Authority Key Identifier:
keyid:CC:7F:C5:5F:F0:EC:24:62:34:A4:E3:CA:FE:66:AA:CF:28:3A:8F:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zH_FX_DsJGI0pOPK_maqzyg6j2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/653128-5491-4594-980f-470d2b846393/1/zH_FX_DsJGI0pOPK_maqzyg6j2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bb:39:d9:c5:c4:11:3a:c6:89:da:b2:58:d3:72:08:c1:89:
a3:4c:72:30:47:2a:9e:f4:e2:75:e3:2f:53:71:2f:7b:4f:c8:
02:06:58:55:c4:67:46:ae:70:ce:ef:a8:b3:83:90:df:61:42:
32:c2:6d:7f:e4:94:1a:a3:12:99:dc:0a:ff:d7:1a:fe:db:36:
cd:ee:e1:ff:e0:7c:ae:cf:ee:f8:4e:fb:6d:1e:3a:96:91:c6:
2b:6d:16:5e:da:28:b3:4b:95:fd:35:bf:90:72:24:a7:7b:5d:
15:a7:dc:73:3c:de:ee:9d:08:b5:57:04:a3:17:a0:10:04:e1:
6d:2b:bc:be:d5:3b:70:95:06:25:e1:ee:3d:ad:41:3e:3d:b5:
97:4c:c8:e9:f5:2c:56:1d:98:a3:60:c9:f3:25:e2:2f:44:f6:
c4:d9:a7:f9:2a:b3:91:74:18:45:a9:8a:13:2f:f7:6f:b4:2e:
5a:89:49:a2:63:15:42:ee:ed:9f:e1:01:76:39:6a:13:04:65:
6d:1c:bf:fa:5f:b0:c6:f9:19:8e:52:b9:98:fc:2a:47:d1:9f:
74:00:76:e4:36:72:e5:f8:79:c5:06:40:20:34:80:fd:a4:f1:
e4:74:5f:92:bb:07:96:6c:28:f8:d3:39:5a:e4:4c:e6:95:3d:
8b:b0:7b:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CkhAc0wmlpJNq4ZIgPZ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjN2ZjNTVmZjBlYzI0NjIzNGE0ZTNjYWZlNjZhYWNmMjgz
YThmNjkwHhcNMjYwMzI5MTAwMTA4WhcNMjYwMzMwMTAwMTA4WjAzMTEwLwYDVQQD
EygwNTIyZmQ4Y2I2ODNjZDRmNmVmNTU3NjgzMGJjNzI2ZDQwY2I1ZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKYwTGrzqfXqgUwFMlTTir4tOixb
2E2JNJaHBS3G/NIOO37TytOaeYE+hCXvCZu42FwSnK+xoBEu94AX8P0Vma9YnOfU
Emd9V++2e1VKSS0r2sBazOJVZ3kyMmBcIO4GtsARKCXSpZXHLz1fPmyRviifnNEA
9FZn2vvYh8FRmQBkDsQRvl0nZUNkNqRZzSwIlZnEIUUaKA3e3War0L4IXE0Mow8L
MHFSyNwX2EHFAASG3Vz8afDYr6i0laQM3FoRVPriU3ea0TQIjU5X/nEie/BjlOJ/
235NBWJGD6F7dtUbMZ+AW+LblvNSuDV258hjzqUamlaySnqLL0d8tEk5TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUi/Yy2g81PbvVXaDC8cm1Ay1+bMB8GA1UdIwQY
MBaAFMx/xV/w7CRiNKTjyv5mqs8oOo9pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhfRlhfRHNKR0kwcE9QS19tYXF6eWc2ajJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82NTMxMjgtNTQ5MS00NTk0LTk4MGYt
NDcwZDJiODQ2MzkzLzEvekhfRlhfRHNKR0kwcE9QS19tYXF6eWc2ajJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82NTMxMjgtNTQ5MS00NTk0LTk4MGYtNDcwZDJiODQ2Mzkz
LzEvekhfRlhfRHNKR0kwcE9QS19tYXF6eWc2ajJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObs52cXE
ETrGidqyWNNyCMGJo0xyMEcqnvTideMvU3Eve0/IAgZYVcRnRq5wzu+os4OQ32FC
MsJtf+SUGqMSmdwK/9ca/ts2ze7h/+B8rs/u+E77bR46lpHGK20WXtoos0uV/TW/
kHIkp3tdFafcczze7p0ItVcEoxegEAThbSu8vtU7cJUGJeHuPa1BPj21l0zI6fUs
Vh2Yo2DJ8yXiL0T2xNmn+SqzkXQYRamKEy/3b7QuWolJomMVQu7tn+EBdjlqEwRl
bRy/+l+wxvkZjlK5mPwqR9GfdAB25DZy5fh5xQZAIDSA/aTx5HRfkrsHlmwo+NM5
WuRM5pU9i7B7Bw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:27 2026 by rpki-client