Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.mft
File: zmSRf8O1HbiuDlu806YJTANB6S0.mft (raw, json)
Hash identifier: N66PS5XPeXFyyNu6YDw+G+uQ9uR+rH5Ic/DTHR8TyiQ=
Subject key identifier: 29:F8:AF:03:70:2E:08:54:04:1C:72:68:60:67:57:19:B7:C1:5D:69
Authority key identifier: CE:64:91:7F:C3:B5:1D:B8:AE:0E:5B:BC:D3:A6:09:4C:03:41:E9:2D
Certificate issuer: /CN=ce64917fc3b51db8ae0e5bbcd3a6094c0341e92d
Certificate serial: 019D382E5679AB18A9917F78CB8314F92C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmSRf8O1HbiuDlu806YJTANB6S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.mft
Manifest number: CE
Signing time: Sun 29 Mar 2026 06:00:53 +0000
Manifest this update: Sun 29 Mar 2026 06:00:53 +0000
Manifest next update: Mon 30 Mar 2026 06:00:53 +0000
Files and hashes: 1: OEf2lBJ_RBqJMmsQzdnnofJeh48.roa (hash: abuHlrBHXQkdM8/st+VwX7SzQ7cIYRuXZP6BjEevqBs=)
2: zmSRf8O1HbiuDlu806YJTANB6S0.crl (hash: P8txEIzvTBLvKfVjfy+htpLsbY4kFHsbldpHCpv/cgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmSRf8O1HbiuDlu806YJTANB6S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:56:79:ab:18:a9:91:7f:78:cb:83:14:f9:2c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce64917fc3b51db8ae0e5bbcd3a6094c0341e92d
Validity
Not Before: Mar 29 06:00:53 2026 GMT
Not After : Mar 30 06:00:53 2026 GMT
Subject: CN=29f8af03702e0854041c726860675719b7c15d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:40:ae:99:b9:5f:94:8b:6b:22:ea:c1:c0:
bc:00:9c:f2:ba:0e:6b:3c:66:4b:63:8e:e7:9a:9c:
0a:58:e7:12:51:ef:90:c4:0d:21:bb:e7:07:cd:95:
2d:cf:58:f6:84:9b:5f:2c:81:69:47:84:02:90:23:
92:b5:3f:be:8d:de:81:26:cd:82:9f:21:a1:b0:07:
c0:bb:eb:41:71:e6:6c:5c:80:62:66:18:f1:ed:47:
f6:76:17:1e:a1:34:7d:7a:a3:35:93:2a:72:c6:6d:
8a:31:a1:a3:95:77:6f:66:aa:5b:97:6f:27:e0:12:
8c:93:1e:5c:46:36:53:2e:83:85:f1:9a:b9:e2:c8:
37:1a:8c:78:ee:15:6b:54:23:ed:cf:71:94:e9:a7:
40:f0:de:83:fc:6c:9c:8b:1d:68:f6:d3:3a:a0:60:
53:36:8a:f5:06:0d:d4:8d:77:00:bf:d9:36:fa:61:
ea:48:b3:bc:0f:35:18:b6:3f:aa:8d:80:9c:36:7b:
79:3a:7e:1f:68:23:45:7b:4c:e1:b9:71:96:7c:e7:
67:02:7b:f8:8e:12:8d:4f:e8:48:bc:22:f8:3e:9c:
53:65:11:56:5e:a1:67:13:d6:0f:d6:c5:50:a6:05:
2d:ab:2d:c3:13:b5:91:02:a2:93:c8:9f:4a:bb:78:
0a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F8:AF:03:70:2E:08:54:04:1C:72:68:60:67:57:19:B7:C1:5D:69
X509v3 Authority Key Identifier:
keyid:CE:64:91:7F:C3:B5:1D:B8:AE:0E:5B:BC:D3:A6:09:4C:03:41:E9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmSRf8O1HbiuDlu806YJTANB6S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e54104-00c3-495e-a86c-07f3fbf4d13c/1/zmSRf8O1HbiuDlu806YJTANB6S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3a:4d:56:63:29:31:d9:6e:80:36:29:af:fa:4d:3d:94:35:
