Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
File: zy7ueKAITYMd4aJQAYPhZIlRbM8.mft (raw, json)
Hash identifier: 4hIWEpU44WXQjnoW8W4QLYQn0m0NMWP2oYvdNEUDx74=
Subject key identifier: E1:12:8A:1B:1F:B1:ED:8D:2A:DE:6C:33:F7:1B:99:9F:67:6A:9A:F0
Authority key identifier: CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
Certificate issuer: /CN=cf2eee78a0084d831de1a2500183e16489516ccf
Certificate serial: 019D26962985CFA123A9CDA6BB4FAD1C6078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
Manifest number: 118A
Signing time: Wed 25 Mar 2026 20:01:08 +0000
Manifest this update: Wed 25 Mar 2026 20:01:08 +0000
Manifest next update: Thu 26 Mar 2026 20:01:08 +0000
Files and hashes: 1: 2hflLbfqAWKpFyYGnXBTWiWqwxs.roa (hash: lI9Xhzw78sH7hBtTcjJSosgoG/UbF5gG44NR4ynAOeo=)
2: zy7ueKAITYMd4aJQAYPhZIlRbM8.crl (hash: e72oQHcnkTFKPwJ0ObWylyY0s3FCj6otVLKtaWDmXBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:29:85:cf:a1:23:a9:cd:a6:bb:4f:ad:1c:60:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2eee78a0084d831de1a2500183e16489516ccf
Validity
Not Before: Mar 25 20:01:08 2026 GMT
Not After : Mar 26 20:01:08 2026 GMT
Subject: CN=e1128a1b1fb1ed8d2ade6c33f71b999f676a9af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:35:72:b6:4a:c2:d8:ee:14:0f:aa:ef:2b:20:
67:43:ff:b4:4d:a8:f0:2b:81:f5:7b:37:e6:32:6e:
7b:3e:8e:ff:c5:9a:e0:be:9c:9c:15:2a:0d:9e:1e:
e9:da:e1:85:f1:7a:2e:97:7f:99:e4:0a:29:f5:e1:
cd:6f:1b:20:cf:31:3b:eb:a6:0b:75:c3:84:7f:ff:
fa:8b:87:1a:69:a4:f0:82:40:eb:fa:d0:c1:ca:d8:
dc:88:7d:d0:06:8b:13:17:0c:60:f2:71:1b:e0:e8:
75:ed:83:98:35:60:d2:1a:8c:ef:e0:56:78:51:64:
0a:41:9f:a0:65:e7:0f:99:22:0b:a7:fa:39:4b:8c:
84:66:4e:20:14:32:4e:dc:c1:1d:ed:3c:70:7a:e9:
82:51:7d:50:7a:6e:35:37:35:d2:4c:37:41:43:05:
38:2e:3b:f4:1f:6a:14:6d:0c:09:47:74:e4:01:d1:
09:85:04:40:a7:2a:70:03:14:51:29:53:b7:d1:3e:
8a:ed:e8:79:2f:9a:26:ae:00:fa:aa:50:69:83:77:
2b:59:d8:b8:91:37:36:d5:ee:63:b2:27:51:a6:5b:
96:b3:ce:04:a7:61:ff:b5:c7:17:8a:db:94:98:10:
fa:de:8b:43:44:e7:94:d6:86:0e:35:03:f5:b6:04:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:12:8A:1B:1F:B1:ED:8D:2A:DE:6C:33:F7:1B:99:9F:67:6A:9A:F0
X509v3 Authority Key Identifier:
keyid:CF:2E:EE:78:A0:08:4D:83:1D:E1:A2:50:01:83:E1:64:89:51:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy7ueKAITYMd4aJQAYPhZIlRbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d7e660-6912-4380-ab4f-718b9c40fd25/1/zy7ueKAITYMd4aJQAYPhZIlRbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:25:6e:c4:70:3c:1b:c6:d5:e1:d8:fb:75:1a:ef:25:69:9c:
