Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/446566-cbd6-4784-9659-ed76b1bab44a/1/zdfOlLxNAZntKu9owrsx-gIpXLQ.mft
File: zdfOlLxNAZntKu9owrsx-gIpXLQ.mft (raw, json)
Hash identifier: 8qKFktq9BfUCIfMhIQuVV+EpVBN6DPWtkwiQ6CLVEtY=
Subject key identifier: 43:98:53:2C:C6:04:5B:37:6A:5F:82:52:A4:AC:64:27:3D:41:B6:16
Authority key identifier: CD:D7:CE:94:BC:4D:01:99:ED:2A:EF:68:C2:BB:31:FA:02:29:5C:B4
Certificate issuer: /CN=cdd7ce94bc4d0199ed2aef68c2bb31fa02295cb4
Certificate serial: 019D27E03C5DF533F35C6C421B00BE890C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdfOlLxNAZntKu9owrsx-gIpXLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/446566-cbd6-4784-9659-ed76b1bab44a/1/zdfOlLxNAZntKu9owrsx-gIpXLQ.mft
Manifest number: E7
Signing time: Thu 26 Mar 2026 02:01:40 +0000
Manifest this update: Thu 26 Mar 2026 02:01:40 +0000
Manifest next update: Fri 27 Mar 2026 02:01:40 +0000
Files and hashes: 1: TwBAsjP2MvPS-rT4YB1E6Tl0gwU.roa (hash: P+65Uksp14i7wQkszic60xCr/XYJCUKbR4MM3wfjG28=)
2: zdfOlLxNAZntKu9owrsx-gIpXLQ.crl (hash: rpfj3ffmTnoyEAQDH88xXfuUSBYTNIT61Ec1c9jwmQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/446566-cbd6-4784-9659-ed76b1bab44a/1/zdfOlLxNAZntKu9owrsx-gIpXLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/446566-cbd6-4784-9659-ed76b1bab44a/1/zdfOlLxNAZntKu9owrsx-gIpXLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdfOlLxNAZntKu9owrsx-gIpXLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:3c:5d:f5:33:f3:5c:6c:42:1b:00:be:89:0c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdd7ce94bc4d0199ed2aef68c2bb31fa02295cb4
Validity
Not Before: Mar 26 02:01:40 2026 GMT
Not After : Mar 27 02:01:40 2026 GMT
Subject: CN=4398532cc6045b376a5f8252a4ac64273d41b616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:40:e5:6a:44:57:bc:04:04:df:50:62:dd:
f0:07:56:2a:ad:60:70:8d:6d:8a:e6:0c:fa:a2:02:
bc:3e:5b:bd:9a:b7:76:61:51:7a:57:e5:d4:6b:96:
dd:73:95:72:81:70:d7:24:2f:16:73:29:0f:20:8e:
23:6b:43:c6:4a:64:b2:18:6a:49:73:57:66:5f:30:
31:c6:c5:19:19:98:60:71:c6:fc:9a:6b:47:83:40:
64:6f:2e:d8:03:d4:ae:88:83:23:15:4e:c4:64:9b:
32:48:99:34:0b:ec:0c:d8:6d:f8:64:ad:32:f5:9a:
24:fb:45:6f:f5:db:f7:ae:3c:3e:c3:f1:f8:ed:b1:
9e:b4:72:2b:3e:9c:5b:4d:b0:b2:f5:cd:c6:1d:b6:
fa:88:b1:a8:44:5a:49:b6:40:f6:cd:3d:43:70:24:
39:67:8e:ea:ef:ec:c5:98:d9:af:38:da:21:f5:67:
5d:c1:a7:4f:92:36:e0:2d:40:e9:61:ef:59:92:63:
5e:79:17:bf:9a:c7:25:84:a7:a6:da:5e:c2:2c:41:
da:d8:ef:14:4e:b0:c4:ca:31:25:28:75:05:a3:86:
04:d0:76:2a:54:11:9f:e3:9d:17:ba:dc:97:71:a8:
26:fd:c2:c8:45:1f:7b:f6:e1:46:f4:84:56:47:a7:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:98:53:2C:C6:04:5B:37:6A:5F:82:52:A4:AC:64:27:3D:41:B6:16
X509v3 Authority Key Identifier:
