Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json)
Hash identifier: V5JiTMFvjTzRdKf2dyASdg6OHD+CPTQ1Q5YXUYUHjgA=
Subject key identifier: B6:46:10:CD:53:CE:53:97:25:04:60:62:AD:21:61:87:B3:D2:F9:28
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 019D26CD7CBF1414FBE95B9C3D30941EE382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
Manifest number: 0F11
Signing time: Wed 25 Mar 2026 21:01:34 +0000
Manifest this update: Wed 25 Mar 2026 21:01:34 +0000
Manifest next update: Thu 26 Mar 2026 21:01:34 +0000
Files and hashes: 1: lgjWE5f6FBur4txLoui9WQ1m0Wg.roa (hash: Nc9dyrcUa1QHYvN/T1aLg2QBZKFaf7gWSdVmcW5gdec=)
2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: EiR4WV3jZ5xjGZznnsoNLH0VmEgXD6qAMV5YOP3cSL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7c:bf:14:14:fb:e9:5b:9c:3d:30:94:1e:e3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Mar 25 21:01:34 2026 GMT
Not After : Mar 26 21:01:34 2026 GMT
Subject: CN=b64610cd53ce539725046062ad216187b3d2f928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:23:43:10:aa:f5:7e:50:14:60:e6:52:5c:
2d:fb:15:2c:4c:73:8e:29:3f:98:c8:f6:be:5b:24:
02:74:b8:95:50:2f:1f:8b:9c:9d:d3:01:01:c5:00:
39:2b:6a:bf:9f:30:a6:47:a1:e9:b2:a9:08:18:ad:
f2:a6:0c:5f:a8:b0:f7:0a:d6:ae:70:d7:c5:7a:2e:
b5:b2:d8:a5:8f:c9:be:22:f6:14:07:61:3f:a8:9e:
3a:e8:fb:03:44:d3:44:93:60:fd:88:24:e2:57:cc:
3b:03:95:1d:ef:42:b2:35:f9:33:63:be:ce:b9:dc:
80:37:5e:87:79:60:ba:eb:e7:86:01:bc:a7:81:a3:
61:ea:b0:29:f1:3a:7c:c3:53:81:0d:13:3c:1e:ec:
cc:8f:e4:66:58:5f:a4:41:bc:f1:72:f0:09:10:b1:
67:08:36:5c:8e:9e:ab:c4:a2:e9:eb:c1:5e:e2:d0:
ad:3f:26:f7:1b:ee:3f:c6:76:ab:f3:5d:a8:aa:bf:
da:68:9a:b1:52:53:7e:9b:26:bf:d1:01:12:67:d2:
46:02:f8:eb:cc:09:e4:8e:39:3f:e5:34:0c:3e:55:
d8:54:00:69:40:be:0f:12:4f:12:4f:ba:c5:05:0e:
8c:6d:a2:9c:ed:b0:2f:ce:60:7c:bb:7a:f4:7d:e9:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:46:10:CD:53:CE:53:97:25:04:60:62:AD:21:61:87:B3:D2:F9:28
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9e:80:af:54:1b:f6:59:ed:7e:b0:02:37:fc:6a:9d:42:50:
81:85:10:5c:13:34:b3:e8:af:40:b9:20:6a:f9:3e:e3:98:ee:
14:d1:46:b2:05:e4:11:c4:7f:27:e2:45:ff:11:d7:3f:da:6d:
61:09:39:7b:cf:f5:b1:d8:61:d1:a0:f9:1f:ef:9f:75:39:3b:
30:9a:a9:5f:f6:85:7d:0e:b4:e8:b5:b6:64:4f:6d:b3:73:ff:
be:dd:d0:30:a3:1b:6e:2a:87:f8:98:5d:de:a8:8e:60:6e:06:
4e:26:9b:13:7b:72:12:ba:82:79:4d:11:c5:4b:12:1e:bb:88:
3e:3e:2e:00:38:a4:62:6e:30:9d:c6:89:b8:98:cd:c2:df:4b:
85:57:63:1a:83:e2:21:60:4b:88:0c:d5:5a:6f:80:7a:d3:95:
be:6c:3f:e1:ea:f5:fc:2b:94:07:34:ba:c0:bd:bb:2c:f7:b3:
1b:31:93:ab:8c:30:94:26:68:d7:ec:89:be:4a:c8:c1:5c:1f:
96:98:92:c1:de:7d:6d:e1:70:44:00:84:d8:e5:65:e8:09:eb:
1e:21:05:e2:23:19:72:31:0f:86:fd:5b:74:2f:2b:44:43:b4:
fd:0d:11:61:4c:22:17:f4:b5:8d:a9:bf:e5:8e:e9:27:5d:e7:
79:98:64:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzXy/FBT76VucPTCUHuOCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWE3OGE4NTEyZjkwOWNlNmQ0NzMyNTJmMDRjZjE5ZTll
NjhhMmEwHhcNMjYwMzI1MjEwMTM0WhcNMjYwMzI2MjEwMTM0WjAzMTEwLwYDVQQD
EyhiNjQ2MTBjZDUzY2U1Mzk3MjUwNDYwNjJhZDIxNjE4N2IzZDJmOTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmwjQxCq9X5QFGDmUlwt+xUsTHOO
KT+YyPa+WyQCdLiVUC8fi5yd0wEBxQA5K2q/nzCmR6HpsqkIGK3ypgxfqLD3Ctau
cNfFei61stilj8m+IvYUB2E/qJ466PsDRNNEk2D9iCTiV8w7A5Ud70KyNfkzY77O
udyAN16HeWC66+eGAbyngaNh6rAp8Tp8w1OBDRM8HuzMj+RmWF+kQbzxcvAJELFn
CDZcjp6rxKLp68Fe4tCtPyb3G+4/xnar812oqr/aaJqxUlN+mya/0QESZ9JGAvjr
zAnkjjk/5TQMPlXYVABpQL4PEk8ST7rFBQ6MbaKc7bAvzmB8u3r0fengDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZGEM1TzlOXJQRgYq0hYYez0vkoMB8GA1UdIwQY
MBaAFKWaeKhRL5Cc5tRzJS8Ezxnp5ooqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpwNHFGRXZrSnptMUhNbEx3VFBHZW5taWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hYjU3YmQtY2ZlZC00NDFmLWE0Mzct
NDM4ZTg0YzcxMDdkLzEvcFpwNHFGRXZrSnptMUhNbEx3VFBHZW5taWlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9hYjU3YmQtY2ZlZC00NDFmLWE0MzctNDM4ZTg0YzcxMDdk
LzEvcFpwNHFGRXZrSnptMUhNbEx3VFBHZW5taWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ56Ar1Qb
9lntfrACN/xqnUJQgYUQXBM0s+ivQLkgavk+45juFNFGsgXkEcR/J+JF/xHXP9pt
YQk5e8/1sdhh0aD5H++fdTk7MJqpX/aFfQ606LW2ZE9ts3P/vt3QMKMbbiqH+Jhd
3qiOYG4GTiabE3tyErqCeU0RxUsSHruIPj4uADikYm4wncaJuJjNwt9LhVdjGoPi
IWBLiAzVWm+AetOVvmw/4er1/CuUBzS6wL27LPezGzGTq4wwlCZo1+yJvkrIwVwf
lpiSwd59beFwRACE2OVl6AnrHiEF4iMZcjEPhv1bdC8rREO0/Q0RYUwiF/S1jam/
5Y7pJ13neZhk7Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:03:49 2026 by rpki-client