Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File: ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier: kMhTzR/XXPP2Fbzt3APWYKejRl4kuwYl0X0SjNGVK8A=
Subject key identifier: 8F:7F:F6:01:E6:EF:A5:F1:40:6D:94:B3:35:E1:2D:99:E8:BF:64:E0
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 019E1DC73D2A330B0DDCE74C5F288CBF7086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 20:00:57 +0000
Manifest this update: Tue 12 May 2026 20:00:57 +0000
Manifest next update: Wed 13 May 2026 20:00:57 +0000
Files and hashes: 1: Bge4UQP__-DVB-KXu8QE0dyV_no.roa (hash: empz0X3iGWbWnVRP0ZliKC+Au9jenyd1vXKmWTaIsLA=)
2: Jz_svkdguP3AXC17Oc-v9vpSLo0.roa (hash: nZ1Y4RSNexYF/KVR8IvOZJPdDsAC2m7rxHaUZuQNyXw=)
3: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: +Nc4hYSr0zF35b+MLH8ZlCuCB7+QsAP204+ZN61YOE4=)
4: k-0ai5LmPbShGWzhq7tl3QEV5xg.roa (hash: lX1a4+6IcJDs034Yg/uu30HJfCoVoIaGwoVAFeOpt4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:3d:2a:33:0b:0d:dc:e7:4c:5f:28:8c:bf:70:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: May 12 20:00:57 2026 GMT
Not After : May 13 20:00:57 2026 GMT
Subject: CN=8f7ff601e6efa5f1406d94b335e12d99e8bf64e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:3d:8f:6a:ed:3c:b1:a2:23:3d:a3:24:80:
24:eb:40:04:c2:44:55:8c:40:9b:5e:d7:82:bb:ed:
76:50:0f:57:b5:a0:5d:3a:a1:25:87:a7:b5:cb:d4:
37:32:bf:9f:80:8a:a8:5c:9e:26:04:2b:c3:6b:0e:
6e:9b:ed:d6:71:33:08:c7:50:5e:01:fa:2a:7f:46:
4c:bc:bf:a5:a2:61:2f:3d:6c:b9:f1:4b:a7:32:6c:
19:95:5c:b2:44:db:2f:69:55:43:6f:2c:ea:86:42:
e2:08:e7:3c:c0:58:9f:91:0c:ca:78:4a:f0:e4:bf:
1c:90:be:88:0f:e0:1f:a1:ac:26:fa:c4:41:df:93:
0b:a9:dd:0d:31:50:c7:89:60:80:6e:67:54:a1:87:
5d:bc:cf:84:86:fb:8f:6e:7d:00:4a:db:24:1f:66:
38:49:2c:65:64:81:9c:85:0d:de:ab:e7:0f:60:14:
12:0e:1c:49:65:f2:c7:bc:eb:c3:97:fe:18:30:83:
09:83:46:ea:9f:65:84:66:77:22:79:a2:0d:cd:a8:
60:55:00:da:1d:a8:1e:2f:16:f2:4e:eb:47:83:df:
8d:40:96:9d:fc:3c:57:76:60:68:72:25:60:f6:5a:
97:16:73:80:94:76:16:03:ba:36:eb:6f:44:4f:e8:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7F:F6:01:E6:EF:A5:F1:40:6D:94:B3:35:E1:2D:99:E8:BF:64:E0
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:81:e2:e1:d4:93:82:32:8b:3b:c9:c4:57:9d:cb:17:02:52:
51:6b:89:96:4d:10:03:7d:aa:54:25:30:be:3a:1c:00:9d:65:
7b:02:23:e0:eb:4c:2f:bd:73:cd:9f:75:5e:bb:a1:5a:30:27:
25:18:6d:00:78:91:a4:a0:2e:e0:cc:bf:ff:56:0b:2d:63:42:
92:b2:f2:5b:fd:84:ff:96:2a:d9:07:f0:3e:74:9b:46:00:4b:
89:7d:cf:09:ed:53:eb:8e:4c:f3:f7:42:82:0d:0e:7c:12:f7:
8b:f7:70:05:ef:fb:4f:d2:94:d9:99:96:e9:65:d7:a4:c4:54:
9e:57:3e:2e:74:34:37:0f:9d:41:31:15:71:50:ba:36:96:9e:
7f:e6:2d:10:bc:f7:32:1a:b6:7f:ac:47:a9:c0:5e:61:b2:8c:
56:93:02:b8:14:64:5b:34:5d:a4:2b:c2:0b:c9:7a:21:77:eb:
e9:05:b3:e4:2c:85:ce:ba:10:79:04:68:b1:fc:5c:5a:ed:86:
e0:37:15:b2:65:f8:db:b3:05:df:da:32:d5:17:5c:7c:a1:f6:
a0:32:c1:fc:14:1e:9f:14:95:31:a4:5e:f8:14:1b:9b:6f:fb:
1f:83:e5:54:46:4f:9c:1e:13:73:86:75:e0:c3:62:30:1b:35:
95:dd:8d:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxz0qMwsN3OdMXyiMv3CGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWE2Yjk3NWVhZmQyY2U1MTQ2ODcyMzgxNDM1NWY1NmM1
NWJhZmIwHhcNMjYwNTEyMjAwMDU3WhcNMjYwNTEzMjAwMDU3WjAzMTEwLwYDVQQD
Eyg4ZjdmZjYwMWU2ZWZhNWYxNDA2ZDk0YjMzNWUxMmQ5OWU4YmY2NGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35s9j2rtPLGiIz2jJIAk60AEwkRV
jECbXteCu+12UA9XtaBdOqElh6e1y9Q3Mr+fgIqoXJ4mBCvDaw5um+3WcTMIx1Be
Afoqf0ZMvL+lomEvPWy58UunMmwZlVyyRNsvaVVDbyzqhkLiCOc8wFifkQzKeErw
5L8ckL6ID+Afoawm+sRB35MLqd0NMVDHiWCAbmdUoYddvM+EhvuPbn0AStskH2Y4
SSxlZIGchQ3eq+cPYBQSDhxJZfLHvOvDl/4YMIMJg0bqn2WEZncieaINzahgVQDa
HageLxbyTutHg9+NQJad/DxXdmBociVg9lqXFnOAlHYWA7o2629ET+jdqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9/9gHm76XxQG2UszXhLZnov2TgMB8GA1UdIwQY
MBaAFGWaa5der9LOUUaHI4FDVfVsVbr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQt
ZWZmM2NkY2JkMDBhLzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQtZWZmM2NkY2JkMDBh
LzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4Hi4dST
gjKLO8nEV53LFwJSUWuJlk0QA32qVCUwvjocAJ1lewIj4OtML71zzZ91XruhWjAn
JRhtAHiRpKAu4My//1YLLWNCkrLyW/2E/5Yq2QfwPnSbRgBLiX3PCe1T645M8/dC
gg0OfBL3i/dwBe/7T9KU2ZmW6WXXpMRUnlc+LnQ0Nw+dQTEVcVC6Npaef+YtELz3
Mhq2f6xHqcBeYbKMVpMCuBRkWzRdpCvCC8l6IXfr6QWz5CyFzroQeQRosfxcWu2G
4DcVsmX427MF39oy1RdcfKH2oDLB/BQenxSVMaRe+BQbm2/7H4PlVEZPnB4Tc4Z1
4MNiMBs1ld2N4g==
-----END CERTIFICATE-----
Generated at Wed May 13 03:26:15 2026 by rpki-client