Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier: 0YBtfezjGeciHK4G942vjSWYKOdKzqGM9ClR8A5qIO0=
Subject key identifier: D4:A9:D4:C4:39:E9:91:B6:54:6D:33:BA:36:67:DF:60:3D:1F:D8:35
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 019D390A1696DDF882E2DE84AD54ECA2E07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number: 1413
Signing time: Sun 29 Mar 2026 10:00:55 +0000
Manifest this update: Sun 29 Mar 2026 10:00:55 +0000
Manifest next update: Mon 30 Mar 2026 10:00:55 +0000
Files and hashes: 1: Kh2cfJTXoBgXnb5cU5bkPsfJ3G8.roa (hash: OIPaE117G5MhGem++zxKuvBio3gr+RNCi90er+bU030=)
2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: PWTPYARNdl3hpfoMgfzqkm6xj6Toy71XNPWwutLUWMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:16:96:dd:f8:82:e2:de:84:ad:54:ec:a2:e0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Mar 29 10:00:55 2026 GMT
Not After : Mar 30 10:00:55 2026 GMT
Subject: CN=d4a9d4c439e991b6546d33ba3667df603d1fd835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:97:22:76:21:92:91:24:af:3c:e4:bc:15:6c:
7e:b7:90:8c:62:d5:5e:6d:ae:80:cc:85:cb:b1:7f:
1c:27:a5:a9:73:42:31:a2:3e:26:9c:eb:d2:0f:65:
59:9b:0b:cb:81:97:bd:42:a5:c2:d9:a0:0e:f2:46:
d0:d5:37:d6:22:d9:80:f8:04:81:3e:2f:3b:81:e3:
a8:64:62:1d:1b:60:4c:19:c4:d5:3a:f6:50:0e:63:
ac:15:ff:05:44:b7:4c:03:97:d4:ac:6b:38:8c:99:
a0:d9:b5:47:d0:34:f7:e5:3e:05:1c:bb:9a:db:9c:
74:32:18:0a:e1:63:11:bb:38:d7:ea:28:82:aa:dc:
1d:ff:43:74:02:d0:57:ab:18:35:b8:f0:6a:98:9d:
52:b1:53:ef:e8:4a:dc:f0:f0:2f:2a:5b:1e:59:7d:
b2:18:81:09:5e:9a:af:13:5c:2c:ea:ff:ff:bc:78:
fa:84:8e:c3:28:b8:71:74:72:64:fd:48:b5:95:73:
30:61:3a:00:03:bf:34:89:f5:1c:b9:06:5e:db:79:
b9:fe:ba:5d:e7:8f:b4:25:d3:89:ac:08:d9:3c:ef:
8b:35:93:51:05:2a:a5:f7:4b:1a:ef:d7:5b:9a:23:
5b:06:fa:18:78:84:2a:d5:42:74:8c:34:4b:82:df:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A9:D4:C4:39:E9:91:B6:54:6D:33:BA:36:67:DF:60:3D:1F:D8:35
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4e:aa:1d:47:ed:c0:c9:39:7a:cc:3d:2e:58:d7:b2:9b:71:
f4:85:b4:39:ee:77:9b:6c:46:4a:dd:27:04:30:45:30:fd:4b:
19:2e:1b:fa:02:fa:c4:6a:e8:da:42:28:a3:96:d7:f2:2e:68:
a7:b3:2f:a4:5e:b2:91:1d:18:f2:97:08:4d:9c:a3:cc:82:b9:
65:84:e5:96:1a:bf:8f:e8:81:e6:09:cb:fe:10:b5:a9:e9:4b:
6c:aa:92:59:f3:10:4f:dd:74:91:32:ad:aa:50:89:0a:52:28:
d2:57:c6:9c:93:2c:42:73:24:11:df:0e:54:6f:52:bf:bf:99:
3a:0e:b7:b9:e1:70:15:33:d5:1d:dd:e3:99:73:dd:f0:af:35:
25:43:f3:46:4c:71:88:30:44:ab:46:c2:62:13:3e:18:49:62:
f3:a0:03:18:31:e8:6d:e6:ba:b5:a1:37:74:d7:c5:3c:b5:73:
10:68:59:91:a4:c2:27:9f:e8:de:7c:8a:7e:2f:a8:10:1c:4e:
24:ec:ef:50:00:36:55:84:60:5c:ea:a6:32:7d:a1:b1:3b:94:
7f:c0:3d:27:b5:0a:8e:fb:a5:b7:2a:3c:0f:3d:67:b8:31:66:
86:60:de:d1:f9:cf:9e:f5:ba:66:38:2c:0d:20:74:41:a3:a1:
f6:50:a1:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05ChaW3fiC4t6ErVTsouB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZjY2NTIyZjQwM2Q4Yzk5NGE0ODQ2ODI4NzA3OTk0MTdj
ZTFlODEwHhcNMjYwMzI5MTAwMDU1WhcNMjYwMzMwMTAwMDU1WjAzMTEwLwYDVQQD
EyhkNGE5ZDRjNDM5ZTk5MWI2NTQ2ZDMzYmEzNjY3ZGY2MDNkMWZkODM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JcidiGSkSSvPOS8FWx+t5CMYtVe
ba6AzIXLsX8cJ6Wpc0Ixoj4mnOvSD2VZmwvLgZe9QqXC2aAO8kbQ1TfWItmA+ASB
Pi87geOoZGIdG2BMGcTVOvZQDmOsFf8FRLdMA5fUrGs4jJmg2bVH0DT35T4FHLua
25x0MhgK4WMRuzjX6iiCqtwd/0N0AtBXqxg1uPBqmJ1SsVPv6Erc8PAvKlseWX2y
GIEJXpqvE1ws6v//vHj6hI7DKLhxdHJk/Ui1lXMwYToAA780ifUcuQZe23m5/rpd
54+0JdOJrAjZPO+LNZNRBSql90sa79dbmiNbBvoYeIQq1UJ0jDRLgt8C8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSp1MQ56ZG2VG0zujZn32A9H9g1MB8GA1UdIwQY
MBaAFKf2ZSL0A9jJlKSEaChweZQXzh6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MmQwZmUtY2M2ZS00MWQ5LTk2NDMt
YzVkMzYwZmNkZjBlLzEvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81MmQwZmUtY2M2ZS00MWQ5LTk2NDMtYzVkMzYwZmNkZjBl
LzEvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWU6qHUft
wMk5esw9LljXsptx9IW0Oe53m2xGSt0nBDBFMP1LGS4b+gL6xGro2kIoo5bX8i5o
p7MvpF6ykR0Y8pcITZyjzIK5ZYTllhq/j+iB5gnL/hC1qelLbKqSWfMQT910kTKt
qlCJClIo0lfGnJMsQnMkEd8OVG9Sv7+ZOg63ueFwFTPVHd3jmXPd8K81JUPzRkxx
iDBEq0bCYhM+GEli86ADGDHobea6taE3dNfFPLVzEGhZkaTCJ5/o3nyKfi+oEBxO
JOzvUAA2VYRgXOqmMn2hsTuUf8A9J7UKjvultyo8Dz1nuDFmhmDe0fnPnvW6Zjgs
DSB0QaOh9lChgw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:24 2026 by rpki-client