Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: hKawY4DmfM86lfLTuWJJvGEXZIkMwo5e4tgmphHb6S8=
Subject key identifier: 96:08:E9:F5:D3:F6:78:FD:19:E2:EA:B5:81:50:7E:B6:90:88:D6:6E
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 019D3A1CD0200907D18CE963849FDEA7DF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 15:00:59 +0000
Manifest this update: Sun 29 Mar 2026 15:00:59 +0000
Manifest next update: Mon 30 Mar 2026 15:00:59 +0000
Files and hashes: 1: 98fyEBb-PIBiroCj51bzkd-V_i4.roa (hash: 2RN0v3XP/euGb82/ECdLfjWteqkCXDXBbJynvO0cBWE=)
2: y97Q2cCIA4p_jfA1RbOfelZQKOo.roa (hash: oRmoVnYM94QBjpHDaFRFV+BA4jZYdHdlmrs4oEppUqA=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: W2dRoyCY4xxHa8culy1ljot6l4QjDVQkKpqy//la0h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:d0:20:09:07:d1:8c:e9:63:84:9f:de:a7:df:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Mar 29 15:00:59 2026 GMT
Not After : Mar 30 15:00:59 2026 GMT
Subject: CN=9608e9f5d3f678fd19e2eab581507eb69088d66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:da:ea:16:18:76:3b:9b:1f:c7:59:20:05:
47:19:a2:64:00:52:08:8d:07:66:eb:d9:30:de:dd:
56:2f:45:2e:fd:e7:2b:8d:13:37:8a:5c:ef:76:ff:
44:58:7e:ca:41:62:20:73:3d:d0:c4:3e:60:ac:4a:
73:b7:4c:38:10:49:fe:c8:17:d2:f9:83:8b:25:59:
bf:94:24:c2:7f:ad:29:2c:0b:86:e9:94:30:95:a6:
9f:6b:74:50:a4:17:37:41:2d:43:95:47:df:af:1f:
f8:18:51:0d:7d:ef:f4:b5:90:4e:6c:a4:c9:f1:12:
ea:ba:70:76:f9:d5:0d:e4:e0:fc:90:6d:76:82:1a:
23:cd:32:37:98:91:3e:95:75:4d:34:b7:2f:1c:aa:
8e:76:d2:9e:f9:8a:a7:42:65:07:c2:0d:59:9b:9a:
30:1f:92:83:4e:70:59:35:f6:45:0a:87:71:7a:48:
c0:cd:fa:e0:17:13:a8:cd:6e:e6:af:1f:26:7b:5c:
5c:2f:a2:cb:13:c2:5c:c9:62:0d:73:69:01:3f:35:
94:25:c6:a9:fb:72:22:41:f0:cb:23:0d:3b:2e:60:
44:ed:27:27:47:07:53:b7:7e:d5:8d:f6:09:f4:f7:
f4:df:db:50:a7:93:00:d7:09:4d:b8:c5:3b:a6:5b:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:08:E9:F5:D3:F6:78:FD:19:E2:EA:B5:81:50:7E:B6:90:88:D6:6E
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a6:3e:62:f9:74:37:a2:8b:86:31:d2:3c:2a:88:cb:f4:73:
85:31:2c:dd:9b:f6:6e:8d:be:e9:48:04:1c:23:f4:1b:9f:59:
9c:3e:a2:68:d8:f3:23:3e:14:ed:ae:15:fd:3e:17:6a:36:16:
d5:68:ab:8a:bf:4f:ff:42:ac:7c:a6:e3:4e:ad:74:84:c3:20:
9a:62:7c:f4:24:52:ce:a5:d3:3c:9b:fd:47:ec:35:1e:43:0a:
9c:c4:ee:c2:c3:c6:2d:43:52:a4:88:f0:7b:c6:82:85:d5:d3:
8e:93:a6:09:0f:3e:8b:5e:00:9e:0e:33:e1:7b:0f:9d:5f:8f:
8b:4b:f1:a0:5a:75:a2:a3:74:7b:ca:4c:28:4e:25:8a:0c:c7:
6d:55:ce:83:ae:2d:13:55:2d:d1:e0:d4:0c:44:c6:e6:fb:21:
e3:89:44:aa:8f:1e:13:f2:50:8c:fe:ca:cb:5a:2e:e0:82:34:
57:6e:bd:aa:81:fb:22:a4:22:d8:54:c0:6f:0a:68:3a:b4:aa:
f1:ff:cb:60:b6:ec:52:db:bd:c4:ad:e1:dd:bc:a9:b9:fb:99:
f5:40:63:2e:be:b7:82:0f:64:d1:4d:3b:53:91:ed:64:b9:98:
2e:4c:58:d5:b7:53:68:50:94:c5:7f:e3:b7:6b:74:67:97:d5:
44:16:81:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HNAgCQfRjOljhJ/ep99sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDBkOTYyNDJiMDgyZWZlNWI0ZjIyNTg4MjBiMzA1OTM5
NjE5OGQwHhcNMjYwMzI5MTUwMDU5WhcNMjYwMzMwMTUwMDU5WjAzMTEwLwYDVQQD
Eyg5NjA4ZTlmNWQzZjY3OGZkMTllMmVhYjU4MTUwN2ViNjkwODhkNjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrba6hYYdjubH8dZIAVHGaJkAFII
jQdm69kw3t1WL0Uu/ecrjRM3ilzvdv9EWH7KQWIgcz3QxD5grEpzt0w4EEn+yBfS
+YOLJVm/lCTCf60pLAuG6ZQwlaafa3RQpBc3QS1DlUffrx/4GFENfe/0tZBObKTJ
8RLqunB2+dUN5OD8kG12ghojzTI3mJE+lXVNNLcvHKqOdtKe+YqnQmUHwg1Zm5ow
H5KDTnBZNfZFCodxekjAzfrgFxOozW7mrx8me1xcL6LLE8JcyWINc2kBPzWUJcap
+3IiQfDLIw07LmBE7ScnRwdTt37VjfYJ9Pf039tQp5MA1wlNuMU7plv4+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYI6fXT9nj9GeLqtYFQfraQiNZuMB8GA1UdIwQY
MBaAFMxA2WJCsILv5bTyJYggswWTlhmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYWE2OWYtZGI1NS00ZmJhLWJjZTkt
YzFlYmU2MTU0OWNjLzEvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYWE2OWYtZGI1NS00ZmJhLWJjZTktYzFlYmU2MTU0OWNj
LzEvekVEWllrS3dndV9sdFBJbGlDQ3pCWk9XR1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaY+Yvl0
N6KLhjHSPCqIy/RzhTEs3Zv2bo2+6UgEHCP0G59ZnD6iaNjzIz4U7a4V/T4XajYW
1Wirir9P/0KsfKbjTq10hMMgmmJ89CRSzqXTPJv9R+w1HkMKnMTuwsPGLUNSpIjw
e8aChdXTjpOmCQ8+i14Ang4z4XsPnV+Pi0vxoFp1oqN0e8pMKE4ligzHbVXOg64t
E1Ut0eDUDETG5vsh44lEqo8eE/JQjP7Ky1ou4II0V269qoH7IqQi2FTAbwpoOrSq
8f/LYLbsUtu9xK3h3bypufuZ9UBjLr63gg9k0U07U5HtZLmYLkxY1bdTaFCUxX/j
t2t0Z5fVRBaBig==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:06 2026 by rpki-client