Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
File: mZVu39RteCBhbFZwdNHEt1TxzAs.mft (raw, json)
Hash identifier: f30mg/X83zC4qKdd/DFyh2RWpVxOnQp28aWxDzM0LZk=
Subject key identifier: B4:18:69:85:28:F6:D7:2C:26:3A:5E:C5:DC:90:04:73:A7:97:DD:F8
Authority key identifier: 99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
Certificate issuer: /CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Certificate serial: 019D38D3AE6113A310596E1B012AFBACFE4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
Manifest number: 0499
Signing time: Sun 29 Mar 2026 09:01:29 +0000
Manifest this update: Sun 29 Mar 2026 09:01:29 +0000
Manifest next update: Mon 30 Mar 2026 09:01:29 +0000
Files and hashes: 1: mZVu39RteCBhbFZwdNHEt1TxzAs.crl (hash: yEGfN9MJejUL8lGG6Tlr2Qy8syPnf//8Ea63P0rcDPI=)
2: zSAvFjTGIZNZQugEHveBHELdn1Y.roa (hash: CXzOAflbazRPSskBL/AIymp/SWQ3K3xlxPcN85lCvzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ae:61:13:a3:10:59:6e:1b:01:2a:fb:ac:fe:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Validity
Not Before: Mar 29 09:01:29 2026 GMT
Not After : Mar 30 09:01:29 2026 GMT
Subject: CN=b418698528f6d72c263a5ec5dc900473a797ddf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:2f:5e:2f:af:15:dd:22:87:10:0f:4f:95:
f6:cd:48:d4:02:95:a5:bd:0b:30:9e:9d:05:79:5b:
6c:04:1a:7a:08:e7:a4:3b:c3:74:a1:0a:4a:08:93:
8b:11:69:92:07:bf:45:91:91:f0:e5:51:97:36:1e:
d8:65:17:c4:97:b0:75:14:0d:ff:a1:b0:64:7a:ee:
76:4f:9f:05:1b:fa:db:1f:fc:8f:c5:89:c1:8a:95:
68:56:60:97:33:98:26:75:84:cd:65:f7:66:e4:d0:
93:28:09:3c:42:0e:01:a6:e7:37:0b:b0:10:f0:57:
fd:08:b8:cb:09:38:53:e2:79:c9:5e:4f:98:ef:70:
84:4e:cb:4a:8d:d9:66:16:0c:08:dd:4e:7a:2e:c4:
26:38:0a:94:9e:28:4a:9b:58:e0:89:3c:62:c9:a3:
d5:84:a5:6d:e1:23:eb:cf:e7:7b:70:96:7f:1b:9b:
c2:fe:54:1e:3c:26:03:e8:35:ed:1e:cf:3a:76:67:
d7:51:51:28:a3:7f:cc:12:74:59:b4:1a:d3:0a:2a:
21:b4:72:70:c4:c6:e6:df:f7:14:93:24:70:04:db:
47:64:57:e6:9b:96:08:58:a8:42:24:59:20:a0:f9:
68:b1:bf:b1:cf:ca:15:3a:0d:cb:7f:fb:cd:6f:bf:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:18:69:85:28:F6:D7:2C:26:3A:5E:C5:DC:90:04:73:A7:97:DD:F8
X509v3 Authority Key Identifier:
keyid:99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a4:83:8e:db:5d:78:44:a6:c7:e4:24:9a:b3:72:cf:bd:ce:
0c:7e:7c:82:44:8e:b4:b0:4b:80:e4:bb:84:c7:9e:e4:4d:58:
