Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: jJpLEoUv/TixCRNjZoMtO6pAarVeONgSZuOXNwW5Po0=
Subject key identifier: 46:5C:8C:45:86:02:4B:CB:61:AB:99:E2:56:F1:9E:A8:FE:38:F7:89
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019E28B8B511AB7F33E36EB23F17CD6288B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 1957
Signing time: Thu 14 May 2026 23:00:53 +0000
Manifest this update: Thu 14 May 2026 23:00:53 +0000
Manifest next update: Fri 15 May 2026 23:00:53 +0000
Files and hashes: 1: LZY-PqyJIZbUMaW5LyxkZu3B0ME.roa (hash: n7XhC8EKYYjZlJRLiTzAC3ZXaalwMOd93SyUZUX87f0=)
2: tw9opvf0Dc5mqTovtjfu2Csg6vo.roa (hash: /sxGcP7rnMogpd9PU079PAunh+PKIDCxrO0qaczcWVs=)
3: utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (hash: GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=)
4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: SS4yhou7zn5skp+D9qRHpWKHK5wrrM+pGiXwl+ISYAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b8:b5:11:ab:7f:33:e3:6e:b2:3f:17:cd:62:88:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: May 14 23:00:53 2026 GMT
Not After : May 15 23:00:53 2026 GMT
Subject: CN=465c8c4586024bcb61ab99e256f19ea8fe38f789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:94:5f:02:13:b9:9a:f5:93:69:b1:81:8e:
ad:d6:9a:b3:c5:47:46:43:87:78:69:ab:d2:0d:5b:
75:d3:00:a7:c8:2f:7e:ab:59:12:25:b9:5e:fc:40:
c7:13:bc:df:10:11:a3:2b:d6:6e:55:a1:51:23:d0:
db:99:f3:b3:73:6b:a3:3b:e7:8a:c8:b2:be:ed:b0:
17:6d:49:3a:71:cc:17:83:7f:cc:a0:39:d1:02:96:
78:6b:a4:ec:c2:8d:ea:73:59:90:6b:19:4d:cc:02:
44:9c:38:d4:da:08:06:2c:b4:1f:25:5f:70:45:26:
49:23:48:dc:12:8a:ed:87:a0:e7:34:58:04:4b:bb:
4d:8f:2a:ce:cf:a1:01:c5:f8:ac:6b:73:fc:17:ba:
16:5c:73:4d:e7:ce:1e:4d:b6:9d:cf:f9:1b:19:80:
c3:fc:ad:95:fe:5e:90:01:79:67:80:95:ed:33:e7:
a2:40:08:05:b9:49:c0:5f:bd:bd:7d:4f:11:ce:71:
4f:f4:7a:71:e2:0c:77:75:24:eb:4a:84:c0:a9:b2:
b1:fe:28:ea:ff:bd:bc:9b:50:95:87:84:48:7a:28:
c8:e2:3f:3b:b4:2d:7a:16:6c:d7:f7:fe:ef:e2:b0:
5b:f7:f6:26:5e:d0:9c:b0:9c:c1:c7:95:e0:18:01:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5C:8C:45:86:02:4B:CB:61:AB:99:E2:56:F1:9E:A8:FE:38:F7:89
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e9:ce:49:ee:3c:09:a8:39:54:65:19:b6:56:17:2f:59:3d:
23:53:08:71:36:52:e3:47:2d:13:54:b0:d3:94:e4:af:76:d1:
c2:74:09:43:46:8f:28:b8:b7:09:6f:70:12:3e:de:10:d1:31:
f8:88:af:03:d1:ca:16:6c:99:55:ee:82:ec:89:07:81:01:6b:
e0:d6:e7:0d:6e:b0:46:63:93:ef:0b:43:8d:13:72:6d:37:f4:
7f:f5:a0:c2:64:78:36:fa:1d:2d:0e:5c:da:60:8d:b5:ab:77:
fa:89:18:cf:dd:10:9b:3e:cb:2b:cf:e3:4a:7d:34:93:dc:37:
f1:82:03:9a:eb:25:51:59:fe:34:83:43:f4:1a:c2:5a:1f:3b:
dc:eb:fd:6d:3f:48:41:12:04:fc:4f:69:d9:3c:44:bd:2f:b4:
8e:46:3f:c6:44:8b:35:4e:c1:28:1b:b5:15:2c:fd:70:5f:39:
51:54:00:76:3f:64:a4:e0:29:7e:e9:78:ab:de:7f:e4:84:d7:
da:c1:d5:5f:d6:41:d9:71:03:e6:60:cc:0d:2d:96:25:bb:ac:
81:a8:d1:bc:c7:28:be:51:dd:22:54:0b:3a:19:53:76:37:b6:
06:bc:13:42:c5:11:53:6c:3c:5d:56:ae:1e:75:be:af:8c:9e:
7f:0a:2b:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ouLURq38z426yPxfNYoiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNTU2NzEyMmE4OGNhOTg4OWExNzk4YjZjOTQyZGNjMGNi
Yzc1M2IwHhcNMjYwNTE0MjMwMDUzWhcNMjYwNTE1MjMwMDUzWjAzMTEwLwYDVQQD
Eyg0NjVjOGM0NTg2MDI0YmNiNjFhYjk5ZTI1NmYxOWVhOGZlMzhmNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF+UXwITuZr1k2mxgY6t1pqzxUdG
Q4d4aavSDVt10wCnyC9+q1kSJble/EDHE7zfEBGjK9ZuVaFRI9DbmfOzc2ujO+eK
yLK+7bAXbUk6ccwXg3/MoDnRApZ4a6Tswo3qc1mQaxlNzAJEnDjU2ggGLLQfJV9w
RSZJI0jcEorth6DnNFgES7tNjyrOz6EBxfisa3P8F7oWXHNN584eTbadz/kbGYDD
/K2V/l6QAXlngJXtM+eiQAgFuUnAX729fU8RznFP9Hpx4gx3dSTrSoTAqbKx/ijq
/728m1CVh4RIeijI4j87tC16FmzX9/7v4rBb9/YmXtCcsJzBx5XgGAHxtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZcjEWGAkvLYauZ4lbxnqj+OPeJMB8GA1UdIwQY
MBaAFM9VZxIqiMqYiaF5i2yULcwMvHU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAt
OGQ3MTVhYzIxN2UyLzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAtOGQ3MTVhYzIxN2Uy
LzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIenOSe48
Cag5VGUZtlYXL1k9I1MIcTZS40ctE1Sw05Tkr3bRwnQJQ0aPKLi3CW9wEj7eENEx
+IivA9HKFmyZVe6C7IkHgQFr4NbnDW6wRmOT7wtDjRNybTf0f/WgwmR4NvodLQ5c
2mCNtat3+okYz90Qmz7LK8/jSn00k9w38YIDmuslUVn+NIND9BrCWh873Ov9bT9I
QRIE/E9p2TxEvS+0jkY/xkSLNU7BKBu1FSz9cF85UVQAdj9kpOApful4q95/5ITX
2sHVX9ZB2XED5mDMDS2WJbusgajRvMcovlHdIlQLOhlTdje2BrwTQsURU2w8XVau
HnW+r4yefworBA==
-----END CERTIFICATE-----
Generated at Fri May 15 06:20:13 2026 by rpki-client