Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: Ai42TUtVaD8LqouqjTq2FWq0HGknHfkcUaqN00ZVRT8=
Subject key identifier: 38:EC:F3:6E:5E:35:41:B6:DB:FE:6E:A8:84:3D:47:28:B0:C7:F2:82
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 019DCFE2E86951F634355A839A8F85DC0EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0E28
Signing time: Mon 27 Apr 2026 17:00:47 +0000
Manifest this update: Mon 27 Apr 2026 17:00:47 +0000
Manifest next update: Tue 28 Apr 2026 17:00:47 +0000
Files and hashes: 1: L5oncHcGX0JZWhyPpUVkQ2HdCRo.roa (hash: L2Pt1ipLnJmpkz1LbVmvE4yLg/k+xc8UXnr+qSGpbXY=)
2: XfoYwouinwxpmsIiaKSE5Ihe3J8.roa (hash: qt4foYpy013TlPUVpgU1Ocj8R+P8zvuJGdKNUnqndOk=)
3: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: 68iW3apn1xdg8fqPIWWH5lfND7YcdqVQ5JL54rAcgeQ=)
4: j34AlrWJB9qIiT39tdgx6GORRPE.roa (hash: TLVwr6WxGYUdU6twEr0V8a4U4NI5yriKBDDpZ2ESBfY=)
5: l8pVdQcsPyvAv3HyaaD26uxVYS8.roa (hash: DQA293T0QyMdTSQE50m48vTaLc10PyZBH6Ba9LHMphE=)
6: lmALzp_C2hj8qDy6u9DneABNWCE.roa (hash: 0GPCM3inwnfBar+n/0nv3z67tNfW/VcLGbHgKFaiiwI=)
7: s1N5kDv4-SpOqan5hJxvvqdzfgk.roa (hash: G1JTBs4ptyy7NKoszv8bHZCq/4kKQ4/tpR/BQXAJYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e2:e8:69:51:f6:34:35:5a:83:9a:8f:85:dc:0e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Apr 27 17:00:47 2026 GMT
Not After : Apr 28 17:00:47 2026 GMT
Subject: CN=38ecf36e5e3541b6dbfe6ea8843d4728b0c7f282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:c0:f6:17:ad:31:b9:fa:46:95:cb:c8:eb:
f5:59:39:24:fe:88:2d:f2:e5:3c:c3:05:74:ac:cb:
da:e4:2a:9a:5c:4f:9d:86:00:20:9e:94:75:c8:0f:
ae:0e:5a:a3:c1:1f:05:98:99:fb:0f:75:b9:77:e7:
5a:10:2c:4f:85:d1:49:f9:c1:74:16:3b:44:77:4e:
6e:40:f6:66:fa:75:1a:e9:91:e3:38:14:63:c2:9c:
c1:5b:03:fa:c7:8b:16:87:7d:0e:72:7d:11:b6:2f:
90:98:3a:ae:12:b9:8a:73:f9:a2:61:3e:77:95:a4:
21:81:18:32:1c:e7:ab:bd:c5:35:01:ae:42:57:a5:
b5:72:47:39:e3:d4:bc:1f:06:bc:e5:d7:f0:4a:5e:
13:8a:97:e5:25:e3:ae:c2:fa:8e:33:a6:d8:24:68:
e3:b6:af:5d:f8:3a:a5:76:17:a2:30:d2:9c:58:08:
e3:70:89:e9:30:40:14:ec:52:f2:d0:34:de:c0:91:
1e:37:21:c6:c5:2b:c5:7b:54:be:02:a4:09:59:c2:
cb:f7:31:9d:25:32:9c:ae:62:30:d8:1e:df:58:c4:
30:90:74:6b:2b:44:c5:ad:4e:09:8b:aa:bf:0a:a9:
96:d8:08:e5:20:69:8a:a8:80:8d:05:30:99:6c:48:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EC:F3:6E:5E:35:41:B6:DB:FE:6E:A8:84:3D:47:28:B0:C7:F2:82