8c:f1:38:6d:06:54:de:29:37:a9:2d:b6:a2:cc:8f:0e:61:de:
b4:d9:e0:94:95:99:2c:01:fe:49:e0:55:e8:be:42:c0:e2:a7:
23:4f:69:fb:75:fc:69:2e:5d:cc:d5:4e:2a:90:77:1e:6f:b2:
d2:d9:2a:7d:2d:17:1e:d8:01:a3:9b:52:55:a5:b1:f9:39:eb:
79:54:fb:17:1a:a6:40:d8:00:3f:0d:75:9b:be:e6:f6:9b:c7:
ba:86:df:a8:f8:52:84:e2:52:e2:4b:fa:5f:4f:c5:3b:ca:32:
4d:31:c2:10:ee:a9:94:df:ed:01:12:b5:b4:cb:d4:0b:db:88:
88:38:07:ca:6b:ef:62:8e:40:c2:ec:f0:f9:eb:8a:02:60:16:
0b:28:29:5b:b3:ee:13:7d:e6:83:a3:d8:e1:29:56:3e:48:3c:
ad:dc:c0:83:b0:4e:d3:9f:ab:e1:d8:f0:d0:23:31:20:30:1a:
61:d0:9b:d6:73:d5:cb:74:67:36:8d:27:b2:2b:f9:d0:6e:e9:
c4:89:f9:04:76:e8:d4:26:93:ba:b4:72:1a:5c:a9:75:59:48:
94:96:80:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04065hE6MQWW4bASr7rP5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OTU2ZWRmZDQ2ZDc4MjA2MTZjNTY3MDc0ZDFjNGI3NTRm
MWNjMGIwHhcNMjYwMzI5MDkwMTI5WhcNMjYwMzMwMDkwMTI5WjAzMTEwLwYDVQQD
EyhiNDE4Njk4NTI4ZjZkNzJjMjYzYTVlYzVkYzkwMDQ3M2E3OTdkZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBovXi+vFd0ihxAPT5X2zUjUApWl
vQswnp0FeVtsBBp6COekO8N0oQpKCJOLEWmSB79FkZHw5VGXNh7YZRfEl7B1FA3/
obBkeu52T58FG/rbH/yPxYnBipVoVmCXM5gmdYTNZfdm5NCTKAk8Qg4Bpuc3C7AQ
8Ff9CLjLCThT4nnJXk+Y73CETstKjdlmFgwI3U56LsQmOAqUnihKm1jgiTxiyaPV
hKVt4SPrz+d7cJZ/G5vC/lQePCYD6DXtHs86dmfXUVEoo3/MEnRZtBrTCiohtHJw
xMbm3/cUkyRwBNtHZFfmm5YIWKhCJFkgoPlosb+xz8oVOg3Lf/vNb78MNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQYaYUo9tcsJjpexdyQBHOnl934MB8GA1UdIwQY
MBaAFJmVbt/UbXggYWxWcHTRxLdU8cwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVpWdTM5UnRlQ0JoYkZad2ROSEV0MVR4ekFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wODJhZTMtMzYxYi00ZmNmLTlmM2Et
YmU1ZWQ2NzYxNDExLzEvbVpWdTM5UnRlQ0JoYkZad2ROSEV0MVR4ekFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wODJhZTMtMzYxYi00ZmNmLTlmM2EtYmU1ZWQ2NzYxNDEx
LzEvbVpWdTM5UnRlQ0JoYkZad2ROSEV0MVR4ekFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6SDjttd
eESmx+QkmrNyz73ODH58gkSOtLBLgOS7hMee5E1YjPE4bQZU3ik3qS22osyPDmHe
tNnglJWZLAH+SeBV6L5CwOKnI09p+3X8aS5dzNVOKpB3Hm+y0tkqfS0XHtgBo5tS
VaWx+TnreVT7FxqmQNgAPw11m77m9pvHuobfqPhShOJS4kv6X0/FO8oyTTHCEO6p
lN/tARK1tMvUC9uIiDgHymvvYo5Awuzw+euKAmAWCygpW7PuE33mg6PY4SlWPkg8
rdzAg7BO05+r4djw0CMxIDAaYdCb1nPVy3RnNo0nsiv50G7pxIn5BHbo1CaTurRy
GlypdVlIlJaAKg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:44 2026 by rpki-client