keyid:CD:D7:CE:94:BC:4D:01:99:ED:2A:EF:68:C2:BB:31:FA:02:29:5C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdfOlLxNAZntKu9owrsx-gIpXLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/446566-cbd6-4784-9659-ed76b1bab44a/1/zdfOlLxNAZntKu9owrsx-gIpXLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/446566-cbd6-4784-9659-ed76b1bab44a/1/zdfOlLxNAZntKu9owrsx-gIpXLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9a:82:42:4f:0a:50:15:e0:76:28:52:2a:a8:06:6f:02:ba:
05:74:c0:2e:9a:59:c2:58:48:ec:72:a4:cc:e1:2e:61:d0:e0:
8b:44:6d:6e:35:47:ef:f8:4a:37:23:f6:4e:a3:51:49:b7:f0:
b0:ca:70:0d:1f:99:e9:5d:87:c5:df:65:0d:69:4e:d7:e6:16:
ab:32:b2:80:b3:c9:16:e7:ed:f4:4d:fd:ee:43:0f:2b:3c:17:
cb:fc:d6:1d:df:dc:27:8c:67:f7:f0:92:13:a5:21:6d:d7:cb:
99:23:cf:f9:35:1c:a7:ef:9c:99:8e:8a:99:4e:9b:7a:ee:c8:
bd:f3:53:f0:36:da:2c:0b:8e:8a:ab:9c:f5:46:bd:fc:53:fa:
b0:c4:4f:7f:8a:27:35:fb:2f:15:55:4c:2e:2b:d0:a6:e0:9c:
42:f6:8f:f7:7f:d8:a4:b2:1e:71:6a:0c:0c:76:b8:5c:32:5d:
17:ac:50:ff:6b:b6:ce:f0:68:b1:6e:3b:54:96:21:1f:57:ad:
9c:2a:16:f9:6e:5f:b1:77:0b:85:43:82:78:ac:37:f0:3b:a5:
66:e4:07:74:20:9d:b3:c1:c6:bb:3b:f2:aa:0b:b7:26:32:d2:
d9:1a:e8:61:66:ec:b3:78:71:af:9c:f0:ba:2c:b4:e8:25:c1:
79:d7:40:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4Dxd9TPzXGxCGwC+iQyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZDdjZTk0YmM0ZDAxOTllZDJhZWY2OGMyYmIzMWZhMDIy
OTVjYjQwHhcNMjYwMzI2MDIwMTQwWhcNMjYwMzI3MDIwMTQwWjAzMTEwLwYDVQQD
Eyg0Mzk4NTMyY2M2MDQ1YjM3NmE1ZjgyNTJhNGFjNjQyNzNkNDFiNjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUhA5WpEV7wEBN9QYt3wB1YqrWBw
jW2K5gz6ogK8Plu9mrd2YVF6V+XUa5bdc5VygXDXJC8WcykPII4ja0PGSmSyGGpJ
c1dmXzAxxsUZGZhgccb8mmtHg0Bkby7YA9SuiIMjFU7EZJsySJk0C+wM2G34ZK0y
9Zok+0Vv9dv3rjw+w/H47bGetHIrPpxbTbCy9c3GHbb6iLGoRFpJtkD2zT1DcCQ5
Z47q7+zFmNmvONoh9WddwadPkjbgLUDpYe9ZkmNeeRe/msclhKem2l7CLEHa2O8U
TrDEyjElKHUFo4YE0HYqVBGf450XutyXcagm/cLIRR979uFG9IRWR6eIawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOYUyzGBFs3al+CUqSsZCc9QbYWMB8GA1UdIwQY
MBaAFM3XzpS8TQGZ7SrvaMK7MfoCKVy0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemRmT2xMeE5BWm50S3U5b3dyc3gtZ0lwWExRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi80NDY1NjYtY2JkNi00Nzg0LTk2NTkt
ZWQ3NmIxYmFiNDRhLzEvemRmT2xMeE5BWm50S3U5b3dyc3gtZ0lwWExRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi80NDY1NjYtY2JkNi00Nzg0LTk2NTktZWQ3NmIxYmFiNDRh
LzEvemRmT2xMeE5BWm50S3U5b3dyc3gtZ0lwWExRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJqCQk8K
UBXgdihSKqgGbwK6BXTALppZwlhI7HKkzOEuYdDgi0RtbjVH7/hKNyP2TqNRSbfw
sMpwDR+Z6V2Hxd9lDWlO1+YWqzKygLPJFuft9E397kMPKzwXy/zWHd/cJ4xn9/CS
E6UhbdfLmSPP+TUcp++cmY6KmU6beu7IvfNT8DbaLAuOiquc9Ua9/FP6sMRPf4on
NfsvFVVMLivQpuCcQvaP93/YpLIecWoMDHa4XDJdF6xQ/2u2zvBosW47VJYhH1et
nCoW+W5fsXcLhUOCeKw38DulZuQHdCCds8HGuzvyqgu3JjLS2RroYWbss3hxr5zw
uiy06CXBeddA6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:36 2026 by rpki-client