Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
File: zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json)
Hash identifier: znHZ6gBT4nGwTZLFUzBXgS1dEOAapXPWzjhd4I5UtXE=
Subject key identifier: 77:5B:8C:BE:16:57:2A:B4:0A:F7:BA:83:C3:B3:EE:28:B5:4F:79:DE
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial: 019D38D3CAF61BF7A3C5ED4BAEA831C3FCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
Manifest number: 0B17
Signing time: Sun 29 Mar 2026 09:01:37 +0000
Manifest this update: Sun 29 Mar 2026 09:01:37 +0000
Manifest next update: Mon 30 Mar 2026 09:01:37 +0000
Files and hashes: 1: Xp1_bdYXI9U3hQygHMzTkT43K1Q.roa (hash: lsd6lPp/ulgto4+3u4nnsXd9a7lg4D4o9xZaATfNY4Y=)
2: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: q7rrjHneu9/Xrup5avfCKU29LXMRDDOVWR/MOqDryGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ca:f6:1b:f7:a3:c5:ed:4b:ae:a8:31:c3:fc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Validity
Not Before: Mar 29 09:01:37 2026 GMT
Not After : Mar 30 09:01:37 2026 GMT
Subject: CN=775b8cbe16572ab40af7ba83c3b3ee28b54f79de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:03:86:74:8c:60:18:f9:14:60:86:31:01:
06:d6:de:f0:eb:3a:10:07:18:13:2a:8d:ff:01:90:
b4:8e:0a:00:e6:38:37:dc:cd:1e:8d:f3:ec:21:72:
df:b0:7e:ec:e6:9f:bc:f7:40:99:45:09:e3:f7:c5:
cf:74:15:c1:c5:3b:d6:53:f6:36:b7:0d:b8:72:44:
5b:9f:3c:dd:b5:e6:33:f2:a0:7d:c6:68:99:cd:00:
76:0a:fb:0b:97:5a:fb:ad:34:22:55:af:78:80:0e:
25:e0:c9:9a:b3:e6:5a:e8:6e:59:71:34:ff:23:e7:
a6:75:ef:7f:bb:c2:01:da:9b:f3:66:23:41:9b:bb:
d2:71:51:a3:32:e1:2d:08:1d:da:25:fb:f8:3f:c2:
8f:a1:88:95:79:35:ad:25:53:84:b3:0c:06:81:b2:
bb:76:13:07:82:ab:97:18:59:3b:83:64:b6:c4:f7:
39:d0:52:e0:01:04:f2:ee:0e:c1:6a:1f:14:a3:14:
d8:c9:8e:b1:1b:24:d7:54:7d:5e:57:33:b5:b0:9e:
ba:02:f9:45:4f:ec:56:3d:54:c4:3b:78:fb:e0:df:
24:3c:9d:32:c8:43:00:19:95:b6:ff:14:cc:30:dd:
27:81:f8:9a:de:69:d3:08:d2:9c:8d:57:1c:5e:e2:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5B:8C:BE:16:57:2A:B4:0A:F7:BA:83:C3:B3:EE:28:B5:4F:79:DE
X509v3 Authority Key Identifier:
keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7f:be:22:91:06:41:b6:7e:96:6e:7f:49:be:12:a4:2e:7b:
46:30:42:8f:cb:39:45:15:1d:7b:9f:8d:48:03:fa:7f:1a:01:
3c:e0:b8:04:40:aa:26:b6:ee:a2:5d:77:b9:f5:96:02:87:79:
1a:d1:b4:2e:19:f1:a8:5c:81:17:a5:bf:07:cb:e4:a3:fe:30:
c4:16:b8:c6:e2:60:84:19:75:fc:d6:af:6e:33:5a:ed:e8:67:
fc:42:43:bb:de:ce:38:67:20:11:b4:ee:d6:b7:a7:05:11:f6:
af:6f:73:da:08:a9:99:be:7b:d2:4b:07:79:52:cf:88:78:22:
14:88:84:bd:06:43:76:c1:94:c9:8d:c6:13:75:15:2e:bd:e4:
bc:b3:af:cc:98:2b:a3:9c:8d:9f:27:fa:38:68:10:57:4d:cd:
a5:5c:23:cc:90:fc:3a:81:25:de:eb:6e:25:e1:5e:07:69:21:
d4:db:83:de:18:5f:97:ec:a8:3c:df:6b:c0:7c:ab:94:0f:cc:
9d:c4:7c:c2:6a:b0:14:aa:a9:b4:92:55:36:d4:da:26:aa:74:
ac:b6:df:f9:40:62:90:75:c4:7e:f7:fd:3f:b0:79:a5:e6:9a:
32:df:89:8f:3f:86:e3:9b:cb:b8:fe:56:aa:3e:38:f9:79:5c:
31:39:7c:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0408r2G/ejxe1Lrqgxw/zjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjYyY2JkNmNmN2U4MDgyMjRmNmNmODcyNWUzNmUyYTk2
NTM1MmMwHhcNMjYwMzI5MDkwMTM3WhcNMjYwMzMwMDkwMTM3WjAzMTEwLwYDVQQD
Eyg3NzViOGNiZTE2NTcyYWI0MGFmN2JhODNjM2IzZWUyOGI1NGY3OWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZkDhnSMYBj5FGCGMQEG1t7w6zoQ
BxgTKo3/AZC0jgoA5jg33M0ejfPsIXLfsH7s5p+890CZRQnj98XPdBXBxTvWU/Y2
tw24ckRbnzzdteYz8qB9xmiZzQB2CvsLl1r7rTQiVa94gA4l4Mmas+Za6G5ZcTT/
I+emde9/u8IB2pvzZiNBm7vScVGjMuEtCB3aJfv4P8KPoYiVeTWtJVOEswwGgbK7
dhMHgquXGFk7g2S2xPc50FLgAQTy7g7Bah8UoxTYyY6xGyTXVH1eVzO1sJ66AvlF
T+xWPVTEO3j74N8kPJ0yyEMAGZW2/xTMMN0ngfia3mnTCNKcjVccXuJlLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdbjL4WVyq0Cve6g8Oz7ii1T3neMB8GA1UdIwQY
MBaAFM32LL1s9+gIIk9s+HJeNuKpZTUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUt
ODQ5NDE3YWU2MzRkLzEvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUtODQ5NDE3YWU2MzRk
LzEvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3++IpEG
QbZ+lm5/Sb4SpC57RjBCj8s5RRUde5+NSAP6fxoBPOC4BECqJrbuol13ufWWAod5
GtG0LhnxqFyBF6W/B8vko/4wxBa4xuJghBl1/NavbjNa7ehn/EJDu97OOGcgEbTu
1renBRH2r29z2gipmb570ksHeVLPiHgiFIiEvQZDdsGUyY3GE3UVLr3kvLOvzJgr
o5yNnyf6OGgQV03NpVwjzJD8OoEl3utuJeFeB2kh1NuD3hhfl+yoPN9rwHyrlA/M
ncR8wmqwFKqptJJVNtTaJqp0rLbf+UBikHXEfvf9P7B5peaaMt+Jjz+G45vLuP5W
qj44+XlcMTl89A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:58 2026 by rpki-client