Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: 57pieNIeez/Om8i9gVsFEFrXmdz6HlMR2voryZBNLJc=
Subject key identifier: 8A:5B:25:7A:04:DF:1D:04:87:91:FD:7F:5B:CA:6D:BF:82:03:6A:C4
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 019E30731F388977D78C7CE309913E9A7280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 08C0
Signing time: Sat 16 May 2026 11:01:51 +0000
Manifest this update: Sat 16 May 2026 11:01:51 +0000
Manifest next update: Sun 17 May 2026 11:01:51 +0000
Files and hashes: 1: 8SFtp1aCFpYsdLLGD8-X8oWNs5M.roa (hash: vW27EEEHFIjxPNptjKVXW1mndyFG/tHqMAs2SVdYCFw=)
2: BXr8T58hSJEA-WIUlWA_j2WefBk.roa (hash: PXtNEgJxgvpk0g/Oj/zCBk+DYm9a/J1sVkZt5dkYamA=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: 4FIafSN28PvB8FM99RYfhQ9ZDWQMEmsmjvYjfQDJfNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:73:1f:38:89:77:d7:8c:7c:e3:09:91:3e:9a:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: May 16 11:01:51 2026 GMT
Not After : May 17 11:01:51 2026 GMT
Subject: CN=8a5b257a04df1d048791fd7f5bca6dbf82036ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:f3:1e:d5:82:3b:02:94:04:34:84:95:dd:
ca:28:1f:18:04:69:48:57:cc:d8:ab:d0:d4:15:85:
ff:44:78:72:18:37:dc:6d:c2:8b:5c:80:47:cd:49:
3c:d7:b6:30:e8:9e:16:cc:01:bc:0a:11:5d:73:00:
47:61:c9:3e:5d:bc:40:15:f7:68:09:9e:46:fd:c9:
f1:ea:a2:fa:e3:f9:45:32:66:28:60:28:d2:ca:ec:
02:9c:2d:14:84:c7:6e:6f:85:37:35:4e:eb:32:7b:
aa:98:c5:66:73:2f:1c:35:e6:05:c0:63:11:24:28:
b3:cd:a1:6b:93:23:90:c6:57:b9:77:1a:30:b3:4f:
f6:86:94:08:99:28:f1:49:82:76:9c:d7:f8:a3:63:
27:33:bd:25:89:45:d9:53:2c:3b:71:bc:d1:0f:bd:
df:eb:75:7e:18:74:4e:3b:84:13:db:e0:dc:13:fd:
c0:1f:3e:65:33:e1:0d:07:79:7d:e2:58:42:e4:d8:
a8:ff:84:05:0c:85:be:d5:81:bc:5b:6f:c7:7c:a8:
85:97:10:fe:fb:0e:70:c5:a6:71:c7:0e:e4:13:a9:
5d:d8:04:bd:55:48:38:3c:71:20:67:52:a6:03:56:
4a:f6:e4:5a:87:e5:d6:8a:06:18:81:48:1e:5e:37:
f4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5B:25:7A:04:DF:1D:04:87:91:FD:7F:5B:CA:6D:BF:82:03:6A:C4
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:aa:9d:54:9d:ef:36:d1:64:7a:3b:5e:53:84:3a:2a:31:73:
b4:94:60:c0:fb:0c:be:32:57:7a:33:27:02:34:4c:30:ad:ab:
96:b5:b4:35:3c:f4:8f:10:34:5a:4e:a7:8d:35:65:5a:b5:70:
9c:13:8e:02:48:fe:07:a2:19:d8:26:68:02:97:b1:30:5e:de:
b5:b3:ad:38:59:1d:78:81:dd:13:5d:14:d1:4f:88:32:17:13:
96:b1:d4:95:d4:63:8c:73:fa:04:86:ee:36:d0:bf:3a:95:23:
ac:55:e5:a7:76:89:3f:33:0c:60:c7:c7:b5:71:9d:d6:d6:6e:
af:a7:41:d8:71:e0:db:05:0b:20:97:5c:36:fc:54:a6:a9:7b:
aa:6b:76:51:b0:6d:9c:f4:e3:63:66:61:fe:d1:a5:10:35:54:
cc:de:67:68:6e:8f:c8:6e:90:20:de:50:c5:5a:5c:89:b9:2a:
e6:11:96:06:ae:6b:0b:3d:31:86:1f:db:37:a6:5a:a2:b0:21:
c0:19:05:58:5c:13:fe:d2:a9:95:99:7d:32:cd:8f:a7:32:d8:
60:be:b0:49:37:48:e5:46:ed:55:ba:4f:f4:a7:21:7f:a0:0f:
85:5a:bc:b2:f9:58:15:a7:86:36:1c:50:6b:f5:5f:c5:10:da:
ae:d1:4c:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcx84iXfXjHzjCZE+mnKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMzg0NzY2NzUxMGY0ZjJlNTliYjFiMzk0YWUyN2U4ZGFk
MGRjOTcwHhcNMjYwNTE2MTEwMTUxWhcNMjYwNTE3MTEwMTUxWjAzMTEwLwYDVQQD
Eyg4YTViMjU3YTA0ZGYxZDA0ODc5MWZkN2Y1YmNhNmRiZjgyMDM2YWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6TzHtWCOwKUBDSEld3KKB8YBGlI
V8zYq9DUFYX/RHhyGDfcbcKLXIBHzUk817Yw6J4WzAG8ChFdcwBHYck+XbxAFfdo
CZ5G/cnx6qL64/lFMmYoYCjSyuwCnC0UhMdub4U3NU7rMnuqmMVmcy8cNeYFwGMR
JCizzaFrkyOQxle5dxows0/2hpQImSjxSYJ2nNf4o2MnM70liUXZUyw7cbzRD73f
63V+GHROO4QT2+DcE/3AHz5lM+ENB3l94lhC5Nio/4QFDIW+1YG8W2/HfKiFlxD+
+w5wxaZxxw7kE6ld2AS9VUg4PHEgZ1KmA1ZK9uRah+XWigYYgUgeXjf02wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpbJXoE3x0Eh5H9f1vKbb+CA2rEMB8GA1UdIwQY
MBaAFM44R2Z1EPTy5Zuxs5SuJ+ja0NyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2It
NGJhNDQzNzdiZDg2LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2ItNGJhNDQzNzdiZDg2
LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaqdVJ3v
NtFkejteU4Q6KjFztJRgwPsMvjJXejMnAjRMMK2rlrW0NTz0jxA0Wk6njTVlWrVw
nBOOAkj+B6IZ2CZoApexMF7etbOtOFkdeIHdE10U0U+IMhcTlrHUldRjjHP6BIbu
NtC/OpUjrFXlp3aJPzMMYMfHtXGd1tZur6dB2HHg2wULIJdcNvxUpql7qmt2UbBt
nPTjY2Zh/tGlEDVUzN5naG6PyG6QIN5QxVpcibkq5hGWBq5rCz0xhh/bN6ZaorAh
wBkFWFwT/tKplZl9Ms2PpzLYYL6wSTdI5UbtVbpP9Kchf6APhVq8svlYFaeGNhxQ
a/VfxRDartFMOQ==
-----END CERTIFICATE-----
Generated at Sat May 16 18:40:48 2026 by rpki-client