Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json)
Hash identifier: F+WQ2AswN7Yzj/VlueCdrT79zJ0iRDdzMxaERJ0T5bg=
Subject key identifier: 18:F9:02:A0:0A:7C:4E:90:AD:36:E8:4C:61:86:B0:0A:DA:A7:77:58
Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Certificate serial: 019D273A8489D321A28343DE5F1B282B9EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
Manifest number: 059F
Signing time: Wed 25 Mar 2026 23:00:39 +0000
Manifest this update: Wed 25 Mar 2026 23:00:39 +0000
Manifest next update: Thu 26 Mar 2026 23:00:39 +0000
Files and hashes: 1: L4Nkof_0pZhXN5_BFlFOSMgeaiY.roa (hash: bde5kTukmqHATGWW/dQkhnT+bwSXC3+2TUXQVaF4eRk=)
2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: fXDltlO5jGVEHiAT6ya59qlKY9ayQIojwvCJie9j6Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:84:89:d3:21:a2:83:43:de:5f:1b:28:2b:9e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Validity
Not Before: Mar 25 23:00:39 2026 GMT
Not After : Mar 26 23:00:39 2026 GMT
Subject: CN=18f902a00a7c4e90ad36e84c6186b00adaa77758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:de:eb:ae:70:8c:6c:56:3c:b6:da:4f:4b:
93:9a:ee:ce:80:b4:b7:d3:e2:92:eb:96:5d:43:d7:
d3:a1:7e:27:cf:64:ab:0f:d4:17:de:67:ef:02:1e:
aa:2a:f4:5d:4a:ee:44:f3:cd:b8:c8:ba:ed:de:2f:
a8:67:01:f5:59:fb:26:6c:b6:e3:3f:d6:69:d2:fa:
67:01:00:66:fe:9b:63:34:0f:87:bb:68:4d:ac:9f:
44:8c:12:42:52:79:db:a2:5a:16:42:16:ed:ea:e3:
40:31:b1:a8:73:50:e4:9f:bb:db:98:59:45:84:12:
75:a5:94:ce:75:a1:e3:eb:8a:94:b4:78:a9:7d:45:
50:73:2a:32:91:4b:0a:0f:22:f3:d9:f3:ef:ef:bc:
91:1e:42:bc:08:87:41:e3:04:2f:d6:92:34:4c:1f:
a6:56:fa:f3:cb:db:52:68:37:36:66:1b:fb:7c:c5:
bf:65:63:ba:2f:8b:16:b3:b0:f1:a6:0a:d9:53:0b:
95:24:9e:16:80:d4:c5:7d:85:9f:bf:1e:05:e6:89:
7e:63:90:3b:17:46:b0:47:db:db:85:d0:c2:f7:9a:
81:22:d1:d4:3b:b5:fa:c4:ed:67:a5:60:ee:b7:eb:
24:01:aa:8d:9f:b0:b8:da:f0:ab:f7:0d:a1:cf:c7:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F9:02:A0:0A:7C:4E:90:AD:36:E8:4C:61:86:B0:0A:DA:A7:77:58
X509v3 Authority Key Identifier:
keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:91:96:14:5c:28:4b:47:6b:7f:37:99:c4:bf:a0:aa:b8:07:
a1:23:a1:61:c4:f3:17:b8:da:51:1b:7e:d1:18:3a:c6:bd:41:
e4:46:ca:f2:5f:ad:81:68:2c:68:84:a4:5a:7a:44:87:09:54:
b6:e8:38:bd:d7:21:76:a5:e3:8c:c0:06:fe:49:a2:17:aa:1f:
25:a8:5b:c4:84:36:1f:18:ca:da:aa:bd:1d:a4:25:2d:d6:09:
01:cd:e9:db:19:bb:12:56:71:23:13:68:fe:f1:2b:d6:4a:c8:
64:15:7b:bf:d6:85:1f:13:1d:f5:e8:60:fd:7f:6d:9f:8d:ac:
1a:e2:06:ef:b0:68:7f:50:ee:35:ac:df:5a:37:c8:d7:08:ca:
03:d2:3c:46:51:2c:41:5c:7d:53:af:3b:ae:eb:07:9b:df:b8:
98:a2:5b:fe:9b:ad:d3:c5:cf:20:4e:7b:e1:7d:f8:9e:6b:93:
ce:26:cd:ba:9f:be:9e:1c:c6:92:ac:50:77:56:de:b1:1b:bf:
76:be:a0:49:8b:17:6f:fa:3d:3a:29:4e:9b:2b:5b:32:50:dc:
91:63:4e:ec:68:5b:3e:05:a6:7e:17:45:99:72:83:89:6d:c5:
77:39:4a:ab:29:47:ab:11:f2:e4:31:d2:9a:c2:65:af:36:e5:
2e:1d:c3:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOoSJ0yGig0PeXxsoK56mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkN2NiOTdiNTIzYzczZjE0MDZkNjNjNzY3YzczZDljOTU3
ZDQzM2IwHhcNMjYwMzI1MjMwMDM5WhcNMjYwMzI2MjMwMDM5WjAzMTEwLwYDVQQD
EygxOGY5MDJhMDBhN2M0ZTkwYWQzNmU4NGM2MTg2YjAwYWRhYTc3NzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMfe665wjGxWPLbaT0uTmu7OgLS3
0+KS65ZdQ9fToX4nz2SrD9QX3mfvAh6qKvRdSu5E8824yLrt3i+oZwH1WfsmbLbj
P9Zp0vpnAQBm/ptjNA+Hu2hNrJ9EjBJCUnnboloWQhbt6uNAMbGoc1Dkn7vbmFlF
hBJ1pZTOdaHj64qUtHipfUVQcyoykUsKDyLz2fPv77yRHkK8CIdB4wQv1pI0TB+m
Vvrzy9tSaDc2Zhv7fMW/ZWO6L4sWs7DxpgrZUwuVJJ4WgNTFfYWfvx4F5ol+Y5A7
F0awR9vbhdDC95qBItHUO7X6xO1npWDut+skAaqNn7C42vCr9w2hz8fWJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBj5AqAKfE6QrTboTGGGsArap3dYMB8GA1UdIwQY
MBaAFM18uXtSPHPxQG1jx2fHPZyVfUM7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jMmUxOGMtYzYzZi00ZGQzLTg5MjEt
MDUxMTZjOWY4YWVmLzEvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9jMmUxOGMtYzYzZi00ZGQzLTg5MjEtMDUxMTZjOWY4YWVm
LzEvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJGWFFwo
S0drfzeZxL+gqrgHoSOhYcTzF7jaURt+0Rg6xr1B5EbK8l+tgWgsaISkWnpEhwlU
tug4vdchdqXjjMAG/kmiF6ofJahbxIQ2HxjK2qq9HaQlLdYJAc3p2xm7ElZxIxNo
/vEr1krIZBV7v9aFHxMd9ehg/X9tn42sGuIG77Bof1DuNazfWjfI1wjKA9I8RlEs
QVx9U687rusHm9+4mKJb/put08XPIE574X34nmuTzibNup++nhzGkqxQd1besRu/
dr6gSYsXb/o9OilOmytbMlDckWNO7GhbPgWmfhdFmXKDiW3FdzlKqylHqxHy5DHS
msJlrzblLh3Dgg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:17 2026 by rpki-client