Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
File: zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json)
Hash identifier: e0ZLbTp7cGDjIcywlwHJsURkPURWEtSINX7BpcAfUbw=
Subject key identifier: DD:52:B2:38:B2:C3:38:C4:6E:91:25:BF:99:97:83:8E:9F:23:DD:EC
Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
Certificate issuer: /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Certificate serial: 019DCE639B6D92706B25D4688AADD43C68FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
Manifest number: 0F46
Signing time: Mon 27 Apr 2026 10:02:07 +0000
Manifest this update: Mon 27 Apr 2026 10:02:07 +0000
Manifest next update: Tue 28 Apr 2026 10:02:07 +0000
Files and hashes: 1: XFrg3fq27QCVqHQz_3WZ4-RTRVc.roa (hash: 8n6vVNKWwTijSBhZMmEVHz4L7ynm8ZDo8eSSws5BDgg=)
2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: Cbep7vlQs102jeOkkitu3aRD0ZlNBKYhPW5t/HOjhHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:9b:6d:92:70:6b:25:d4:68:8a:ad:d4:3c:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Validity
Not Before: Apr 27 10:02:07 2026 GMT
Not After : Apr 28 10:02:07 2026 GMT
Subject: CN=dd52b238b2c338c46e9125bf9997838e9f23ddec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:f2:a0:6c:88:db:e2:4b:01:00:f2:1b:1b:
25:cb:bc:11:e6:c6:4d:7e:70:03:6b:ae:25:8b:3d:
35:c1:2f:ec:6f:a7:3a:e2:e6:d4:91:7f:76:76:fa:
73:4d:cd:b8:d9:b4:ca:e3:46:f1:54:be:75:31:d3:
5b:a3:a7:26:aa:d8:20:57:a4:6b:d4:5f:27:44:c4:
df:7c:bc:a7:96:e6:14:f6:05:3e:2a:f0:a2:77:aa:
58:62:05:15:fb:a4:80:d5:b5:72:7d:24:3f:13:06:
5c:09:66:53:60:20:3d:12:a2:d0:c7:2d:1b:bd:1b:
ee:65:90:1d:65:c6:47:90:15:4c:a5:e4:52:e2:87:
5c:cb:db:b1:46:7c:07:e8:a3:c6:8d:b9:61:f5:b4:
e1:73:83:f2:7d:fc:4e:73:b1:f7:e2:08:b8:67:16:
ca:14:11:d4:85:43:7b:3b:53:df:1b:8f:eb:0f:c2:
ec:ff:ae:8f:67:05:ed:9f:57:a3:26:08:07:5a:47:
68:47:82:3d:e1:f4:4e:36:42:d1:cd:0b:d4:42:1b:
e6:a1:9b:42:14:76:e6:3a:5b:80:fd:80:2b:6b:4b:
f5:98:82:f8:92:3d:41:63:02:d3:2f:77:dd:95:83:
4d:af:4d:b5:60:f4:49:22:1e:e5:e1:2a:f5:42:20:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:52:B2:38:B2:C3:38:C4:6E:91:25:BF:99:97:83:8E:9F:23:DD:EC
X509v3 Authority Key Identifier:
keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fc:a8:7d:33:9c:e7:ab:3f:b6:3c:d8:d3:8e:7e:10:2c:23:
00:0f:64:02:e7:b2:f0:eb:02:bb:2c:ee:ee:8a:26:15:66:c0:
73:4d:22:eb:1e:b9:f7:7b:c5:0e:b7:05:70:88:b5:a4:79:84:
aa:aa:c1:b7:b4:8e:71:b4:27:4b:d2:93:93:a4:1f:3e:b2:3e:
47:ea:d7:fd:2b:f2:b3:e3:aa:97:22:81:22:fc:5c:85:3c:4d:
45:2a:8f:e4:b4:49:ba:ba:b4:c9:5d:3b:98:63:3e:fb:97:80:
47:be:90:91:16:91:9c:3e:99:ca:c7:a1:0d:57:06:82:47:d8:
0a:c5:0a:b4:1f:47:8e:a0:05:d3:35:bd:96:d7:bb:59:09:7f:
68:df:1e:ee:86:15:dc:79:fd:77:46:bf:7d:46:7c:a7:2f:1d:
ef:44:23:ae:f4:bc:4a:70:21:15:91:aa:f9:62:a7:76:01:9c:
f3:9a:15:f5:dc:bd:5d:ed:73:53:3f:6c:dc:f2:ec:41:86:e9:
c6:0c:98:0e:05:f7:4f:e0:8f:3b:91:5c:45:79:4d:dc:06:f6:
8f:7d:01:d1:d9:54:78:3d:b3:94:f3:90:1b:84:64:a0:23:c4:
e8:fc:e5:5b:8a:d1:0b:14:b0:4d:2f:72:1a:d9:99:e0:50:3c:
34:8d:88:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OY5ttknBrJdRoiq3UPGj6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOTc5OGE4ZGE5OTk5ZGRmNTNhM2M4ZDM4ZjM2ZjE3ZWNk
NDU0MzIwHhcNMjYwNDI3MTAwMjA3WhcNMjYwNDI4MTAwMjA3WjAzMTEwLwYDVQQD
EyhkZDUyYjIzOGIyYzMzOGM0NmU5MTI1YmY5OTk3ODM4ZTlmMjNkZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweLyoGyI2+JLAQDyGxsly7wR5sZN
fnADa64liz01wS/sb6c64ubUkX92dvpzTc242bTK40bxVL51MdNbo6cmqtggV6Rr
1F8nRMTffLynluYU9gU+KvCid6pYYgUV+6SA1bVyfSQ/EwZcCWZTYCA9EqLQxy0b
vRvuZZAdZcZHkBVMpeRS4odcy9uxRnwH6KPGjblh9bThc4PyffxOc7H34gi4ZxbK
FBHUhUN7O1PfG4/rD8Ls/66PZwXtn1ejJggHWkdoR4I94fRONkLRzQvUQhvmoZtC
FHbmOluA/YAra0v1mIL4kj1BYwLTL3fdlYNNr021YPRJIh7l4Sr1QiA1gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1SsjiywzjEbpElv5mXg46fI93sMB8GA1UdIwQY
MBaAFM6XmKjamZnd9To8jTjzbxfs1FQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM4NjQtNzE4Yy00MjE3LWFiNWYt
OThmY2IzYThiYzllLzEvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80YmM4NjQtNzE4Yy00MjE3LWFiNWYtOThmY2IzYThiYzll
LzEvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvyofTOc
56s/tjzY045+ECwjAA9kAuey8OsCuyzu7oomFWbAc00i6x6593vFDrcFcIi1pHmE
qqrBt7SOcbQnS9KTk6QfPrI+R+rX/Svys+OqlyKBIvxchTxNRSqP5LRJurq0yV07
mGM++5eAR76QkRaRnD6ZysehDVcGgkfYCsUKtB9HjqAF0zW9lte7WQl/aN8e7oYV
3Hn9d0a/fUZ8py8d70QjrvS8SnAhFZGq+WKndgGc85oV9dy9Xe1zUz9s3PLsQYbp
xgyYDgX3T+CPO5FcRXlN3Ab2j30B0dlUeD2zlPOQG4RkoCPE6PzlW4rRCxSwTS9y
GtmZ4FA8NI2IMw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:30:17 2026 by rpki-client