Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File: zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier: wdPXIMaZEZRaqRWDVlITOtfByTi4F0ZvHuiR3Vk+SFw=
Subject key identifier: 84:EB:BF:3E:70:87:F0:BC:55:61:7E:5F:FA:70:DB:01:B8:00:1A:0A
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer: /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial: 019D277237DAA416C96857B4890ED4F7B360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number: 109F
Signing time: Thu 26 Mar 2026 00:01:29 +0000
Manifest this update: Thu 26 Mar 2026 00:01:29 +0000
Manifest next update: Fri 27 Mar 2026 00:01:29 +0000
Files and hashes: 1: JGYrxjnfX7ZgUGiolA_6wcQdvCk.roa (hash: Fkerbuxc2uV9f5DPxNh2dXMhGEoLKCOWYFOXUdDcPOI=)
2: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: AfIAKPnbi4lc56n2OPAADaKqb2TthxI0gm5EkzDRTFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:37:da:a4:16:c9:68:57:b4:89:0e:d4:f7:b3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Validity
Not Before: Mar 26 00:01:29 2026 GMT
Not After : Mar 27 00:01:29 2026 GMT
Subject: CN=84ebbf3e7087f0bc55617e5ffa70db01b8001a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:63:df:d7:41:ac:e3:09:a9:7b:b8:d6:3d:
94:a4:ac:1e:ba:0e:02:a2:0e:40:6e:96:61:3f:14:
07:db:a6:0d:06:34:da:06:de:77:d9:f2:68:b6:0d:
b2:17:95:2b:70:a9:3a:95:ae:4f:cb:7c:8a:dd:45:
53:8d:90:c1:bc:8b:ed:24:2d:98:6c:1b:94:ec:f7:
ff:53:69:60:2b:29:f3:e4:0b:3c:e8:8d:a5:2c:ba:
6c:0b:02:b1:ca:10:42:47:f1:f0:20:2f:ee:13:84:
bd:41:eb:ea:d3:60:9c:e4:71:49:8c:8c:74:62:0f:
0f:41:ae:9b:75:39:aa:35:84:89:4d:0d:c8:4c:90:
8c:0f:19:70:d7:74:bf:8b:e4:52:ab:9e:ff:29:bf:
18:06:8d:5f:35:d2:9e:21:bc:6a:69:d6:fb:45:ab:
6e:73:7d:fc:16:df:52:e7:c2:d1:a6:51:17:a0:41:
5e:14:b3:64:32:c7:18:dc:02:4b:62:50:ab:4c:41:
1a:e6:5c:25:7e:50:98:91:c4:e7:3a:f3:c1:03:4a:
1e:1c:40:bc:f0:83:97:fa:6c:2f:f8:3b:db:38:a4:
e0:65:24:a1:57:5f:32:f6:f2:39:7d:2a:54:d2:76:
ae:35:52:f8:13:86:9a:20:d8:59:91:b1:f2:23:b2:
62:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EB:BF:3E:70:87:F0:BC:55:61:7E:5F:FA:70:DB:01:B8:00:1A:0A
X509v3 Authority Key Identifier:
keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:19:b7:0b:15:f6:05:4d:da:94:56:20:d4:40:13:9c:57:a5:
0e:bf:69:81:98:e7:91:ac:7f:bf:8d:74:e6:20:62:bd:f4:39:
32:15:8a:57:57:62:8d:91:91:06:37:ad:fd:7f:94:16:06:be:
2f:c8:83:19:be:ac:45:11:ca:59:28:2b:61:7c:b6:ec:88:86:
be:bd:fb:f2:4a:57:42:78:d6:ac:f0:99:e3:f4:49:54:db:14:
1b:db:d3:06:63:4f:d5:47:d7:48:c6:c2:53:df:72:a8:0d:0e:
8f:7c:20:b8:78:5f:1b:36:a7:f0:f4:60:cb:50:6f:73:a9:3e:
7e:d7:23:1e:80:15:be:ff:e3:5d:9c:95:7d:2f:14:4b:00:0d:
b7:df:5a:97:2f:56:95:77:8b:7e:47:ad:41:03:2a:ea:4d:d4:
01:24:b2:11:45:e8:66:86:23:81:e4:57:06:9e:7f:37:e5:98:
fa:a5:ee:a5:9f:be:8d:d5:18:26:e8:95:c9:39:c1:02:c2:d2:
91:a0:b4:28:dd:a2:bc:59:e1:ef:e0:2d:d9:69:b8:4b:e0:ef:
c4:06:6e:d4:22:bf:2d:03:f9:a6:6d:f1:27:8e:dc:e4:10:3c:
77:1c:cb:90:52:b3:06:0d:11:ad:a2:fe:3c:63:0e:2b:28:bf:
80:55:f1:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncjfapBbJaFe0iQ7U97NgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNDBkNWVhNTlmODBkYTYxYjQ0ODZiZDk5OWJlMTEyYTFh
MzUzODcwHhcNMjYwMzI2MDAwMTI5WhcNMjYwMzI3MDAwMTI5WjAzMTEwLwYDVQQD
Eyg4NGViYmYzZTcwODdmMGJjNTU2MTdlNWZmYTcwZGIwMWI4MDAxYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygJj39dBrOMJqXu41j2UpKweug4C
og5AbpZhPxQH26YNBjTaBt532fJotg2yF5UrcKk6la5Py3yK3UVTjZDBvIvtJC2Y
bBuU7Pf/U2lgKynz5As86I2lLLpsCwKxyhBCR/HwIC/uE4S9Qevq02Cc5HFJjIx0
Yg8PQa6bdTmqNYSJTQ3ITJCMDxlw13S/i+RSq57/Kb8YBo1fNdKeIbxqadb7Ratu
c338Ft9S58LRplEXoEFeFLNkMscY3AJLYlCrTEEa5lwlflCYkcTnOvPBA0oeHEC8
8IOX+mwv+DvbOKTgZSShV18y9vI5fSpU0nauNVL4E4aaINhZkbHyI7JiLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITrvz5wh/C8VWF+X/pw2wG4ABoKMB8GA1UdIwQY
MBaAFM1A1epZ+A2mG0SGvZmb4RKho1OHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWIt
ZjYyMzMwNGVkNzlhLzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWItZjYyMzMwNGVkNzlh
LzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshm3CxX2
BU3alFYg1EATnFelDr9pgZjnkax/v4105iBivfQ5MhWKV1dijZGRBjet/X+UFga+
L8iDGb6sRRHKWSgrYXy27IiGvr378kpXQnjWrPCZ4/RJVNsUG9vTBmNP1UfXSMbC
U99yqA0Oj3wguHhfGzan8PRgy1Bvc6k+ftcjHoAVvv/jXZyVfS8USwANt99aly9W
lXeLfketQQMq6k3UASSyEUXoZoYjgeRXBp5/N+WY+qXupZ++jdUYJuiVyTnBAsLS
kaC0KN2ivFnh7+At2Wm4S+DvxAZu1CK/LQP5pm3xJ47c5BA8dxzLkFKzBg0RraL+
PGMOKyi/gFXxOQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:30 2026 by rpki-client