Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
File: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json)
Hash identifier: 1PGee3JDOlJ+s719pPXZnsd+QRsdGk4SjoXbpX5USp8=
Subject key identifier: E2:F6:DC:8C:CE:ED:C3:20:1C:81:88:4A:3C:DE:AA:F4:6B:C2:F2:A5
Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
Certificate issuer: /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Certificate serial: 019D3909E36949255286CA8C7B1D1748EC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
Manifest number: 120D
Signing time: Sun 29 Mar 2026 10:00:42 +0000
Manifest this update: Sun 29 Mar 2026 10:00:42 +0000
Manifest next update: Mon 30 Mar 2026 10:00:42 +0000
Files and hashes: 1: 2Lj6KAHa7H9f4SxUIEO7Uz1pweY.roa (hash: gFIOx1qhwOYwQbgborzlAfR9qq8vv6N65dglePA77l4=)
2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: wv4A5xigoNMfYG5uMXyJASktOjnO+zH7/lnjmitudpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e3:69:49:25:52:86:ca:8c:7b:1d:17:48:ec:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Validity
Not Before: Mar 29 10:00:42 2026 GMT
Not After : Mar 30 10:00:42 2026 GMT
Subject: CN=e2f6dc8cceedc3201c81884a3cdeaaf46bc2f2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:07:b0:cc:21:c7:4d:d0:fd:81:2d:39:2c:
9a:2d:24:41:da:2f:f4:f9:78:cd:d8:9a:be:f9:49:
05:05:ce:db:62:c3:22:94:ab:d4:ce:f8:74:80:dc:
b1:2a:c0:ca:da:d9:71:83:34:26:10:95:a9:61:a4:
55:7d:f9:e6:8a:8d:62:47:41:c4:07:19:ba:7f:fc:
31:af:af:94:96:c9:15:95:38:2e:be:71:0f:40:36:
c0:84:19:d7:3b:4b:c1:a8:fa:50:88:0a:25:51:33:
ab:a9:b7:4a:73:ce:6e:60:ce:4f:9c:99:c5:67:c6:
81:79:50:d8:6f:95:a9:62:76:4c:da:bb:58:67:e7:
ff:1a:ce:b4:c6:8e:9c:82:9b:a9:75:72:6b:e7:42:
12:d6:d0:5a:66:73:09:e8:09:f7:5e:59:ca:c1:2c:
4a:9a:a9:3d:5b:e1:6b:33:4c:88:45:b4:c5:f3:a2:
07:2f:eb:84:12:9e:e8:f1:ab:a3:7d:1a:7d:96:79:
2e:f1:bb:77:4e:04:5a:d4:c5:58:5d:9d:86:01:19:
d3:e1:cf:bf:bd:66:28:42:ee:f1:85:36:cf:31:33:
5f:9c:58:5a:4f:5a:04:db:cf:6e:0f:b3:70:b6:0a:
9d:d0:d5:51:64:85:6a:0c:d0:f2:a2:85:cd:45:ae:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F6:DC:8C:CE:ED:C3:20:1C:81:88:4A:3C:DE:AA:F4:6B:C2:F2:A5
X509v3 Authority Key Identifier:
keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7e:be:6f:96:85:07:cf:4e:af:d6:14:ba:f5:45:dd:c3:65:
14:a8:68:b8:c9:f5:d4:ac:52:df:2f:48:a8:8b:77:3f:fd:f6:
a1:8b:80:1c:79:7c:ce:30:4c:9f:ad:ab:9a:a4:0f:75:b2:19:
a4:d4:48:d6:1d:f6:5c:39:fd:83:c9:73:91:36:b4:9e:7a:9f:
0d:5c:4b:c6:7c:bd:a2:5c:30:4c:b3:f4:f9:b6:13:1f:06:6e:
07:2c:fb:1b:ce:9b:96:d2:a3:02:b7:70:3e:3d:7b:55:25:25:
0e:3e:c5:e7:a2:58:ce:81:9d:7e:1c:32:86:9e:12:9c:da:0b:
86:ea:a9:d7:74:04:9b:2c:f2:b7:52:14:18:85:f7:37:9f:b0:
61:b9:89:07:ae:c5:a0:30:66:83:e4:f7:c7:d4:19:14:47:d2:
c8:a4:88:98:74:ef:6d:cb:96:ec:bd:05:75:5d:54:43:27:fd:
0f:39:8f:0a:18:13:53:27:08:05:a0:cf:d5:09:5d:1a:35:78:
8b:f0:4f:fb:44:6d:85:84:a9:a7:15:61:c0:ec:92:10:24:b5:
32:c0:9f:88:45:ea:10:12:2c:d8:da:91:fc:4b:cd:93:88:9c:
37:03:92:4d:73:68:34:40:eb:5d:1e:a0:99:a5:d3:ed:0f:54:
c1:50:f9:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CeNpSSVShsqMex0XSOxGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjOWZhMGIzMGQ1NDU1YWQ2N2ZiMDdlMDk5ZjBmYTk1Zjhi
NmMxOWUwHhcNMjYwMzI5MTAwMDQyWhcNMjYwMzMwMTAwMDQyWjAzMTEwLwYDVQQD
EyhlMmY2ZGM4Y2NlZWRjMzIwMWM4MTg4NGEzY2RlYWFmNDZiYzJmMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow8HsMwhx03Q/YEtOSyaLSRB2i/0
+XjN2Jq++UkFBc7bYsMilKvUzvh0gNyxKsDK2tlxgzQmEJWpYaRVffnmio1iR0HE
Bxm6f/wxr6+UlskVlTguvnEPQDbAhBnXO0vBqPpQiAolUTOrqbdKc85uYM5PnJnF
Z8aBeVDYb5WpYnZM2rtYZ+f/Gs60xo6cgpupdXJr50IS1tBaZnMJ6An3XlnKwSxK
mqk9W+FrM0yIRbTF86IHL+uEEp7o8aujfRp9lnku8bt3TgRa1MVYXZ2GARnT4c+/
vWYoQu7xhTbPMTNfnFhaT1oE289uD7Nwtgqd0NVRZIVqDNDyooXNRa6I6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOL23IzO7cMgHIGISjzeqvRrwvKlMB8GA1UdIwQY
MBaAFMyfoLMNVFWtZ/sH4Jnw+pX4tsGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80ODgzZDQtODQ3OS00NDQ3LWFmNjct
MWU2Y2EyZjBkMTU1LzEvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80ODgzZDQtODQ3OS00NDQ3LWFmNjctMWU2Y2EyZjBkMTU1
LzEvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEn6+b5aF
B89Or9YUuvVF3cNlFKhouMn11KxS3y9IqIt3P/32oYuAHHl8zjBMn62rmqQPdbIZ
pNRI1h32XDn9g8lzkTa0nnqfDVxLxny9olwwTLP0+bYTHwZuByz7G86bltKjArdw
Pj17VSUlDj7F56JYzoGdfhwyhp4SnNoLhuqp13QEmyzyt1IUGIX3N5+wYbmJB67F
oDBmg+T3x9QZFEfSyKSImHTvbcuW7L0FdV1UQyf9DzmPChgTUycIBaDP1QldGjV4
i/BP+0RthYSppxVhwOySECS1MsCfiEXqEBIs2NqR/EvNk4icNwOSTXNoNEDrXR6g
maXT7Q9UwVD5/g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:30 2026 by rpki-client