Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
File: ztLYANxsM7afpHKR4vFbM16jYA8.mft (raw, json)
Hash identifier: 1TEYJ+P8Xxcj8x/ASHAksNtjGt7U58Hi3EcW6jZlpBc=
Subject key identifier: E8:59:F1:BB:CA:69:A0:28:BB:86:40:48:0F:5F:D6:EE:C2:55:1B:84
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 019D240336739E349996B50020170E9575AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 08:01:23 +0000
Manifest this update: Wed 25 Mar 2026 08:01:23 +0000
Manifest next update: Thu 26 Mar 2026 08:01:23 +0000
Files and hashes: 1: R9EYWDWbFyIowERkQv1v0JtSffs.roa (hash: UZd3m4a2szallkaOjNZ7VHm5NhVRaDO2lmc6VL9YvRg=)
2: X3fPlEcezz2LtewMmlGePOr2KHg.roa (hash: 5g36Sq2zpkP21Y5qWvGwR57g8qXOqKbe5sby4b2OVKE=)
3: ZDjXb-6sXlkqWM2dj0s_r6ok4IU.roa (hash: 43aIR8uvVvqvIYOmN9YnPWlwLHPz7ywPbdcbAEwBcvs=)
4: uYt3LwvbCynztKYkWZlfCwbeA9U.roa (hash: lkVlyA3OypIzfME9Kh6ROBp1XjLEdpw7ZJP7xjy2Vqw=)
5: ztLYANxsM7afpHKR4vFbM16jYA8.crl (hash: mO6Y0GhlrJmaBoKoIEdF+CBSQbPgJS7jrxesmM4zQsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:03:36:73:9e:34:99:96:b5:00:20:17:0e:95:75:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Mar 25 08:01:23 2026 GMT
Not After : Mar 26 08:01:23 2026 GMT
Subject: CN=e859f1bbca69a028bb8640480f5fd6eec2551b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:5e:d8:ae:1a:0e:92:71:5d:65:70:cb:74:
88:73:96:60:40:81:d2:aa:5c:36:f1:08:4c:35:f0:
a9:bb:83:cf:d2:5c:ec:34:f9:6e:6c:c6:24:f4:b2:
c8:29:38:f3:29:15:41:30:61:06:ca:47:09:e3:b6:
29:98:20:c3:87:39:c9:7b:36:21:53:f8:fe:18:88:
b5:39:bc:86:f2:54:cf:ab:d3:a0:4b:27:67:bd:99:
a1:9d:7b:a8:44:08:75:6c:c0:93:af:d5:87:0c:ad:
15:23:ad:09:95:38:45:9e:70:91:86:3e:62:6e:70:
04:e2:a0:93:e0:fb:ea:10:a0:f4:03:38:e3:3a:7d:
3f:1e:fe:72:74:82:f7:3b:23:eb:25:1e:61:43:43:
84:77:6f:73:16:44:01:87:59:13:f9:80:6a:36:a5:
57:f2:b4:7b:ed:54:cf:d7:f0:eb:44:9b:f5:fc:59:
38:4a:39:a9:ee:2e:eb:19:86:03:87:1a:4b:cd:19:
de:52:bd:d3:12:46:01:90:4d:c2:d5:95:49:5e:52:
dd:86:42:25:42:9e:ed:60:a6:2e:f7:10:18:8c:d1:
3a:a5:30:b4:5f:9d:98:78:ff:fe:a3:f0:af:66:cd:
e4:77:de:66:6f:95:2f:8a:31:37:1d:62:98:6f:de:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:59:F1:BB:CA:69:A0:28:BB:86:40:48:0F:5F:D6:EE:C2:55:1B:84
