Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
File: zQzH_YiYsPffS53wuZMZvLKewkM.mft (raw, json)
Hash identifier: 7l+b723IyG4gMhtYX0jJ0Q1t5PbipLOP9pBK6fNVssc=
Subject key identifier: 5F:FA:EA:A7:51:D8:3C:74:BB:9A:E0:E7:9B:E5:2E:82:2C:C5:A4:6C
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial: 019D382E425F4F4F36A5019F28315FDF971B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:00:48 +0000
Manifest this update: Sun 29 Mar 2026 06:00:48 +0000
Manifest next update: Mon 30 Mar 2026 06:00:48 +0000
Files and hashes: 1: MHBYvDEfair8LMjjWldjlJSK4Kg.roa (hash: vmmrMoTWhgUvddV4vdbfGS7BdwqYfrrX4L+ZJDyj1ho=)
2: zQzH_YiYsPffS53wuZMZvLKewkM.crl (hash: hxtwhWn1hKRF4sTA1TKloLIxaQXcpsN2+2G2H5pd+J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:42:5f:4f:4f:36:a5:01:9f:28:31:5f:df:97:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Validity
Not Before: Mar 29 06:00:48 2026 GMT
Not After : Mar 30 06:00:48 2026 GMT
Subject: CN=5ffaeaa751d83c74bb9ae0e79be52e822cc5a46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:0f:b3:83:f9:19:8c:0a:0e:c4:73:1d:9b:
e3:74:58:52:96:72:aa:39:fd:96:91:00:fe:01:90:
21:51:f3:35:7a:b0:fe:d1:c8:28:4d:06:bc:8f:05:
cc:84:8f:32:a6:2d:59:c9:da:f6:d4:94:c8:10:44:
6a:24:62:de:a1:4b:1a:db:64:e0:9b:30:82:9a:7e:
11:93:eb:af:bf:6b:55:f1:96:59:94:c1:f0:dd:a0:
0a:df:72:28:59:ba:01:b3:0b:d5:9f:b3:45:4d:4a:
81:f6:e0:b1:75:7c:e4:17:d8:5f:12:28:38:56:39:
4a:5b:f6:cd:bb:8e:f7:97:3b:55:6c:04:fa:77:71:
95:a2:0f:ed:ed:ce:e8:e1:d6:0f:82:e3:28:46:dc:
bb:85:e2:67:07:90:05:06:91:45:9e:1d:c9:65:85:
90:c6:dc:07:60:3b:b9:e3:10:32:da:08:94:a5:7d:
c8:46:3d:fa:da:56:34:6a:2c:fc:9a:da:35:31:33:
24:f3:60:08:6c:3b:e5:60:a6:01:da:ad:7b:d6:f3:
69:a7:2a:9c:62:f2:2f:0e:d6:f7:6f:61:57:3e:9a:
ea:bc:b6:1a:62:b5:5c:c3:06:3e:fe:fd:00:6e:85:
ce:35:96:14:7d:bf:8a:9c:74:1b:c0:f8:5c:b9:5b:
ef:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FA:EA:A7:51:D8:3C:74:BB:9A:E0:E7:9B:E5:2E:82:2C:C5:A4:6C
X509v3 Authority Key Identifier:
keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:07:c0:bf:b0:dd:ad:11:3e:fd:8d:b4:1b:9f:50:36:68:6f:
d0:8e:e5:d4:5f:91:f7:da:7f:63:d6:61:0d:9a:82:71:63:31:
2a:60:9a:47:4e:bc:7b:60:64:d4:1f:6a:0f:89:17:50:0c:fe:
92:ad:92:be:c8:a7:b9:2c:a5:75:5f:75:18:39:01:40:ec:76:
29:79:ad:c7:c2:02:f1:f0:38:c8:dd:62:f1:06:74:1d:fe:77:
f2:87:25:17:b8:9d:7c:39:93:d4:bd:a0:08:2f:4e:f4:61:ab:
42:b6:58:68:03:9b:41:3e:56:45:67:9b:bf:8d:24:fb:f8:f1:
67:3b:79:75:94:9e:ac:4a:2f:2c:39:90:75:d7:76:d6:fe:f6:
12:32:58:0a:8c:77:55:fb:32:d6:43:f0:ef:75:7d:3b:77:38:
07:9a:f0:43:bb:e0:0e:0f:0b:2e:95:0c:38:cb:a7:96:fc:2d:
75:c3:53:8b:ba:2b:84:4a:77:bb:12:9f:7b:ef:1d:23:dc:c1:
aa:3a:aa:a5:25:e4:12:d5:f2:5d:a4:91:85:98:30:90:00:5b:
c2:10:3e:1c:f3:c7:5f:b9:ad:4b:23:0c:83:35:02:19:ae:e9:
ea:16:e8:65:c4:d8:30:20:28:19:18:92:c4:ca:a5:0e:bd:59:
3e:39:ec:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LkJfT082pQGfKDFf35cbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMGNjN2ZkODg5OGIwZjdkZjRiOWRmMGI5OTMxOWJjYjI5
ZWMyNDMwHhcNMjYwMzI5MDYwMDQ4WhcNMjYwMzMwMDYwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZmZhZWFhNzUxZDgzYzc0YmI5YWUwZTc5YmU1MmU4MjJjYzVhNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyUPs4P5GYwKDsRzHZvjdFhSlnKq
Of2WkQD+AZAhUfM1erD+0cgoTQa8jwXMhI8ypi1Zydr21JTIEERqJGLeoUsa22Tg
mzCCmn4Rk+uvv2tV8ZZZlMHw3aAK33IoWboBswvVn7NFTUqB9uCxdXzkF9hfEig4
VjlKW/bNu473lztVbAT6d3GVog/t7c7o4dYPguMoRty7heJnB5AFBpFFnh3JZYWQ
xtwHYDu54xAy2giUpX3IRj362lY0aiz8mto1MTMk82AIbDvlYKYB2q171vNppyqc
YvIvDtb3b2FXPprqvLYaYrVcwwY+/v0AboXONZYUfb+KnHQbwPhcuVvvlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/66qdR2Dx0u5rg55vlLoIsxaRsMB8GA1UdIwQY
MBaAFM0Mx/2ImLD330ud8LmTGbyynsJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOTlmZTctOWFiNy00NzNhLWI2MmEt
YWIwNjM5MzhmMWNlLzEvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8yOTlmZTctOWFiNy00NzNhLWI2MmEtYWIwNjM5MzhmMWNl
LzEvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQfAv7Dd
rRE+/Y20G59QNmhv0I7l1F+R99p/Y9ZhDZqCcWMxKmCaR068e2Bk1B9qD4kXUAz+
kq2SvsinuSyldV91GDkBQOx2KXmtx8IC8fA4yN1i8QZ0Hf538oclF7idfDmT1L2g
CC9O9GGrQrZYaAObQT5WRWebv40k+/jxZzt5dZSerEovLDmQddd21v72EjJYCox3
Vfsy1kPw73V9O3c4B5rwQ7vgDg8LLpUMOMunlvwtdcNTi7orhEp3uxKfe+8dI9zB
qjqqpSXkEtXyXaSRhZgwkABbwhA+HPPHX7mtSyMMgzUCGa7p6hboZcTYMCAoGRiS
xMqlDr1ZPjnsHg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:16 2026 by rpki-client