Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier: l8YYzD2/cO85Tr6eIa86iZBZ4q+WD1/Hn5ay9HgJa98=
Subject key identifier: 5D:25:C8:91:21:FE:E3:A7:43:E7:D1:9A:A0:DD:2F:FB:DB:A4:50:A3
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial: 019D25BA4BBDB1C45BB7663CC18E6134202A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 16:00:59 +0000
Manifest this update: Wed 25 Mar 2026 16:00:59 +0000
Manifest next update: Thu 26 Mar 2026 16:00:59 +0000
Files and hashes: 1: TAemyk33p1zXgyxiSJqWPeQVynw.roa (hash: qzyHhOuBo7tPm0yMPXt6srTNFtIZysUY2o24I/uqBiU=)
2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: XoYmMUPDLM8kyyNz2e4Wz9QWtJBKRjq/psyePVVhGzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:4b:bd:b1:c4:5b:b7:66:3c:c1:8e:61:34:20:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Validity
Not Before: Mar 25 16:00:59 2026 GMT
Not After : Mar 26 16:00:59 2026 GMT
Subject: CN=5d25c89121fee3a743e7d19aa0dd2ffbdba450a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b6:20:c4:51:04:0b:a4:4f:11:b5:a6:fd:4e:
9a:28:2e:f0:bf:9f:19:f5:dd:e8:c5:cf:ff:c9:58:
3a:25:f3:5d:57:12:d5:fe:9f:12:2e:d7:02:af:72:
26:c2:90:5b:d0:e5:22:d7:3a:1e:28:f5:f4:bb:1f:
9b:85:03:5a:9c:e5:bd:8b:ca:c3:d9:f7:53:06:82:
9d:ce:36:a4:e1:25:85:c6:e7:c3:73:28:8b:88:74:
e8:69:0d:da:54:33:20:ac:d3:b2:9c:27:0e:63:c1:
0e:2f:4a:0b:14:74:12:bf:d1:29:14:69:ec:8e:e9:
5f:e1:62:a9:47:e3:ff:89:40:ff:e0:75:87:d3:ca:
7d:79:be:89:3c:a8:66:38:6b:bf:df:90:13:16:07:
c5:5a:a6:f8:73:fb:2a:13:c5:b3:e8:9e:46:72:76:
a3:3d:c0:67:31:17:db:c7:ff:46:a2:ec:27:34:93:
e9:2e:bd:13:95:38:22:27:95:f5:78:93:62:40:07:
d7:e8:c1:ca:15:9e:ba:b5:86:08:1f:44:8a:9d:e0:
60:08:50:7b:0f:a8:14:45:52:9d:f8:91:61:f3:41:
8f:1b:fc:06:c2:19:1c:ed:c9:92:4f:01:95:22:d2:
aa:80:b9:48:70:12:0a:26:ed:a9:36:fe:c2:56:06:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:25:C8:91:21:FE:E3:A7:43:E7:D1:9A:A0:DD:2F:FB:DB:A4:50:A3
X509v3 Authority Key Identifier:
keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:db:66:24:a3:89:f6:21:1b:a4:54:e3:fb:fe:03:b1:63:c2:
4d:a2:3e:4b:1e:45:55:b7:a4:c7:84:12:3f:75:41:54:3d:40:
80:e5:31:82:5d:84:62:e1:a1:89:06:6c:a7:96:c4:44:78:14:
cb:9c:2e:12:c4:9d:c7:dd:e9:c1:67:1f:21:36:f9:66:79:7f:
58:79:99:06:aa:41:40:2a:19:48:65:1e:13:48:5c:fd:2b:83:
cc:83:36:11:15:d6:20:b0:7d:15:14:99:0b:30:9a:a9:9d:3c:
3b:1e:2a:ee:2f:06:7d:c9:2d:2c:11:aa:6b:a5:10:ac:c3:a0:
30:53:52:0b:f4:2e:6b:72:a2:8f:6f:36:96:db:58:e4:c0:be:
b0:85:90:62:67:54:1b:7d:2f:7c:d6:13:8b:6d:8d:69:e0:f0:
09:f7:f3:22:1b:2a:12:e7:a4:e8:3a:52:52:6f:44:a5:41:1b:
de:8a:a0:10:73:44:be:86:cc:c8:3b:20:16:f7:88:ef:c5:ec:
70:f8:5b:16:bc:ff:4b:96:2c:1b:1f:83:f5:23:46:ad:c1:00:
14:12:e0:d5:19:1e:0d:85:a9:22:06:82:36:a3:36:1a:b3:60:
bf:da:1f:bd:e1:43:a6:e6:0e:c0:b0:60:d6:a1:97:52:2d:08:
ec:a0:fb:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luku9scRbt2Y8wY5hNCAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTAyYzA3Nzk3ZmEyMDNhMWUyNDkzYmEwZGQ4MDE5OWVk
OWJlMDUwHhcNMjYwMzI1MTYwMDU5WhcNMjYwMzI2MTYwMDU5WjAzMTEwLwYDVQQD
Eyg1ZDI1Yzg5MTIxZmVlM2E3NDNlN2QxOWFhMGRkMmZmYmRiYTQ1MGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7YgxFEEC6RPEbWm/U6aKC7wv58Z
9d3oxc//yVg6JfNdVxLV/p8SLtcCr3ImwpBb0OUi1zoeKPX0ux+bhQNanOW9i8rD
2fdTBoKdzjak4SWFxufDcyiLiHToaQ3aVDMgrNOynCcOY8EOL0oLFHQSv9EpFGns
julf4WKpR+P/iUD/4HWH08p9eb6JPKhmOGu/35ATFgfFWqb4c/sqE8Wz6J5Gcnaj
PcBnMRfbx/9GouwnNJPpLr0TlTgiJ5X1eJNiQAfX6MHKFZ66tYYIH0SKneBgCFB7
D6gURVKd+JFh80GPG/wGwhkc7cmSTwGVItKqgLlIcBIKJu2pNv7CVgaJAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0lyJEh/uOnQ+fRmqDdL/vbpFCjMB8GA1UdIwQY
MBaAFM6gLAd5f6IDoeJJO6DdgBme2b4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQt
N2VmMWI5MTU5ZWI2LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lMmRjNWItY2ViMi00MzVjLWFiYTQtN2VmMWI5MTU5ZWI2
LzEvenFBc0IzbF9vZ09oNGtrN29OMkFHWjdadmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdtmJKOJ
9iEbpFTj+/4DsWPCTaI+Sx5FVbekx4QSP3VBVD1AgOUxgl2EYuGhiQZsp5bERHgU
y5wuEsSdx93pwWcfITb5Znl/WHmZBqpBQCoZSGUeE0hc/SuDzIM2ERXWILB9FRSZ
CzCaqZ08Ox4q7i8GfcktLBGqa6UQrMOgMFNSC/Qua3Kij282lttY5MC+sIWQYmdU
G30vfNYTi22NaeDwCffzIhsqEuek6DpSUm9EpUEb3oqgEHNEvobMyDsgFveI78Xs
cPhbFrz/S5YsGx+D9SNGrcEAFBLg1RkeDYWpIgaCNqM2GrNgv9ofveFDpuYOwLBg
1qGXUi0I7KD78g==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:17:02 2026 by rpki-client