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d9:8c:ab:b6:20:6f:3f:57:2d:d3:56:92:04:23:1a:ee:11:
96:17:79:c3:69:55:79:56:81:ca:bb:9e:df:66:8c:83:22:66:
e2:81:c6:f1:8a:09:8e:62:f9:78:d8:14:0b:11:f0:0e:fa:63:
a6:20:7e:a0:49:1f:e3:49:73:e8:f8:2a:f6:17:61:14:44:97:
7c:09:52:03:75:c9:21:ba:2d:3d:13:53:aa:93:e4:5c:7b:15:
fb:41:d8:d0:d4:c5:b1:d6:c9:71:77:b1:08:79:76:3b:1f:99:
7f:d4:61:ba:d4:fc:09:de:10:65:91:e9:60:a0:6b:7d:b5:5d:
f1:8d:5d:50:31:a3:34:e6:09:89:17:b6:50:a1:1b:70:e5:fe:
ff:a6:94:e7:77:81:26:27:d8:b4:50:6b:aa:87:7d:52:83:42:
4e:a6:31:4c:18:35:cc:e4:31:4d:ec:f5:8a:bf:f9:a9:c6:75:
3c:af:ef:ca:2a:ec:77:6c:7c:a8:e4:4f:b3:77:bd:ca:fa:a9:
a2:42:2f:26:61:aa:7a:98:2f:dd:43:22:9d:a6:a7:7f:21:20:
36:24:88:77:f2:38:47:26:82:b1:fc:3c:a1:e0:4d:ec:55:89:
e9:c1:ee:3d:e3:7b:b3:ac:ac:06:f4:b5:9d:8a:a5:ee:8b:08:
89:dc:b0:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0kAzZznjSZlrUAIBcOlXWuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDJkODAwZGM2YzMzYjY5ZmE0NzI5MWUyZjE1YjMzNWVh
MzYwMGYwHhcNMjYwMzI1MDgwMTIzWhcNMjYwMzI2MDgwMTIzWjAzMTEwLwYDVQQD
EyhlODU5ZjFiYmNhNjlhMDI4YmI4NjQwNDgwZjVmZDZlZWMyNTUxYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jBe2K4aDpJxXWVwy3SIc5ZgQIHS
qlw28QhMNfCpu4PP0lzsNPlubMYk9LLIKTjzKRVBMGEGykcJ47YpmCDDhznJezYh
U/j+GIi1ObyG8lTPq9OgSydnvZmhnXuoRAh1bMCTr9WHDK0VI60JlThFnnCRhj5i
bnAE4qCT4PvqEKD0AzjjOn0/Hv5ydIL3OyPrJR5hQ0OEd29zFkQBh1kT+YBqNqVX
8rR77VTP1/DrRJv1/Fk4Sjmp7i7rGYYDhxpLzRneUr3TEkYBkE3C1ZVJXlLdhkIl
Qp7tYKYu9xAYjNE6pTC0X52YeP/+o/CvZs3kd95mb5UvijE3HWKYb970VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhZ8bvKaaAou4ZASA9f1u7CVRuEMB8GA1UdIwQY
MBaAFM7S2ADcbDO2n6RykeLxWzNeo2APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYt
ZWQ0ZjA2NDNiZjI1LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYtZWQ0ZjA2NDNiZjI1
LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9mMq7Yg
bz9XLdNWkgQjGu4Rlhd5w2lVeVaByrue32aMgyJm4oHG8YoJjmL5eNgUCxHwDvpj
piB+oEkf40lz6Pgq9hdhFESXfAlSA3XJIbotPRNTqpPkXHsV+0HY0NTFsdbJcXex
CHl2Ox+Zf9RhutT8Cd4QZZHpYKBrfbVd8Y1dUDGjNOYJiRe2UKEbcOX+/6aU53eB
JifYtFBrqod9UoNCTqYxTBg1zOQxTez1ir/5qcZ1PK/vyirsd2x8qORPs3e9yvqp
okIvJmGqepgv3UMinaanfyEgNiSId/I4RyaCsfw8oeBN7FWJ6cHuPeN7s6ysBvS1
nYql7osIidywtQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 14:54:53 2026 by rpki-client