Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: la9EEm7Vqb0R8gLL69dWn6SSKsmxeo3frgWk6cQTLmo=
Subject key identifier: D0:11:89:29:10:68:5A:29:09:02:F0:C1:7E:41:C7:B4:C8:0D:E8:36
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 019E20FF20AD5D3E8E632C2E9652E0CE5E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 1286
Signing time: Wed 13 May 2026 11:00:51 +0000
Manifest this update: Wed 13 May 2026 11:00:51 +0000
Manifest next update: Thu 14 May 2026 11:00:51 +0000
Files and hashes: 1: a0kN2gfK01wMuqhoW-MZjPAbstc.roa (hash: mmiujuewrIIcuNRFw3juwDDGpDhJAvUuobcjAggyfUE=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: pve18Irvtkci3KESa9sFO4OOmui0po1ZNW04aNAqiM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:20:ad:5d:3e:8e:63:2c:2e:96:52:e0:ce:5e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: May 13 11:00:51 2026 GMT
Not After : May 14 11:00:51 2026 GMT
Subject: CN=d011892910685a290902f0c17e41c7b4c80de836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:a2:14:8d:c1:f2:cc:39:1a:1f:0b:30:84:
ea:bd:9c:d8:c6:17:6d:8b:47:d0:f7:05:d3:61:6e:
2d:6f:61:ca:98:70:82:df:fb:3f:29:56:83:ee:6f:
fd:2a:47:5d:10:73:f5:ba:e8:f0:a0:87:8d:4a:35:
8b:88:a1:c4:d5:90:20:19:88:97:91:b0:ad:1f:48:
74:27:81:82:9b:ca:36:8e:39:e0:04:6b:9c:e8:1b:
c2:82:02:6d:a6:90:a2:22:d5:59:de:b6:18:ed:ba:
06:c6:03:74:a7:ca:a8:9d:3a:a4:60:84:33:ff:28:
0f:8e:1a:a2:3f:11:a6:3c:7b:37:82:1c:cf:33:40:
d2:ef:06:e5:12:09:6d:be:23:08:28:6e:17:77:e4:
cc:8c:e5:8d:27:ff:a1:da:e4:71:83:21:a0:a9:4e:
bd:d1:82:96:89:7f:50:08:d0:03:68:bb:43:a0:47:
f3:84:3a:b9:39:bf:19:a8:60:12:46:42:ca:85:7a:
a2:2d:37:13:47:fc:e9:4e:71:34:cb:3e:48:50:d9:
54:23:41:eb:81:e4:ad:0c:59:42:50:6f:bd:c9:33:
42:23:3f:05:97:5c:39:08:41:ed:ff:62:66:6e:dc:
15:ed:3d:b0:31:b2:3d:e6:8d:ce:e9:c7:75:c1:94:
0d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:11:89:29:10:68:5A:29:09:02:F0:C1:7E:41:C7:B4:C8:0D:E8:36
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:10:6a:4e:c2:78:d1:7d:80:6e:e2:a0:8e:71:b6:31:d1:3c:
87:02:39:25:da:62:8d:69:d6:3f:01:10:a6:97:08:ad:c2:e6:
f9:9b:2e:cc:82:75:1a:66:14:39:06:7f:e2:58:78:40:ae:35:
04:68:61:39:a6:e0:4a:5e:5f:14:51:ba:04:eb:e1:e9:51:cd:
bf:69:24:7b:a0:b6:e4:8b:d6:97:75:40:7f:ad:87:cf:02:dc:
19:94:4c:99:0c:17:02:04:bc:b9:23:b0:a9:96:2d:a3:7f:8d:
de:70:e0:fb:b8:26:30:d4:f5:2d:f5:31:d6:a1:4e:57:dc:19:
ea:3f:28:5b:82:29:f4:af:60:25:15:a0:1b:31:06:30:f1:6c:
d9:a7:12:f9:c0:29:0a:90:32:51:1c:14:59:d4:b1:dc:66:66:
a7:97:75:b5:d4:c9:24:4d:52:1a:dd:ec:c6:c5:5e:9c:b1:33:
1f:89:6f:54:ca:d0:63:62:f5:84:90:85:a1:a8:96:ef:06:33:
b9:db:c8:84:d1:48:9d:07:55:b7:93:9a:33:a6:f7:5c:66:a9:
3e:ee:3f:0f:59:06:89:c7:d4:5b:f6:9a:bf:f6:7d:65:81:44:
41:b0:ed:ff:e5:47:1b:b0:80:04:b6:5d:40:7d:7c:77:13:95:
90:35:04:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/yCtXT6OYywullLgzl5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzA4N2NjNzAyYzhkOTM1M2ZlNzhmNzkzMjQ0MGI3ZTg0
MmZjNmUwHhcNMjYwNTEzMTEwMDUxWhcNMjYwNTE0MTEwMDUxWjAzMTEwLwYDVQQD
EyhkMDExODkyOTEwNjg1YTI5MDkwMmYwYzE3ZTQxYzdiNGM4MGRlODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkKiFI3B8sw5Gh8LMITqvZzYxhdt
i0fQ9wXTYW4tb2HKmHCC3/s/KVaD7m/9KkddEHP1uujwoIeNSjWLiKHE1ZAgGYiX
kbCtH0h0J4GCm8o2jjngBGuc6BvCggJtppCiItVZ3rYY7boGxgN0p8qonTqkYIQz
/ygPjhqiPxGmPHs3ghzPM0DS7wblEgltviMIKG4Xd+TMjOWNJ/+h2uRxgyGgqU69
0YKWiX9QCNADaLtDoEfzhDq5Ob8ZqGASRkLKhXqiLTcTR/zpTnE0yz5IUNlUI0Hr
geStDFlCUG+9yTNCIz8Fl1w5CEHt/2JmbtwV7T2wMbI95o3O6cd1wZQNWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNARiSkQaFopCQLwwX5Bx7TIDeg2MB8GA1UdIwQY
MBaAFM0wh8xwLI2TU/5495MkQLfoQvxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWIt
ZjA4ZDcxYzRmM2RiLzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWItZjA4ZDcxYzRmM2Ri
LzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxBqTsJ4
0X2AbuKgjnG2MdE8hwI5JdpijWnWPwEQppcIrcLm+ZsuzIJ1GmYUOQZ/4lh4QK41
BGhhOabgSl5fFFG6BOvh6VHNv2kke6C25IvWl3VAf62HzwLcGZRMmQwXAgS8uSOw
qZYto3+N3nDg+7gmMNT1LfUx1qFOV9wZ6j8oW4Ip9K9gJRWgGzEGMPFs2acS+cAp
CpAyURwUWdSx3GZmp5d1tdTJJE1SGt3sxsVenLEzH4lvVMrQY2L1hJCFoaiW7wYz
udvIhNFInQdVt5OaM6b3XGapPu4/D1kGicfUW/aav/Z9ZYFEQbDt/+VHG7CABLZd
QH18dxOVkDUEJA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:31:11 2026 by rpki-client