Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: l8GJyDxssD8yQluC7LSmI2Dkjxbmsq/WMBItH+ZmeMs=
Subject key identifier: FD:49:F1:59:F8:42:CC:92:62:D3:E0:59:E6:A6:99:D2:EF:B4:25:FE
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 019E32CEA88AAAA8A822EDBDA953E13B9D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 190D
Signing time: Sat 16 May 2026 22:01:04 +0000
Manifest this update: Sat 16 May 2026 22:01:04 +0000
Manifest next update: Sun 17 May 2026 22:01:04 +0000
Files and hashes: 1: 24q9lVMraaNn4l78Un2euxMBmOs.roa (hash: MXilc6o86s0zd42plXsG4dYTHW3ZMvsoeOl29WStn9c=)
2: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: WIiPvMO0UR0HbrCWf1eKKwPIGnlkY5XJeXZ2X0Aur+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:ce:a8:8a:aa:a8:a8:22:ed:bd:a9:53:e1:3b:9d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: May 16 22:01:04 2026 GMT
Not After : May 17 22:01:04 2026 GMT
Subject: CN=fd49f159f842cc9262d3e059e6a699d2efb425fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:51:46:ee:c4:3e:bd:e6:fd:d8:a9:74:2c:
d2:be:be:5b:e3:13:7c:05:c5:43:4d:c2:15:09:05:
5e:b2:01:70:19:15:58:c9:11:44:5b:61:23:f6:dd:
d2:73:94:60:d6:c8:8e:30:f2:2d:32:fd:7c:e6:64:
09:45:5b:34:6f:32:66:72:36:9e:1f:dc:7f:c0:82:
a7:33:f5:9c:06:d5:a7:a4:58:76:f1:9a:9d:2d:e7:
42:7a:eb:e0:69:22:bb:8c:ef:c5:e8:c8:d8:8e:45:
5e:3d:ec:1f:87:9a:52:bb:64:de:bd:ce:91:a1:0c:
74:21:22:73:08:ad:25:29:f2:16:e5:52:52:c2:bb:
92:de:13:e8:03:68:16:f5:fc:1c:87:3c:02:51:3a:
38:ad:64:36:39:b8:65:29:e6:37:3b:dd:54:9f:cd:
3f:06:bd:53:2c:18:bd:a4:a5:ca:46:9b:55:71:fe:
ea:31:6e:dd:38:03:67:de:2f:64:cd:ee:a4:86:9a:
08:d3:68:c1:3e:c5:a4:95:e9:3d:04:5b:63:13:fa:
dc:e3:ec:49:97:32:f5:1e:bd:4e:f4:5e:16:f8:23:
79:6b:58:0a:f8:e5:f5:19:d5:f4:88:67:55:70:79:
63:82:37:83:67:36:ad:fc:ec:cc:71:87:a5:89:f9:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:49:F1:59:F8:42:CC:92:62:D3:E0:59:E6:A6:99:D2:EF:B4:25:FE
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:85:00:97:a9:68:f9:bf:f7:dd:0a:6d:04:a1:80:06:e0:4e:
b1:b0:f2:04:10:ff:70:4e:44:52:4a:e3:bd:5b:9b:c5:f4:27:
db:76:27:6a:59:5c:2c:e7:ef:45:7b:d1:a5:24:55:c5:88:db:
1d:46:f5:8c:dd:a8:19:ce:83:10:d7:c7:06:77:97:0b:28:28:
3b:ad:75:b9:2f:34:66:05:84:9a:01:98:c4:cc:21:e6:46:be:
3b:e9:01:21:87:9f:04:48:5f:18:fe:9a:05:a9:61:b7:5a:01:
26:98:49:5d:33:45:dc:c5:45:8e:89:09:33:bd:5f:43:e6:d9:
b4:b7:c5:c9:42:28:3e:96:62:fd:5e:92:8e:92:63:00:8f:da:
a2:75:e9:52:d2:5d:cf:ed:77:76:0f:f6:30:31:05:9e:b3:04:
1a:20:f6:19:4e:f8:89:14:11:5a:92:c5:38:35:be:d9:1d:55:
7c:c8:11:3f:23:0a:b1:c9:3b:a4:5b:49:96:b8:ef:db:82:e6:
a4:f3:50:3f:0f:62:02:1a:94:24:c7:2e:b4:47:0c:f1:26:d2:
a8:fc:cb:46:ce:b7:c0:cd:a2:0c:9c:5d:74:38:d0:cb:e0:01:
b1:d4:18:ac:7c:2f:76:55:25:bd:72:7a:8f:ee:48:47:df:1e:
2c:19:9e:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yzqiKqqioIu29qVPhO52YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzczMDE4ODNiZTBkMjFhYmQ5YzZjYzBiZDc1MDBhN2Fi
NDc5ODgwHhcNMjYwNTE2MjIwMTA0WhcNMjYwNTE3MjIwMTA0WjAzMTEwLwYDVQQD
EyhmZDQ5ZjE1OWY4NDJjYzkyNjJkM2UwNTllNmE2OTlkMmVmYjQyNWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC1RRu7EPr3m/dipdCzSvr5b4xN8
BcVDTcIVCQVesgFwGRVYyRFEW2Ej9t3Sc5Rg1siOMPItMv185mQJRVs0bzJmcjae
H9x/wIKnM/WcBtWnpFh28ZqdLedCeuvgaSK7jO/F6MjYjkVePewfh5pSu2Tevc6R
oQx0ISJzCK0lKfIW5VJSwruS3hPoA2gW9fwchzwCUTo4rWQ2ObhlKeY3O91Un80/
Br1TLBi9pKXKRptVcf7qMW7dOANn3i9kze6khpoI02jBPsWklek9BFtjE/rc4+xJ
lzL1Hr1O9F4W+CN5a1gK+OX1GdX0iGdVcHljgjeDZzat/OzMcYelifm9DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1J8Vn4QsySYtPgWeammdLvtCX+MB8GA1UdIwQY
MBaAFM93MBiDvg0hq9nGzAvXUAp6tHmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81ZjQyY2EtZTk3NC00ZWYwLTk2ZGYt
OGZkNjA4NTNjZGUwLzEvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81ZjQyY2EtZTk3NC00ZWYwLTk2ZGYtOGZkNjA4NTNjZGUw
LzEvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoUAl6lo
+b/33QptBKGABuBOsbDyBBD/cE5EUkrjvVubxfQn23YnallcLOfvRXvRpSRVxYjb
HUb1jN2oGc6DENfHBneXCygoO611uS80ZgWEmgGYxMwh5ka+O+kBIYefBEhfGP6a
Balht1oBJphJXTNF3MVFjokJM71fQ+bZtLfFyUIoPpZi/V6SjpJjAI/aonXpUtJd
z+13dg/2MDEFnrMEGiD2GU74iRQRWpLFODW+2R1VfMgRPyMKsck7pFtJlrjv24Lm
pPNQPw9iAhqUJMcutEcM8SbSqPzLRs63wM2iDJxddDjQy+ABsdQYrHwvdlUlvXJ6
j+5IR98eLBme/Q==
-----END CERTIFICATE-----
Generated at Sun May 17 06:08:38 2026 by rpki-client