Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
File: znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json)
Hash identifier: X29yPBia7OJyiYUdZyRKVqxDi7YoHwR88RWJV0PIip8=
Subject key identifier: 59:A2:72:B0:31:96:94:7E:44:87:BA:D2:61:40:54:9D:D0:D6:3D:C0
Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Certificate serial: 019D37890FB6B972DD26F3CD00060650F10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 03:00:22 +0000
Manifest this update: Sun 29 Mar 2026 03:00:22 +0000
Manifest next update: Mon 30 Mar 2026 03:00:22 +0000
Files and hashes: 1: aSaj4x_eEi9R61JBcv_KlqSjEVo.roa (hash: e0WEFFwimfYALBRW6v2KlOISxXFOHzRtxX7qcK+LLls=)
2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: Swi9HWe45QT93zn8d7JIQzIKKJjmjlcI4+KG/S2c6DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0f:b6:b9:72:dd:26:f3:cd:00:06:06:50:f1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Validity
Not Before: Mar 29 03:00:22 2026 GMT
Not After : Mar 30 03:00:22 2026 GMT
Subject: CN=59a272b03196947e4487bad26140549dd0d63dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e6:18:d7:08:16:d5:46:a2:a9:c3:0b:cd:62:
42:3e:70:19:1b:d8:0e:5a:88:77:31:dc:75:4e:c7:
4d:b7:b1:2c:cb:87:1f:1f:ff:5e:af:41:9a:d5:db:
2d:f8:0a:b7:d9:1c:21:19:ae:52:07:83:ce:ad:3f:
f8:21:da:23:5a:c4:d7:b7:c9:1c:22:f6:28:bd:15:
55:24:32:4a:c0:f2:c4:a8:a6:10:1f:1b:a5:d7:3b:
1c:06:75:ee:c8:7b:fd:c4:fd:8c:1e:13:e7:82:a4:
d9:92:3e:fd:de:5e:56:0c:de:a3:b3:fa:2a:ce:ad:
e1:79:d7:0b:05:aa:56:3e:47:d6:18:68:b0:88:77:
53:d9:49:b9:7c:c7:e1:51:ce:c2:dd:0f:58:a2:41:
c1:e1:0c:48:8e:74:d2:84:24:01:2c:df:28:04:9c:
32:9f:7d:c1:75:3b:5d:ea:58:68:55:ff:f6:0a:c6:
cf:3b:c6:fc:df:6f:86:48:f0:b5:44:85:11:39:cc:
aa:b4:49:b8:f1:84:62:07:f7:a8:5f:f6:53:d2:08:
62:b9:2e:72:6f:56:04:c7:0b:0f:a7:eb:44:06:7f:
b7:65:1b:71:6f:f8:62:54:0e:80:09:c5:f2:38:26:
13:19:59:0f:0f:f7:57:82:7e:bb:a3:21:71:c4:ba:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A2:72:B0:31:96:94:7E:44:87:BA:D2:61:40:54:9D:D0:D6:3D:C0
X509v3 Authority Key Identifier:
keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:23:47:95:38:cc:ff:36:f1:b1:30:39:84:bb:e4:d1:96:88:
1f:eb:d5:58:d8:a7:74:8f:70:91:10:9e:0c:0b:27:1b:4b:3f:
e1:a4:8d:5a:4c:5d:8c:da:de:c5:1f:05:cb:fa:8b:6d:ef:8b:
26:cd:dc:23:92:83:2e:f8:a2:14:0f:9a:9f:92:4b:bb:83:96:
4e:17:45:a6:7d:12:ff:76:9b:28:ed:bf:c4:de:9e:a7:63:81:
1d:bc:a0:26:b3:aa:fb:34:5d:4d:f3:23:82:87:7c:be:2b:cb:
12:c7:b3:9a:3c:53:0b:1b:55:e2:99:af:0e:98:bf:7a:12:0e:
2b:d8:a0:49:02:75:ba:40:a3:82:ba:75:a8:8b:ad:16:ee:01:
06:76:86:a1:29:31:a8:80:9a:ce:e1:b7:92:a4:cc:f5:d6:4d:
b5:f3:0f:87:bc:a6:e5:5a:67:0a:e3:6b:a4:07:c8:eb:27:a6:
44:5d:15:4e:d2:58:e4:5d:52:91:1c:e3:d9:56:40:13:68:ef:
81:0d:d8:a6:01:f5:6d:33:8a:0d:e5:ab:09:15:b9:b4:1c:a9:
1a:06:c7:05:e5:a1:d1:8b:e9:c5:f7:d5:7d:e5:60:3a:e7:cb:
42:66:72:10:02:af:48:c9:7e:ee:14:68:2a:d0:4f:f4:ae:dc:
96:4c:e9:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iQ+2uXLdJvPNAAYGUPEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzBmZTY5OGU0ZGFlOWQ3YzMyYmMxNTZjNDE4MDY0ZmRj
ZmY0YjAwHhcNMjYwMzI5MDMwMDIyWhcNMjYwMzMwMDMwMDIyWjAzMTEwLwYDVQQD
Eyg1OWEyNzJiMDMxOTY5NDdlNDQ4N2JhZDI2MTQwNTQ5ZGQwZDYzZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eYY1wgW1UaiqcMLzWJCPnAZG9gO
Woh3Mdx1TsdNt7Esy4cfH/9er0Ga1dst+Aq32RwhGa5SB4POrT/4IdojWsTXt8kc
IvYovRVVJDJKwPLEqKYQHxul1zscBnXuyHv9xP2MHhPngqTZkj793l5WDN6js/oq
zq3hedcLBapWPkfWGGiwiHdT2Um5fMfhUc7C3Q9YokHB4QxIjnTShCQBLN8oBJwy
n33BdTtd6lhoVf/2CsbPO8b832+GSPC1RIUROcyqtEm48YRiB/eoX/ZT0ghiuS5y
b1YExwsPp+tEBn+3ZRtxb/hiVA6ACcXyOCYTGVkPD/dXgn67oyFxxLoIDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmicrAxlpR+RIe60mFAVJ3Q1j3AMB8GA1UdIwQY
MBaAFM5w/mmOTa6dfDK8FWxBgGT9z/SwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84NzViYTUtOGJiMS00OGFiLWI0N2Qt
ODFmZWEwZjc3Mjg2LzEvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84NzViYTUtOGJiMS00OGFiLWI0N2QtODFmZWEwZjc3Mjg2
LzEvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCNHlTjM
/zbxsTA5hLvk0ZaIH+vVWNindI9wkRCeDAsnG0s/4aSNWkxdjNrexR8Fy/qLbe+L
Js3cI5KDLviiFA+an5JLu4OWThdFpn0S/3abKO2/xN6ep2OBHbygJrOq+zRdTfMj
god8vivLEsezmjxTCxtV4pmvDpi/ehIOK9igSQJ1ukCjgrp1qIutFu4BBnaGoSkx
qICazuG3kqTM9dZNtfMPh7ym5VpnCuNrpAfI6yemRF0VTtJY5F1SkRzj2VZAE2jv
gQ3YpgH1bTOKDeWrCRW5tBypGgbHBeWh0YvpxffVfeVgOufLQmZyEAKvSMl+7hRo
KtBP9K7clkzpWg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:37 2026 by rpki-client