Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
File: zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft (raw, json)
Hash identifier: qUm80GlKdsVUBMSKXYQEXCUUcOJEXnw2LGhlYXe9cFs=
Subject key identifier: C2:05:69:44:40:96:09:1C:82:D9:4A:2E:DC:AB:A1:C9:8E:92:AE:ED
Authority key identifier: CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
Certificate issuer: /CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Certificate serial: 019D3A1CB24B72CB6AE09240140EFCE4574F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 15:00:52 +0000
Manifest this update: Sun 29 Mar 2026 15:00:52 +0000
Manifest next update: Mon 30 Mar 2026 15:00:52 +0000
Files and hashes: 1: cFxRCCQN4YXEL_mFbkEo5k1pnIo.roa (hash: 3gOkanUhjfYhiX9/Lx+CjQ0DSnaWLj1dJ1oGqbwVrl8=)
2: zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl (hash: Jv/YwUEWLjSjnlGlr/f+KoUbGvPrbIMO2u4XkzBm+1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:b2:4b:72:cb:6a:e0:92:40:14:0e:fc:e4:57:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Validity
Not Before: Mar 29 15:00:52 2026 GMT
Not After : Mar 30 15:00:52 2026 GMT
Subject: CN=c20569444096091c82d94a2edcaba1c98e92aeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:f8:14:06:eb:3f:51:21:68:08:70:77:e2:
1b:47:65:e4:8e:52:fe:17:b2:f4:53:1a:a7:d1:fe:
fc:61:1b:ab:b8:48:71:05:7b:0a:40:9a:ea:4d:34:
81:af:6e:29:73:bc:0a:c7:b8:f8:14:bd:dc:e7:d2:
ac:e1:f6:64:de:c2:7c:06:1d:1a:01:e3:f0:f7:fc:
5f:35:b9:1b:b5:ad:70:b0:64:90:71:dd:17:35:e8:
55:09:47:22:5f:1c:6a:29:24:95:2e:91:51:a1:f1:
4f:76:93:6d:34:60:74:eb:f0:6f:7a:06:d9:01:8f:
d5:5d:05:ff:c7:cb:fb:4f:e9:42:02:d0:38:49:8f:
c4:9d:20:d8:e7:6c:6f:1b:97:5a:02:0c:8e:bc:5b:
fc:45:6d:66:77:1e:9a:9a:a3:de:55:1a:6b:b7:e7:
87:79:0d:fb:7d:df:69:25:03:6e:6c:da:c5:b3:3b:
08:c8:84:ba:39:d0:1c:71:d8:97:3f:6b:28:fe:9e:
8d:e2:24:a5:b0:51:e9:8e:07:8e:87:64:22:57:04:
67:eb:28:96:eb:6c:c4:79:05:48:89:47:ce:5a:90:
32:d5:98:4b:38:4e:53:d2:28:b2:1d:bd:e8:19:42:
44:23:71:42:4e:d8:a2:b9:ba:28:27:c5:e1:b7:ca:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:05:69:44:40:96:09:1C:82:D9:4A:2E:DC:AB:A1:C9:8E:92:AE:ED
X509v3 Authority Key Identifier:
keyid:CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e0:e8:87:e9:14:8b:26:4f:6a:53:50:85:66:0f:e5:0b:53:
c8:fa:71:a6:8b:08:d4:19:c0:95:ee:e5:28:52:86:ef:5f:45:
b2:78:34:87:29:7f:0f:85:22:8a:e1:d9:ab:b6:c8:8e:1f:fa:
1e:85:20:b5:b9:43:a6:f3:f2:09:3a:fb:a1:e2:64:3a:1b:9e:
ae:df:5b:e5:78:f7:ea:9b:52:d8:3b:5e:51:7a:a3:98:7d:4b:
fc:0c:8b:d7:00:65:98:0d:e2:49:e7:32:eb:2b:e1:f0:6f:42:
3f:88:1b:8c:67:1e:a8:fd:45:3a:5f:2e:fb:7e:5f:29:7e:79:
29:6d:c4:4b:7b:8e:05:49:2c:4e:2d:71:14:c3:b4:04:2e:28:
13:b0:ce:3e:ed:49:a6:29:f5:b0:a0:b5:50:6a:c8:4f:1d:b7:
41:a0:06:90:6f:56:f2:b0:51:11:6e:15:7c:1b:d7:de:85:2f:
b3:80:2c:ca:d2:1d:cb:5f:f5:7c:4a:0d:2d:79:27:0c:fa:70:
12:2e:41:40:8a:fc:3a:b6:50:2d:62:51:43:f1:63:c5:4c:c7:
15:06:93:d1:fb:37:4f:5e:b9:8e:90:25:d0:df:b9:96:46:3a:
cd:6c:27:a9:26:c7:38:03:ad:54:85:ee:02:60:6d:1e:da:70:
42:f6:d4:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HLJLcstq4JJAFA785FdPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNzhiZmNlYjQxYmFmZWZjMDJmNzk1MmUxYWEyNDgwZTk4
NmYwMzcwHhcNMjYwMzI5MTUwMDUyWhcNMjYwMzMwMTUwMDUyWjAzMTEwLwYDVQQD
EyhjMjA1Njk0NDQwOTYwOTFjODJkOTRhMmVkY2FiYTFjOThlOTJhZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNT4FAbrP1EhaAhwd+IbR2XkjlL+
F7L0Uxqn0f78YRuruEhxBXsKQJrqTTSBr24pc7wKx7j4FL3c59Ks4fZk3sJ8Bh0a
AePw9/xfNbkbta1wsGSQcd0XNehVCUciXxxqKSSVLpFRofFPdpNtNGB06/BvegbZ
AY/VXQX/x8v7T+lCAtA4SY/EnSDY52xvG5daAgyOvFv8RW1mdx6amqPeVRprt+eH
eQ37fd9pJQNubNrFszsIyIS6OdAccdiXP2so/p6N4iSlsFHpjgeOh2QiVwRn6yiW
62zEeQVIiUfOWpAy1ZhLOE5T0iiyHb3oGUJEI3FCTtiiubooJ8Xht8omAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIFaURAlgkcgtlKLtyrocmOkq7tMB8GA1UdIwQY
MBaAFMx4v860G6/vwC95UuGqJIDphvA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMTVmNDctMWNlMC00ZWU1LWFhNGEt
MTI3MmQyYWI0M2Q4LzEvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMTVmNDctMWNlMC00ZWU1LWFhNGEtMTI3MmQyYWI0M2Q4
LzEvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguDoh+kU
iyZPalNQhWYP5QtTyPpxposI1BnAle7lKFKG719Fsng0hyl/D4UiiuHZq7bIjh/6
HoUgtblDpvPyCTr7oeJkOhuert9b5Xj36ptS2DteUXqjmH1L/AyL1wBlmA3iSecy
6yvh8G9CP4gbjGceqP1FOl8u+35fKX55KW3ES3uOBUksTi1xFMO0BC4oE7DOPu1J
pin1sKC1UGrITx23QaAGkG9W8rBREW4VfBvX3oUvs4AsytIdy1/1fEoNLXknDPpw
Ei5BQIr8OrZQLWJRQ/FjxUzHFQaT0fs3T165jpAl0N+5lkY6zWwnqSbHOAOtVIXu
AmBtHtpwQvbUnQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:42 2026 by rpki-client