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e3:6c:20:e5:e4:20:a0:c6:9e:70:cc:2f:82:dd:e4:cc:54:
53:f5:8d:8f:b6:72:97:c7:c5:70:78:42:8b:0e:54:4d:b4:a6:
7b:df:c7:f9:a7:9d:46:e9:dd:2a:04:b5:9c:eb:fb:2d:12:c9:
f2:d6:45:8a:b1:25:bb:5e:c2:eb:c8:36:10:ef:72:49:d5:2e:
74:8c:3f:4a:ea:d7:f7:44:4d:66:76:ef:f0:03:d2:05:c3:46:
a4:22:0a:05:96:34:be:d1:14:76:20:e2:18:6e:d9:71:1e:8c:
8f:83:ae:88:80:41:0c:0d:92:7b:49:bd:39:33:1e:6f:e0:e1:
fd:4a:66:75:b1:27:9b:b4:6a:1a:d7:d2:2b:30:c6:fc:77:ac:
13:ad:bf:eb:24:d0:1f:11:6c:02:5c:b7:17:78:47:69:fa:8c:
1f:ce:3b:15:64:d3:5a:a2:08:a9:e4:a5:d8:d1:ba:25:d6:87:
5e:ab:e2:16:3a:6d:0a:ad:b5:5d:0d:e6:72:4e:38:dc:36:8d:
9b:57:f8:cb:48:da:31:60:0e:ff:96:fd:9c:58:61:26:7a:2f:
99:ff:c9:a4:cf:a5:e5:d4:33:cd:bf:c4:6e:97:2b:c0:09:93:
d2:9b:f0:49:af:53:b6:79:dc:7e:26:10:92:ed:c5:e0:14:80:
e6:4d:55:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P4uhpUfY0NVqDmo+F3A7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGYwMzNmNzgyZWFmMzJhYjA5MDg4Nzc1ZDY0YWM0Yjk0
YjViMTEwHhcNMjYwNDI3MTcwMDQ3WhcNMjYwNDI4MTcwMDQ3WjAzMTEwLwYDVQQD
EygzOGVjZjM2ZTVlMzU0MWI2ZGJmZTZlYTg4NDNkNDcyOGIwYzdmMjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVPA9hetMbn6RpXLyOv1WTkk/ogt
8uU8wwV0rMva5CqaXE+dhgAgnpR1yA+uDlqjwR8FmJn7D3W5d+daECxPhdFJ+cF0
FjtEd05uQPZm+nUa6ZHjOBRjwpzBWwP6x4sWh30Ocn0Rti+QmDquErmKc/miYT53
laQhgRgyHOervcU1Aa5CV6W1ckc549S8Hwa85dfwSl4TipflJeOuwvqOM6bYJGjj
tq9d+DqldheiMNKcWAjjcInpMEAU7FLy0DTewJEeNyHGxSvFe1S+AqQJWcLL9zGd
JTKcrmIw2B7fWMQwkHRrK0TFrU4Ji6q/CqmW2AjlIGmKqICNBTCZbEh1mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjs825eNUG22/5uqIQ9Ryiwx/KCMB8GA1UdIwQY
MBaAFGRPAz94Lq8yqwkIh3XWSsS5S1sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMt
NDkxNWZlN2Y5MmNlLzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMtNDkxNWZlN2Y5MmNl
LzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+NsIOXk
IKDGnnDML4Ld5MxUU/WNj7Zyl8fFcHhCiw5UTbSme9/H+aedRundKgS1nOv7LRLJ
8tZFirElu17C68g2EO9ySdUudIw/SurX90RNZnbv8APSBcNGpCIKBZY0vtEUdiDi
GG7ZcR6Mj4OuiIBBDA2Se0m9OTMeb+Dh/UpmdbEnm7RqGtfSKzDG/HesE62/6yTQ
HxFsAly3F3hHafqMH847FWTTWqIIqeSl2NG6JdaHXqviFjptCq21XQ3mck443DaN
m1f4y0jaMWAO/5b9nFhhJnovmf/JpM+l5dQzzb/EbpcrwAmT0pvwSa9TtnncfiYQ
ku3F4BSA5k1VSw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:26:01 2026 by rpki-client