0d:c2:cd:ba:95:3f:50:e3:c7:c4:95:f6:9c:f2:16:d4:d3:3b:
c9:14:dd:1a:c1:10:7d:f4:3e:77:06:4c:98:76:10:d9:a8:1e:
ed:61:1f:09:e9:cf:7c:3a:45:b1:af:2e:4a:6e:7b:21:75:0f:
54:06:1d:51:6b:55:31:f7:7a:b6:4c:97:5f:de:d4:f2:5b:98:
3a:02:d6:4a:07:a3:87:b4:5f:a7:d8:25:d7:1b:e8:76:b0:81:
bd:ff:78:c2:76:4b:de:e8:9e:cc:a4:4f:21:3b:49:ad:f1:a3:
b3:48:8c:df:71:45:be:df:14:49:17:0f:20:e2:95:ff:f4:bb:
25:9f:c4:e9:38:3b:34:f0:2d:61:82:a7:6b:bb:61:f0:ea:26:
32:58:77:b3:ea:b3:35:25:46:ef:47:d5:f5:87:26:73:fb:60:
e8:81:bd:39:ee:78:f4:c5:f6:41:9f:b9:80:c0:1e:20:78:99:
58:34:3e:a9:8e:56:4c:a7:e9:6f:9b:8e:2a:7f:d3:1e:cb:42:
ca:68:b8:48:db:61:00:8c:67:cd:c1:41:82:5e:fd:1e:25:78:
bb:80:53:26:c2:9b:3d:a4:6c:2b:5d:0f:05:e4:79:2d:ad:47:
11:76:91:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlimFz6Ejqc2mu0+tHGB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMmVlZTc4YTAwODRkODMxZGUxYTI1MDAxODNlMTY0ODk1
MTZjY2YwHhcNMjYwMzI1MjAwMTA4WhcNMjYwMzI2MjAwMTA4WjAzMTEwLwYDVQQD
EyhlMTEyOGExYjFmYjFlZDhkMmFkZTZjMzNmNzFiOTk5ZjY3NmE5YWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDVytkrC2O4UD6rvKyBnQ/+0Tajw
K4H1ezfmMm57Po7/xZrgvpycFSoNnh7p2uGF8Xoul3+Z5Aop9eHNbxsgzzE766YL
dcOEf//6i4caaaTwgkDr+tDBytjciH3QBosTFwxg8nEb4Oh17YOYNWDSGozv4FZ4
UWQKQZ+gZecPmSILp/o5S4yEZk4gFDJO3MEd7TxweumCUX1Qem41NzXSTDdBQwU4
Ljv0H2oUbQwJR3TkAdEJhQRApypwAxRRKVO30T6K7eh5L5omrgD6qlBpg3crWdi4
kTc21e5jsidRpluWs84Ep2H/tccXituUmBD63otDROeU1oYONQP1tgRnEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOESihsfse2NKt5sM/cbmZ9naprwMB8GA1UdIwQY
MBaAFM8u7nigCE2DHeGiUAGD4WSJUWzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kN2U2NjAtNjkxMi00MzgwLWFiNGYt
NzE4YjljNDBmZDI1LzEvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kN2U2NjAtNjkxMi00MzgwLWFiNGYtNzE4YjljNDBmZDI1
LzEvenk3dWVLQUlUWU1kNGFKUUFZUGhaSWxSYk04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCVuxHA8
G8bV4dj7dRrvJWmcDcLNupU/UOPHxJX2nPIW1NM7yRTdGsEQffQ+dwZMmHYQ2age
7WEfCenPfDpFsa8uSm57IXUPVAYdUWtVMfd6tkyXX97U8luYOgLWSgejh7Rfp9gl
1xvodrCBvf94wnZL3uiezKRPITtJrfGjs0iM33FFvt8USRcPIOKV//S7JZ/E6Tg7
NPAtYYKna7th8OomMlh3s+qzNSVG70fV9Ycmc/tg6IG9Oe549MX2QZ+5gMAeIHiZ
WDQ+qY5WTKfpb5uOKn/THstCymi4SNthAIxnzcFBgl79HiV4u4BTJsKbPaRsK10P
BeR5La1HEXaRKA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:10 2026 by rpki-client