Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: x1fPgp3Fr7l0hTewemeyb719Uill164HCvrL2y2NuWI=
Subject key identifier: 5C:24:04:31:D3:A8:B3:F2:E7:E6:F3:3D:37:ED:81:89:60:B2:57:40
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 019D38D372910FF3C5C1AEF85283086FA6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:01:14 +0000
Manifest this update: Sun 29 Mar 2026 09:01:14 +0000
Manifest next update: Mon 30 Mar 2026 09:01:14 +0000
Files and hashes: 1: 89g7xKjcRoLf08YN30kAkWgPW80.roa (hash: P8X4WuWL6NisJbBQ/NNr4p37Mppw9OurR9kU3npYcKM=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: 6lvuSWFxsJe8/nh5TDfz5NHPLlVqfksFLo/qeISHWYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:72:91:0f:f3:c5:c1:ae:f8:52:83:08:6f:a6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Mar 29 09:01:14 2026 GMT
Not After : Mar 30 09:01:14 2026 GMT
Subject: CN=5c240431d3a8b3f2e7e6f33d37ed818960b25740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:1e:de:20:46:45:75:0c:86:e7:9f:ec:35:
12:e5:08:6d:ca:3e:da:b6:66:d3:1d:77:76:2a:e9:
41:9e:9c:e2:68:1c:f2:44:df:19:c3:56:71:52:a3:
0e:b0:59:bb:55:67:7d:bc:85:b7:73:08:ab:2c:59:
aa:2f:d4:c3:a5:28:1a:c7:69:47:f1:af:52:28:1d:
93:02:cf:b6:16:40:18:c4:20:a3:88:6a:66:b7:c9:
8b:5f:6c:66:50:1b:bc:4b:78:1e:f0:34:21:70:d0:
bb:be:62:d6:a2:35:c4:94:82:92:fd:0d:98:01:ac:
53:fa:56:c4:ad:4c:16:5f:81:9f:a1:c0:1f:2d:bd:
8e:53:65:af:fa:a7:dd:0f:70:9b:9a:e7:ac:65:d9:
ee:2d:cc:62:d0:67:ed:5c:7f:20:e0:0f:e8:20:f3:
1f:b8:ff:0c:99:95:44:0b:76:dd:54:81:8f:88:47:
6b:46:e7:07:5a:8a:be:41:4c:0f:43:7c:ba:5e:f9:
3d:8e:6a:d3:2e:b5:d7:f4:7d:ba:32:dd:2f:c8:68:
28:32:e3:8a:10:a4:5d:6a:db:e4:ef:4f:98:86:c4:
14:78:b8:65:d1:94:28:6a:b9:2a:a4:23:d7:c5:e1:
c4:78:07:ef:07:a6:91:d6:69:4b:70:5a:96:3d:04:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:24:04:31:D3:A8:B3:F2:E7:E6:F3:3D:37:ED:81:89:60:B2:57:40
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9a:50:72:b1:2b:a2:e8:e7:6b:a8:7d:e9:46:ba:95:7d:9d:
48:0a:80:5c:91:4f:a1:35:be:ef:52:3e:89:28:40:56:3f:bf:
ac:01:91:cc:f1:82:d0:8e:72:ec:e2:1f:30:0c:95:75:cf:66:
1e:49:5c:11:1c:bb:be:d6:77:57:22:c3:6d:b3:a0:6d:44:7c:
c1:63:2e:01:69:ac:35:3f:55:5b:5b:47:8f:3d:bf:20:1e:4f:
de:0f:b4:7d:39:fa:b6:83:3d:8d:47:bd:7b:31:c4:85:74:2c:
e0:08:30:15:d1:8d:5a:68:1d:cd:80:a6:e6:6f:85:62:2a:e0:
e4:1d:00:8c:a8:f3:29:b4:4e:99:1a:01:0f:e7:78:c7:ff:35:
59:4f:88:54:de:59:2f:14:01:8f:7d:9b:50:45:76:59:8a:3f:
96:b8:4e:09:6f:0b:27:b5:63:1d:84:5b:c2:19:53:8e:1b:a8:
0e:cc:37:8a:9b:61:26:a2:9d:03:40:c6:f4:18:91:84:56:e2:
3d:f3:67:10:63:f5:e3:3b:4c:2e:61:53:19:88:90:a2:28:fe:
df:13:ef:ee:f9:74:5f:64:9c:52:b8:46:76:50:cd:1c:bc:27:
f7:06:0f:80:2d:82:9b:f6:81:1a:e8:ad:ca:75:7b:05:bd:f7:
0e:69:fa:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0403KRD/PFwa74UoMIb6ahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNGNhZjZhZWNjOGMzMTA3YjRiNzExNzRlYjI5OTc0ZTBm
ZDg1NWIwHhcNMjYwMzI5MDkwMTE0WhcNMjYwMzMwMDkwMTE0WjAzMTEwLwYDVQQD
Eyg1YzI0MDQzMWQzYThiM2YyZTdlNmYzM2QzN2VkODE4OTYwYjI1NzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAUe3iBGRXUMhuef7DUS5Qhtyj7a
tmbTHXd2KulBnpziaBzyRN8Zw1ZxUqMOsFm7VWd9vIW3cwirLFmqL9TDpSgax2lH
8a9SKB2TAs+2FkAYxCCjiGpmt8mLX2xmUBu8S3ge8DQhcNC7vmLWojXElIKS/Q2Y
AaxT+lbErUwWX4GfocAfLb2OU2Wv+qfdD3CbmuesZdnuLcxi0GftXH8g4A/oIPMf
uP8MmZVEC3bdVIGPiEdrRucHWoq+QUwPQ3y6Xvk9jmrTLrXX9H26Mt0vyGgoMuOK
EKRdatvk70+YhsQUeLhl0ZQoarkqpCPXxeHEeAfvB6aR1mlLcFqWPQQaLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwkBDHTqLPy5+bzPTftgYlgsldAMB8GA1UdIwQY
MBaAFM5Mr2rsyMMQe0txF06ymXTg/YVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAt
NzgxYWRhNmJlM2EwLzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAtNzgxYWRhNmJlM2Ew
LzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJpQcrEr
oujna6h96Ua6lX2dSAqAXJFPoTW+71I+iShAVj+/rAGRzPGC0I5y7OIfMAyVdc9m
HklcERy7vtZ3VyLDbbOgbUR8wWMuAWmsNT9VW1tHjz2/IB5P3g+0fTn6toM9jUe9
ezHEhXQs4AgwFdGNWmgdzYCm5m+FYirg5B0AjKjzKbROmRoBD+d4x/81WU+IVN5Z
LxQBj32bUEV2WYo/lrhOCW8LJ7VjHYRbwhlTjhuoDsw3ipthJqKdA0DG9BiRhFbi
PfNnEGP14ztMLmFTGYiQoij+3xPv7vl0X2ScUrhGdlDNHLwn9wYPgC2Cm/aBGuit
ynV7Bb33Dmn6sg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:46:09 2026 by rpki-client