Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: gQkuvwV+pbKQ7Cc/7SGQ6sMhXC+Xfo5YQ8EDlYehXwo=
Subject key identifier: 76:AF:8E:DA:63:A1:43:43:32:B9:D2:03:FD:E7:8D:90:B5:8A:C7:06
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 019D04E5A829081B575B938AE18028574C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 08AD
Signing time: Thu 19 Mar 2026 07:00:52 +0000
Manifest this update: Thu 19 Mar 2026 07:00:52 +0000
Manifest next update: Fri 20 Mar 2026 07:00:52 +0000
Files and hashes: 1: aESuuALkp9R98yDiNUY5nveL4-o.roa (hash: o135yeh0bwtH5IHdNJMNH9c/+RcrghX/j14puM1j2sk=)
2: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: ns1jXSMuf0ntAZnM82gRuuhhUC/l4b4uOhhnVqGUgaY=)
3: zp6kT4fjph_A7Z-y494w10c-4u0.roa (hash: WOnZMPb4q3t7/YEohAO+g25GuBKKPvaAblQVDeWj5K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:e5:a8:29:08:1b:57:5b:93:8a:e1:80:28:57:4c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Mar 19 07:00:52 2026 GMT
Not After : Mar 20 07:00:52 2026 GMT
Subject: CN=76af8eda63a1434332b9d203fde78d90b58ac706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:f3:a5:b8:76:be:68:72:94:ca:0f:d8:a4:
6e:5f:4f:4d:20:40:85:54:2f:f3:6b:76:78:52:14:
c8:84:6b:57:9e:e7:1b:94:24:a2:ea:be:8f:18:b9:
b4:d0:82:84:cd:16:b5:e2:12:e9:12:8e:1c:5a:8b:
99:2d:10:09:85:94:9d:38:e9:26:b4:8d:28:46:8e:
b9:83:4f:45:5b:41:84:a1:4d:48:fe:95:cf:80:69:
99:04:7a:a2:e0:10:68:d5:f2:c0:4b:66:14:53:c9:
11:c9:fe:69:ae:1b:52:dd:31:e4:c9:a7:75:44:45:
2e:aa:4b:0c:4c:79:8f:b4:b1:9e:ff:88:d9:88:9b:
e2:b6:6c:71:7a:66:9f:1b:a2:f7:0c:1f:0c:33:5d:
e0:30:49:6a:15:2a:a2:ed:fd:cb:f1:b8:9d:40:70:
27:dc:50:83:af:80:4b:f3:4d:a0:7d:28:52:ff:b1:
d2:6b:fc:34:be:83:85:c8:0c:4d:93:12:4c:66:b8:
69:02:2b:f7:05:24:79:bd:1c:e7:d8:02:53:c5:da:
a5:33:42:77:b7:93:81:ee:fb:09:9a:23:8a:c4:af:
cb:d7:96:d8:53:4d:a4:61:2e:e2:14:3a:a9:0c:af:
34:67:73:f9:62:30:65:f4:68:03:c5:b1:81:9a:78:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AF:8E:DA:63:A1:43:43:32:B9:D2:03:FD:E7:8D:90:B5:8A:C7:06
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a9:8e:af:7f:04:3d:d4:f3:b9:04:d2:4c:6b:13:ec:a2:b8:
65:eb:2e:11:98:00:46:a2:24:c7:e5:50:03:6e:02:58:5f:af:
b0:24:f4:bc:18:c6:4d:29:70:8e:06:c0:f3:95:e9:50:93:52:
65:ee:fa:a4:61:4c:83:83:a2:7f:00:ce:80:f1:75:1e:db:48:
41:f0:e0:43:d0:9d:ba:49:c1:8c:1a:62:3e:55:3f:e5:c6:c8:
8a:20:a7:8d:64:22:29:29:cb:59:d1:21:a0:d6:b8:dc:41:7e:
2a:8b:18:94:ae:8f:bb:de:96:f7:2f:d6:b1:e7:4d:da:fb:0f:
2c:96:ac:31:d0:8b:3d:0f:53:ee:4a:93:42:9f:d4:80:70:74:
1c:2c:49:5d:55:7e:25:b7:85:9f:df:49:b0:9d:cc:9f:0d:40:
90:de:db:e4:90:1b:36:3e:68:f5:8e:6f:0b:d4:0e:f3:87:9c:
da:4e:82:d1:ab:f4:8b:a7:d5:5d:e8:12:99:57:23:c3:fa:86:
31:33:9f:d5:f8:5e:ed:06:e6:45:9f:cc:c9:10:8f:f6:bb:e1:
58:50:b8:39:27:55:d1:34:10:59:2d:ef:50:c3:f3:dc:c7:02:
1e:a4:f3:3c:c1:5f:5b:c0:e9:5b:56:0e:76:7d:c6:b8:c9:9d:
15:fd:61:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0E5agpCBtXW5OK4YAoV0x0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZWZmZmMxNWE4M2EzOGJkZGE4Y2ZlMTIwYzMzNTI2N2Rj
ZTUwZjMwHhcNMjYwMzE5MDcwMDUyWhcNMjYwMzIwMDcwMDUyWjAzMTEwLwYDVQQD
Eyg3NmFmOGVkYTYzYTE0MzQzMzJiOWQyMDNmZGU3OGQ5MGI1OGFjNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBrzpbh2vmhylMoP2KRuX09NIECF
VC/za3Z4UhTIhGtXnucblCSi6r6PGLm00IKEzRa14hLpEo4cWouZLRAJhZSdOOkm
tI0oRo65g09FW0GEoU1I/pXPgGmZBHqi4BBo1fLAS2YUU8kRyf5prhtS3THkyad1
REUuqksMTHmPtLGe/4jZiJvitmxxemafG6L3DB8MM13gMElqFSqi7f3L8bidQHAn
3FCDr4BL802gfShS/7HSa/w0voOFyAxNkxJMZrhpAiv3BSR5vRzn2AJTxdqlM0J3
t5OB7vsJmiOKxK/L15bYU02kYS7iFDqpDK80Z3P5YjBl9GgDxbGBmnhoUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHavjtpjoUNDMrnSA/3njZC1iscGMB8GA1UdIwQY
MBaAFMzv/8Fag6OL3ajP4SDDNSZ9zlDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTct
NGJlYjVkZmYxNzAxLzEvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTctNGJlYjVkZmYxNzAx
LzEvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFamOr38E
PdTzuQTSTGsT7KK4ZesuEZgARqIkx+VQA24CWF+vsCT0vBjGTSlwjgbA85XpUJNS
Ze76pGFMg4OifwDOgPF1HttIQfDgQ9CduknBjBpiPlU/5cbIiiCnjWQiKSnLWdEh
oNa43EF+KosYlK6Pu96W9y/WsedN2vsPLJasMdCLPQ9T7kqTQp/UgHB0HCxJXVV+
JbeFn99JsJ3Mnw1AkN7b5JAbNj5o9Y5vC9QO84ec2k6C0av0i6fVXegSmVcjw/qG
MTOf1fhe7QbmRZ/MyRCP9rvhWFC4OSdV0TQQWS3vUMPz3McCHqTzPMFfW8DpW1YO
dn3GuMmdFf1hjA==
-----END CERTIFICATE-----
Generated at Thu Mar 19 14:08:15 2026 by rpki-client