Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: d6SHzdoNltjjHycbYwjceqZNN+Y0rlo/tZYp2fFE7QU=
Subject key identifier: CE:48:5B:F4:0E:8F:9B:83:F0:38:6C:19:8D:62:CB:39:7F:E3:3F:CD
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 019D3866B079E2881E2A6259D3F2FD77D288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 0E3D
Signing time: Sun 29 Mar 2026 07:02:27 +0000
Manifest this update: Sun 29 Mar 2026 07:02:27 +0000
Manifest next update: Mon 30 Mar 2026 07:02:27 +0000
Files and hashes: 1: QOvuUL6JmFjMR4OHkrweykbMl00.roa (hash: APm5d1yLpYTNVNqcU55k9Dr295k8B4YAIygsX75/UWA=)
2: TF8KSi-DuhED0p9n9N5dVWabzRk.roa (hash: 39Z2dsiv//rq6lSkgmQdDk1aolP4R2gp4zSwQSQYE8w=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: xUk5UylKIfQF84luTDS4pe0zWtPEtSeof89DtYnxFGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:b0:79:e2:88:1e:2a:62:59:d3:f2:fd:77:d2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: Mar 29 07:02:27 2026 GMT
Not After : Mar 30 07:02:27 2026 GMT
Subject: CN=ce485bf40e8f9b83f0386c198d62cb397fe33fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fa:3b:89:4d:41:ce:a8:a2:1e:94:01:1c:47:
0e:cb:77:4b:4a:ad:7a:83:42:25:76:86:1b:a0:7e:
ae:c1:20:71:81:99:55:2e:8c:88:b7:60:a9:f7:27:
c9:62:0c:2f:46:5f:71:f9:24:18:c3:7c:0e:74:1d:
83:b3:1d:c7:c1:76:d3:22:ca:58:7f:8f:de:c4:90:
82:93:fa:55:e4:29:b5:6e:99:7c:4d:59:a8:39:cc:
74:cc:f6:a1:6d:d1:56:f8:db:dc:53:f5:4d:17:bf:
c9:12:94:4a:69:7c:fc:6b:f2:47:9a:7c:19:1c:8f:
fc:c2:d6:ae:4f:e6:ca:bf:07:86:8e:6e:31:c6:07:
dd:b6:9a:e9:0f:1e:09:81:39:b7:2b:ef:df:94:13:
27:97:27:93:3d:c6:f0:ec:f0:15:2a:61:ff:04:9b:
8a:5c:6d:6e:25:48:af:bc:78:e9:1d:50:b0:40:ec:
81:1f:d7:7a:01:18:9f:9a:fe:fa:f7:53:f6:23:2c:
8a:b8:1b:9f:93:57:96:1c:37:df:05:46:5d:4d:fd:
55:01:e5:31:6f:0c:a6:c2:37:6b:a3:52:7a:e5:8d:
d8:8c:ac:be:ae:b9:21:5f:ba:7e:03:27:ac:ca:30:
19:54:fc:5c:41:3c:0a:6e:21:dd:f7:eb:be:13:fb:
69:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:48:5B:F4:0E:8F:9B:83:F0:38:6C:19:8D:62:CB:39:7F:E3:3F:CD
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:95:bf:a3:68:a9:e2:58:3d:88:f2:fa:56:ad:44:bc:76:85:
5e:2e:4b:60:fd:36:44:58:84:b5:ef:a9:72:17:81:4e:7e:f2:
a9:85:d7:1a:77:57:56:aa:47:4a:57:a6:6c:0f:8f:e8:a2:23:
5e:24:dd:b0:5d:05:18:51:48:99:d3:db:01:d2:15:e1:63:d9:
d7:af:f2:19:77:90:be:0f:2e:a8:61:65:f7:b8:f6:71:db:48:
76:32:92:a7:c6:45:b5:d5:03:4b:05:8e:b3:f5:e6:7c:23:46:
b6:55:86:1a:9f:2d:46:31:1d:b7:e6:aa:99:d0:5b:87:f4:d5:
67:7b:f8:a4:81:d1:67:bb:d2:e1:c7:f2:34:6b:a2:41:26:5b:
10:a5:38:1a:dc:88:cf:f8:86:66:4e:a2:a0:a7:69:4f:7c:5f:
e2:d8:8e:bf:fd:12:d1:6b:a4:5b:2b:26:1a:b3:52:82:5c:9e:
c7:24:e3:77:7e:97:1b:4b:e5:97:29:49:01:f9:82:72:6b:32:
19:65:69:62:6d:04:bf:2a:7e:97:a0:46:8f:45:1e:e4:4c:0d:
8e:a4:8d:2a:cb:a7:1e:f0:58:67:bb:77:4a:6a:a1:aa:b8:25:
15:9a:3b:9f:87:05:c3:97:d3:c9:35:b4:89:54:b0:fa:4b:ce:
bd:70:d6:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZrB54ogeKmJZ0/L9d9KIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNjUzMjY0OWE2YWVmNDcxNDg0MWI5YzhmNTQ2NjBkODg5
YjA2MjkwHhcNMjYwMzI5MDcwMjI3WhcNMjYwMzMwMDcwMjI3WjAzMTEwLwYDVQQD
EyhjZTQ4NWJmNDBlOGY5YjgzZjAzODZjMTk4ZDYyY2IzOTdmZTMzZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fo7iU1BzqiiHpQBHEcOy3dLSq16
g0IldoYboH6uwSBxgZlVLoyIt2Cp9yfJYgwvRl9x+SQYw3wOdB2Dsx3HwXbTIspY
f4/exJCCk/pV5Cm1bpl8TVmoOcx0zPahbdFW+NvcU/VNF7/JEpRKaXz8a/JHmnwZ
HI/8wtauT+bKvweGjm4xxgfdtprpDx4JgTm3K+/flBMnlyeTPcbw7PAVKmH/BJuK
XG1uJUivvHjpHVCwQOyBH9d6ARifmv7691P2IyyKuBufk1eWHDffBUZdTf1VAeUx
bwymwjdro1J65Y3YjKy+rrkhX7p+AyesyjAZVPxcQTwKbiHd9+u+E/tp7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5IW/QOj5uD8DhsGY1iyzl/4z/NMB8GA1UdIwQY
MBaAFMxlMmSaau9HFIQbnI9UZg2ImwYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2Mt
NjQ4ZjUwMWFmYWU1LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2MtNjQ4ZjUwMWFmYWU1
LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpW/o2ip
4lg9iPL6Vq1EvHaFXi5LYP02RFiEte+pcheBTn7yqYXXGndXVqpHSlembA+P6KIj
XiTdsF0FGFFImdPbAdIV4WPZ16/yGXeQvg8uqGFl97j2cdtIdjKSp8ZFtdUDSwWO
s/XmfCNGtlWGGp8tRjEdt+aqmdBbh/TVZ3v4pIHRZ7vS4cfyNGuiQSZbEKU4GtyI
z/iGZk6ioKdpT3xf4tiOv/0S0WukWysmGrNSglyexyTjd36XG0vllylJAfmCcmsy
GWVpYm0Evyp+l6BGj0Ue5EwNjqSNKsunHvBYZ7t3SmqhqrglFZo7n4cFw5fTyTW0
iVSw+kvOvXDW8w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:11 2026 by rpki-client