Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: hWjgmjM9Xbyvb0ZKMpqE4GSw3jdrjpjXkY9/TxYDvAs=
Subject key identifier: B7:A3:0A:C9:34:35:1F:8C:0C:DC:D4:AC:A8:D3:4A:E4:32:3B:00:32
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 019D284E41712085D9334ED3A32189C8367F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:50 +0000
Manifest this update: Thu 26 Mar 2026 04:01:50 +0000
Manifest next update: Fri 27 Mar 2026 04:01:50 +0000
Files and hashes: 1: 1FToxn8IaILCIZFR28ymjf3izQw.roa (hash: n66yLkILpzoSdA5/n4UY3B4CIambhY+CnJWm7sQK/vQ=)
2: DC4AzN_0lOxSBQIYOX8yhhq1bkc.roa (hash: hlLBSZz49suArVA71e6KdvynwmbN3saCnQaMyNCoI1M=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: lvFvgMxJ/6urc+R1UgrETRyKONestEhiEpI03741Cug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:41:71:20:85:d9:33:4e:d3:a3:21:89:c8:36:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Mar 26 04:01:50 2026 GMT
Not After : Mar 27 04:01:50 2026 GMT
Subject: CN=b7a30ac934351f8c0cdcd4aca8d34ae4323b0032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:7a:2b:fe:31:45:fa:02:83:df:6b:5e:07:
e5:e7:c8:e7:2c:7e:71:f2:89:0e:04:76:d6:49:ba:
2b:b0:1e:99:ce:85:5c:5f:ac:c1:7c:eb:06:71:03:
43:6b:33:51:5a:f0:07:65:af:d4:1b:fd:ba:67:71:
a9:a4:af:38:c7:5d:c7:7d:bc:2d:93:bf:48:28:d5:
b3:27:3f:9c:d6:a5:50:5a:29:dc:b0:65:df:65:b1:
80:31:90:ad:df:d4:be:df:ec:66:03:51:92:94:72:
0d:f5:13:eb:97:d9:0d:67:87:b8:3c:70:86:e9:b2:
b5:1e:ef:ec:05:c3:dd:fb:a3:fb:64:f8:b0:18:6c:
2e:9f:01:e6:e3:a3:64:06:77:5a:5a:6a:73:1a:43:
7f:16:91:aa:72:2c:49:59:6b:0b:c1:d3:d7:ce:d7:
c0:ad:37:ff:c5:09:71:e3:cd:a5:ce:c1:47:b5:d3:
bc:72:c5:fe:e8:80:08:0d:4e:de:5a:8f:6f:a0:98:
c5:64:49:59:89:92:83:30:09:05:42:e3:9e:e9:7d:
d5:e2:fa:51:15:81:2d:03:10:8d:96:b7:40:67:7f:
29:74:9a:70:36:f4:fe:84:72:51:45:e9:a0:df:85:
66:71:4e:a7:a9:38:86:2e:ee:df:f7:e7:1b:1e:b6:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A3:0A:C9:34:35:1F:8C:0C:DC:D4:AC:A8:D3:4A:E4:32:3B:00:32
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:93:23:80:f0:74:92:d4:04:5f:df:07:ae:a3:b2:45:8d:52:
d8:88:01:4a:4b:67:71:43:4c:15:95:4e:17:5f:45:3f:46:40:
30:92:a3:ac:be:65:49:4e:2b:66:49:0a:b5:16:0a:03:9f:3a:
f2:68:5f:08:cb:ea:f7:93:75:14:10:24:87:ea:e3:f4:a8:bc:
da:33:cc:1a:e0:96:af:81:94:04:91:48:88:62:d4:1e:36:3a:
39:d2:96:5f:82:74:e5:8d:00:91:8d:d0:f5:76:03:80:96:e2:
71:10:9b:bc:9f:d8:23:2d:6d:0a:f4:73:1f:f6:57:d7:5a:69:
46:5d:16:cb:28:60:d4:5e:fa:9f:71:ce:c8:55:ba:02:a6:89:
cf:b7:57:f4:f2:76:1d:02:c9:cd:98:cd:20:0e:85:07:4c:f1:
6c:48:b0:7e:18:d3:64:c4:4a:fd:d6:3b:37:6f:93:bf:4b:4d:
a9:2e:0d:0b:a5:fe:b2:bc:9e:b0:72:fe:7c:df:95:3e:3c:ea:
31:a6:89:73:34:23:73:ae:f0:de:b8:92:bb:d6:5d:de:fa:51:
45:81:94:b3:5c:24:53:68:e7:0b:d9:6d:45:ac:df:24:8f:ac:
ee:44:fb:47:87:f9:4a:24:e4:08:99:18:e8:70:69:6f:1d:d5:
3a:c5:85:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTkFxIIXZM07ToyGJyDZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDQ5MTU1OGNkMjQ4NzVkYjUyNDI3MzQxMDUwMmZkYWUz
YTY3ODIwHhcNMjYwMzI2MDQwMTUwWhcNMjYwMzI3MDQwMTUwWjAzMTEwLwYDVQQD
EyhiN2EzMGFjOTM0MzUxZjhjMGNkY2Q0YWNhOGQzNGFlNDMyM2IwMDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK96K/4xRfoCg99rXgfl58jnLH5x
8okOBHbWSborsB6ZzoVcX6zBfOsGcQNDazNRWvAHZa/UG/26Z3GppK84x13Hfbwt
k79IKNWzJz+c1qVQWincsGXfZbGAMZCt39S+3+xmA1GSlHIN9RPrl9kNZ4e4PHCG
6bK1Hu/sBcPd+6P7ZPiwGGwunwHm46NkBndaWmpzGkN/FpGqcixJWWsLwdPXztfA
rTf/xQlx482lzsFHtdO8csX+6IAIDU7eWo9voJjFZElZiZKDMAkFQuOe6X3V4vpR
FYEtAxCNlrdAZ38pdJpwNvT+hHJRRemg34VmcU6nqTiGLu7f9+cbHrYK7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLejCsk0NR+MDNzUrKjTSuQyOwAyMB8GA1UdIwQY
MBaAFMxEkVWM0kh121JCc0EFAv2uOmeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80MzllZmUtZjEzMC00OTMxLTkzMWMt
YzhkNWMwNGUzZDQzLzEvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80MzllZmUtZjEzMC00OTMxLTkzMWMtYzhkNWMwNGUzZDQz
LzEvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJMjgPB0
ktQEX98HrqOyRY1S2IgBSktncUNMFZVOF19FP0ZAMJKjrL5lSU4rZkkKtRYKA586
8mhfCMvq95N1FBAkh+rj9Ki82jPMGuCWr4GUBJFIiGLUHjY6OdKWX4J05Y0AkY3Q
9XYDgJbicRCbvJ/YIy1tCvRzH/ZX11ppRl0Wyyhg1F76n3HOyFW6AqaJz7dX9PJ2
HQLJzZjNIA6FB0zxbEiwfhjTZMRK/dY7N2+Tv0tNqS4NC6X+sryesHL+fN+VPjzq
MaaJczQjc67w3riSu9Zd3vpRRYGUs1wkU2jnC9ltRazfJI+s7kT7R4f5SiTkCJkY
6HBpbx3VOsWFuQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:51 2026 by rpki-client