9e:45:c4:52:01:23:d7:4a:e9:47:60:26:49:18:bc:4f:ef:02:
3b:92:57:0f:a3:6a:9f:84:ee:1a:05:57:37:92:51:ba:4f:db:
d5:36:c9:8a:94:e5:28:81:a6:7c:27:c1:65:d1:ff:dd:38:c0:
36:3d:8e:46:0b:1e:dd:0f:99:90:f2:f9:bd:46:4c:5a:87:10:
6e:44:16:25:05:a0:03:6f:fd:29:bf:af:03:7f:0c:7c:77:00:
19:ea:c4:cb:9c:c2:62:e6:c0:79:73:d2:3b:b7:42:d5:92:56:
2a:34:4c:9d:1e:31:15:99:cb:2a:9e:26:4b:37:52:a6:1f:5e:
f3:44:fe:dc:72:ea:f0:9d:a8:12:a4:5b:3b:67:15:df:7e:02:
01:09:88:a3:19:da:0a:cb:4d:9b:f7:97:d9:47:ad:29:f7:6b:
25:4a:41:99:ba:32:1a:44:8e:d7:d3:8d:9e:d3:18:b1:19:00:
31:f2:a2:3a:a5:98:09:11:b3:eb:3c:96:82:e2:cd:a5:be:3a:
42:9c:c0:54:68:c2:e1:25:83:91:74:a9:0f:79:f0:68:e0:bc:
53:78:81:99:ac:0c:d4:56:0c:d2:59:09:4c:f3:c5:ad:8e:f2:
e1:94:73:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LlZ5qxipkX94y4MU+SwiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNjQ5MTdmYzNiNTFkYjhhZTBlNWJiY2QzYTYwOTRjMDM0
MWU5MmQwHhcNMjYwMzI5MDYwMDUzWhcNMjYwMzMwMDYwMDUzWjAzMTEwLwYDVQQD
EygyOWY4YWYwMzcwMmUwODU0MDQxYzcyNjg2MDY3NTcxOWI3YzE1ZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhtArpm5X5SLayLqwcC8AJzyug5r
PGZLY47nmpwKWOcSUe+QxA0hu+cHzZUtz1j2hJtfLIFpR4QCkCOStT++jd6BJs2C
nyGhsAfAu+tBceZsXIBiZhjx7Uf2dhceoTR9eqM1kypyxm2KMaGjlXdvZqpbl28n
4BKMkx5cRjZTLoOF8Zq54sg3Gox47hVrVCPtz3GU6adA8N6D/Gycix1o9tM6oGBT
Nor1Bg3UjXcAv9k2+mHqSLO8DzUYtj+qjYCcNnt5On4faCNFe0zhuXGWfOdnAnv4
jhKNT+hIvCL4PpxTZRFWXqFnE9YP1sVQpgUtqy3DE7WRAqKTyJ9Ku3gKOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCn4rwNwLghUBBxyaGBnVxm3wV1pMB8GA1UdIwQY
MBaAFM5kkX/DtR24rg5bvNOmCUwDQektMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem1TUmY4TzFIYml1RGx1ODA2WUpUQU5CNlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lNTQxMDQtMDBjMy00OTVlLWE4NmMt
MDdmM2ZiZjRkMTNjLzEvem1TUmY4TzFIYml1RGx1ODA2WUpUQU5CNlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lNTQxMDQtMDBjMy00OTVlLWE4NmMtMDdmM2ZiZjRkMTNj
LzEvem1TUmY4TzFIYml1RGx1ODA2WUpUQU5CNlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTpNVmMp
MdlugDYpr/pNPZQ1nkXEUgEj10rpR2AmSRi8T+8CO5JXD6Nqn4TuGgVXN5JRuk/b
1TbJipTlKIGmfCfBZdH/3TjANj2ORgse3Q+ZkPL5vUZMWocQbkQWJQWgA2/9Kb+v
A38MfHcAGerEy5zCYubAeXPSO7dC1ZJWKjRMnR4xFZnLKp4mSzdSph9e80T+3HLq
8J2oEqRbO2cV334CAQmIoxnaCstNm/eX2UetKfdrJUpBmboyGkSO19ONntMYsRkA
MfKiOqWYCRGz6zyWguLNpb46QpzAVGjC4SWDkXSpD3nwaOC8U3iBmawM1FYM0lkJ
TPPFrY7y4ZRzdw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:33 2026 by rpki-client