
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: 4fFqF6A14/H7yS4esCbDJUWJahaNJnh9iogztMg/aIk=
Subject key identifier: E0:70:12:08:B9:9A:A7:D1:B2:55:D4:D2:2C:A8:28:B8:34:45:4F:60
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 019F1076CA6BEF9F3D277EBEFE75704C9F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 0998
Signing time: Sun 28 Jun 2026 23:00:48 +0000
Manifest this update: Sun 28 Jun 2026 23:00:48 +0000
Manifest next update: Mon 29 Jun 2026 23:00:48 +0000
Files and hashes: 1: uqlwtwz2Qs2EiNBrxD0-ZbsYVHs.roa (hash: IkhV4yizozk2dsaRcLN2hmBNAiBYulp+U7a9yEZXbLk=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: Vo9yiT3wOLqTKumAXadP+sw2miBPhKHtr7pXPloWBqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 22:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:76:ca:6b:ef:9f:3d:27:7e:be:fe:75:70:4c:9f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Jun 28 23:00:48 2026 GMT
Not After : Jun 29 23:00:48 2026 GMT
Subject: CN=e0701208b99aa7d1b255d4d22ca828b834454f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:bb:3a:06:01:81:7c:1e:7f:66:c1:92:ab:
fc:36:e1:9b:a8:22:cf:ba:76:a3:81:cd:1c:bf:8d:
06:22:2c:43:6f:ec:b2:f8:a3:3b:e4:2f:17:27:fb:
01:d3:4c:77:55:dd:d2:a6:8c:9a:be:f0:41:f9:90:
1d:45:5a:e1:c6:12:84:43:db:21:34:99:04:01:27:
de:1d:40:ad:6e:f9:5f:e3:7c:73:06:e0:0c:77:96:
34:c8:64:4e:e3:8c:94:64:d5:2e:fd:6c:3a:32:1d:
6b:aa:2c:bb:2f:23:84:26:16:5f:fc:52:e0:92:8f:
87:80:8e:cf:16:55:2a:45:65:35:e7:7e:64:50:76:
4a:ad:41:44:69:f9:b9:35:0b:b2:3e:d5:6a:3e:38:
87:b1:fb:63:55:2e:e8:77:16:5c:ac:f8:36:ea:dd:
35:0e:8f:30:f3:05:30:e1:17:34:b1:45:65:dd:03:
92:93:ac:e2:99:25:d0:dd:fc:f8:55:5c:5c:66:d7:
61:ef:0e:37:5e:22:c3:9a:ea:d8:60:9f:53:a9:0c:
9e:cc:6f:02:70:71:fa:d8:2d:30:73:2b:84:12:be:
a6:eb:55:03:7c:58:57:95:34:51:31:eb:5d:4d:8c:
b3:d7:d2:52:d1:b9:ca:99:2d:a8:c5:92:ec:56:94:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:70:12:08:B9:9A:A7:D1:B2:55:D4:D2:2C:A8:28:B8:34:45:4F:60
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:96:d6:3d:01:78:bd:4e:32:28:2a:5a:1a:2d:b1:5a:28:e6:
93:1b:e5:ed:10:95:c8:2d:e5:a0:fb:92:42:b0:ad:fb:91:0c:
68:0a:86:8d:38:e2:8b:4a:95:8f:b9:cf:3f:5a:0d:2f:a9:b5:
bd:ba:31:c0:8e:22:7b:f8:26:32:58:b0:55:b8:6d:f0:8b:5e:
08:66:7e:6d:6c:e0:6b:7e:50:1d:12:6c:fa:bc:00:93:99:93:
7d:86:31:93:fb:67:9a:fc:f8:5f:2c:b4:59:39:73:44:65:16:
4e:37:4e:2b:ea:cc:1c:6d:c3:2a:d7:be:79:94:92:6a:7e:35:
57:ab:17:ff:17:a0:86:01:81:de:47:ba:4a:1f:96:3b:cd:6c:
4c:8d:43:3b:2a:5d:e6:1b:91:f3:c9:61:bc:65:dd:74:f0:47:
5f:66:58:7b:29:56:b1:74:10:8f:ff:24:71:a0:a1:8f:c0:9b:
fa:7e:84:52:ad:80:a0:89:0c:8b:ea:60:34:1b:77:94:3a:5e:
6e:15:52:b3:cc:24:21:75:ff:1f:86:ae:bc:8b:75:81:6e:78:
7f:31:b7:2c:f6:ec:97:0c:ca:37:09:82:01:16:2f:a7:6a:46:
ac:6e:f5:c3:04:0e:c9:64:fd:5e:df:3d:2f:a0:c9:e0:9e:88:
e6:14:a9:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Qdspr7589J36+/nVwTJ9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOWQwNjQ3ZGMxNzE0MWQ4NDJiMzJmNTExNWQ5OWFhOWM5
ZjMzZGQwHhcNMjYwNjI4MjMwMDQ4WhcNMjYwNjI5MjMwMDQ4WjAzMTEwLwYDVQQD
EyhlMDcwMTIwOGI5OWFhN2QxYjI1NWQ0ZDIyY2E4MjhiODM0NDU0ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7K7OgYBgXwef2bBkqv8NuGbqCLP
unajgc0cv40GIixDb+yy+KM75C8XJ/sB00x3Vd3SpoyavvBB+ZAdRVrhxhKEQ9sh
NJkEASfeHUCtbvlf43xzBuAMd5Y0yGRO44yUZNUu/Ww6Mh1rqiy7LyOEJhZf/FLg
ko+HgI7PFlUqRWU1535kUHZKrUFEafm5NQuyPtVqPjiHsftjVS7odxZcrPg26t01
Do8w8wUw4Rc0sUVl3QOSk6zimSXQ3fz4VVxcZtdh7w43XiLDmurYYJ9TqQyezG8C
cHH62C0wcyuEEr6m61UDfFhXlTRRMetdTYyz19JS0bnKmS2oxZLsVpS/UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBwEgi5mqfRslXU0iyoKLg0RU9gMB8GA1UdIwQY
MBaAFM6dBkfcFxQdhCsy9RFdmaqcnzPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGIt
ODBmYWVjYTljMmVlLzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGItODBmYWVjYTljMmVl
LzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpbWPQF4
vU4yKCpaGi2xWijmkxvl7RCVyC3loPuSQrCt+5EMaAqGjTjii0qVj7nPP1oNL6m1
vboxwI4ie/gmMliwVbht8IteCGZ+bWzga35QHRJs+rwAk5mTfYYxk/tnmvz4Xyy0
WTlzRGUWTjdOK+rMHG3DKte+eZSSan41V6sX/xeghgGB3ke6Sh+WO81sTI1DOypd
5huR88lhvGXddPBHX2ZYeylWsXQQj/8kcaChj8Cb+n6EUq2AoIkMi+pgNBt3lDpe
bhVSs8wkIXX/H4auvIt1gW54fzG3LPbslwzKNwmCARYvp2pGrG71wwQOyWT9Xt89
L6DJ4J6I5hSp0g==
-----END CERTIFICATE-----
Generated at Mon Jun 29 03:57:38 2026 by rpki-client