Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
File: Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft (raw, json)
Hash identifier: pA3l8wMLVll47hEHShLC/7ARoFoiSXVSxzgSSj+oGIc=
Subject key identifier: 57:BE:30:5E:B9:75:C2:52:54:93:13:28:64:4A:E8:BD:1F:C7:11:A7
Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Certificate issuer: /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Certificate serial: 019D37C09BB12B768770C060EF9F8763E7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:01:02 +0000
Manifest this update: Sun 29 Mar 2026 04:01:02 +0000
Manifest next update: Mon 30 Mar 2026 04:01:02 +0000
Files and hashes: 1: 1xMZz9pSGq85vXf20FbCjYLr-kg.roa (hash: GLQz1TL8Rtkw2tIKftRi3ZiQjePeddOKBNexMBK6YVc=)
2: HEzbpkGlixMJMAH4xLJPiJ7HjDw.roa (hash: TdJqBEj+bob33O1NnFNh0HeCwlgemJTrTUX71e8Q5Ig=)
3: Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl (hash: hQYfYiOgIkl4w1b/WRlsqok+5W1CJKk22I3N0Hrx3oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9b:b1:2b:76:87:70:c0:60:ef:9f:87:63:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Validity
Not Before: Mar 29 04:01:02 2026 GMT
Not After : Mar 30 04:01:02 2026 GMT
Subject: CN=57be305eb975c25254931328644ae8bd1fc711a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:b1:d9:25:c9:61:e8:3b:89:cf:67:ea:66:
82:10:7f:f1:41:d5:7d:9d:1f:e3:60:9a:1b:e7:ab:
3f:e4:e1:e0:8c:00:42:1e:03:64:b1:52:0d:46:c8:
8b:97:d8:40:14:5f:ab:5b:95:41:3e:db:20:65:70:
48:3b:29:a1:d5:94:f8:9a:26:24:20:3a:24:0e:03:
e0:57:5c:37:e7:4d:3d:03:20:31:c6:a1:de:ea:f8:
5e:97:e6:70:ee:0d:68:d2:0c:91:d6:ba:e0:f8:dd:
16:88:0e:03:ff:b1:36:a6:b7:b7:d9:c9:f6:4e:c3:
ab:6c:5f:27:ab:4d:4d:b8:74:a0:b6:62:f4:9b:fb:
db:b8:8f:23:43:66:5f:04:e5:65:1b:ef:94:c8:27:
76:80:b9:b0:0c:99:50:38:e9:9d:c5:51:db:22:69:
c3:fc:ca:ae:bc:e4:ee:16:e7:92:0a:ee:03:c9:34:
e2:23:96:63:e8:e2:32:aa:e0:b9:b3:0c:4d:38:40:
17:60:07:2f:12:e6:13:52:45:3b:a8:b9:c0:70:62:
a6:e3:2c:71:a0:cc:eb:09:fe:e9:61:17:0c:df:77:
26:ff:76:b6:73:a9:87:d2:10:4f:d1:bb:1e:cf:44:
4f:35:12:7c:6e:f1:ee:32:ef:7b:48:f7:93:12:82:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BE:30:5E:B9:75:C2:52:54:93:13:28:64:4A:E8:BD:1F:C7:11:A7
X509v3 Authority Key Identifier:
keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ee:c7:f4:38:e4:f0:1a:87:29:f8:94:9a:33:63:ef:0b:0a:
45:35:6e:59:38:d3:54:67:13:f6:4f:e9:53:dd:a6:5f:bb:53:
4c:bc:b8:e0:c9:86:23:5c:15:8c:0d:d3:2f:10:e6:a4:60:6e:
3e:2b:41:b1:b3:7e:54:01:71:55:44:10:44:bb:58:63:50:1c:
1b:e9:e6:53:4b:f6:75:97:4a:59:42:35:77:65:0d:35:be:7b:
d2:b8:13:38:cb:bd:59:8f:ae:ae:fb:76:31:e9:8a:c9:cf:99:
13:88:ba:f4:54:79:df:ad:4f:c7:c3:b2:2b:d2:e7:d5:21:aa:
8c:6f:ca:53:25:40:71:78:c0:93:33:66:67:e1:0c:50:7e:35:
3d:f7:f6:de:32:d5:30:ab:02:96:d5:3f:26:1a:e6:53:e3:3a:
6b:59:5b:a7:cf:46:f4:0a:b6:5b:1f:c4:3c:a9:f3:eb:0e:3f:
b6:8a:aa:46:97:12:b1:be:81:58:27:47:72:f9:bf:4b:87:a0:
2b:e5:1c:09:49:f7:2a:0f:d8:ce:b4:82:75:04:21:5a:25:01:
9f:89:5f:70:6b:d4:6f:83:1f:1f:29:71:9a:0c:43:64:3c:32:
d1:c6:e3:00:54:11:2c:96:f3:05:50:55:dd:0d:81:23:a4:6c:
3a:85:a0:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wJuxK3aHcMBg75+HY+fAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZWRhZGM3NjVmYThmMmZhMTllYjIwOTYzY2Y1YmQyMzVk
MDFiNDMwHhcNMjYwMzI5MDQwMTAyWhcNMjYwMzMwMDQwMTAyWjAzMTEwLwYDVQQD
Eyg1N2JlMzA1ZWI5NzVjMjUyNTQ5MzEzMjg2NDRhZThiZDFmYzcxMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFux2SXJYeg7ic9n6maCEH/xQdV9
nR/jYJob56s/5OHgjABCHgNksVINRsiLl9hAFF+rW5VBPtsgZXBIOymh1ZT4miYk
IDokDgPgV1w35009AyAxxqHe6vhel+Zw7g1o0gyR1rrg+N0WiA4D/7E2pre32cn2
TsOrbF8nq01NuHSgtmL0m/vbuI8jQ2ZfBOVlG++UyCd2gLmwDJlQOOmdxVHbImnD
/MquvOTuFueSCu4DyTTiI5Zj6OIyquC5swxNOEAXYAcvEuYTUkU7qLnAcGKm4yxx
oMzrCf7pYRcM33cm/3a2c6mH0hBP0bsez0RPNRJ8bvHuMu97SPeTEoIaSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFe+MF65dcJSVJMTKGRK6L0fxxGnMB8GA1UdIwQY
MBaAFGftrcdl+o8voZ6yCWPPW9I10BtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NjNjNmMtMTNiZi00NDAwLTg0ODIt
MjFlMGE2NmQ1NDQ0LzEvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82NjNjNmMtMTNiZi00NDAwLTg0ODItMjFlMGE2NmQ1NDQ0
LzEvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARO7H9Djk
8BqHKfiUmjNj7wsKRTVuWTjTVGcT9k/pU92mX7tTTLy44MmGI1wVjA3TLxDmpGBu
PitBsbN+VAFxVUQQRLtYY1AcG+nmU0v2dZdKWUI1d2UNNb570rgTOMu9WY+urvt2
MemKyc+ZE4i69FR5361Px8OyK9Ln1SGqjG/KUyVAcXjAkzNmZ+EMUH41Pff23jLV
MKsCltU/JhrmU+M6a1lbp89G9Aq2Wx/EPKnz6w4/toqqRpcSsb6BWCdHcvm/S4eg
K+UcCUn3Kg/YzrSCdQQhWiUBn4lfcGvUb4MfHylxmgxDZDwy0cbjAFQRLJbzBVBV
3Q2BI6RsOoWghQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:14 2026 by rpki-client