Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json)
Hash identifier: XRS/9HsZ3PlCbPeSR5wsUqlP7RVa5EPltg0HQfp1jZE=
Subject key identifier: 96:33:84:62:D1:DC:F3:DF:9E:B0:93:7C:F8:FC:36:DA:42:93:9C:75
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 019E1F115801AE946EE48ABDBE2BFC6A1CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
Manifest number: 0A3B
Signing time: Wed 13 May 2026 02:01:30 +0000
Manifest this update: Wed 13 May 2026 02:01:30 +0000
Manifest next update: Thu 14 May 2026 02:01:30 +0000
Files and hashes: 1: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: cSjaBMeNUA0yKX4EHUYpBShJ9DpV+NpSowL8T8V1bs0=)
2: ekOzOiDdfxxEUE52B61ICsigaF0.roa (hash: 6fj4c7wjlH2wB374dMtlshl1OSG/zfWE+ZknbaJj2LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:58:01:ae:94:6e:e4:8a:bd:be:2b:fc:6a:1c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: May 13 02:01:30 2026 GMT
Not After : May 14 02:01:30 2026 GMT
Subject: CN=96338462d1dcf3df9eb0937cf8fc36da42939c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:e6:1e:31:1f:c3:0d:26:08:f1:07:d5:81:
fe:6b:b1:23:88:bc:c1:e9:8d:39:57:76:b1:2d:94:
e2:52:d4:d2:96:11:ec:fd:59:b0:3f:3e:b9:5a:c9:
d1:fe:a7:d2:f5:d7:d1:9c:ae:6d:4b:dd:46:f4:08:
23:f4:70:30:fd:f5:0f:37:40:5b:7e:00:62:c9:64:
96:e3:70:3b:72:8f:f6:d5:ee:a3:4e:db:ae:6a:b9:
e1:2c:f2:90:dc:cb:e9:4d:03:bd:6e:a1:6f:6a:36:
06:7a:1c:f1:10:30:18:85:ae:37:eb:d5:f5:f6:13:
9a:27:f5:5c:e1:69:59:cd:6e:1f:94:b2:68:41:ee:
c6:c2:46:31:47:18:ed:8c:b0:2f:22:f5:0e:33:62:
dc:77:62:28:dd:87:bc:a9:d8:c8:0d:0b:67:d3:35:
02:89:71:22:ae:94:4c:7b:04:f6:21:06:1b:c7:9b:
d2:24:8c:bf:dd:b0:78:77:f9:b9:b3:02:7a:c7:3b:
09:f9:1c:ac:47:7b:0a:a3:7d:d7:ea:bb:40:e9:9c:
5d:28:09:75:03:3c:8f:34:2b:b6:f1:07:03:ea:f6:
c4:62:c0:de:08:7f:ae:76:07:9e:a4:05:3e:ae:9c:
44:60:17:8e:57:4a:54:68:bf:a4:e6:07:e7:15:bf:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:33:84:62:D1:DC:F3:DF:9E:B0:93:7C:F8:FC:36:DA:42:93:9C:75
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:73:a4:f4:b6:8b:bb:72:a9:16:9a:90:51:01:60:52:0d:fe:
2b:b8:de:ba:12:07:a3:d4:0f:43:22:f8:8e:50:a8:e5:e1:c2:
52:8f:b0:21:b1:ee:6a:0d:eb:2b:ec:eb:fd:90:5e:9c:a4:3d:
e1:db:d1:c1:2b:4a:22:5b:15:de:50:9f:79:b6:1c:03:19:2b:
85:54:c5:fb:86:1d:c4:bd:02:65:98:15:8a:50:56:be:74:c9:
69:40:01:b5:1e:ea:63:54:cd:45:63:4c:5d:25:df:42:33:1e:
2c:48:9e:ab:e4:49:36:93:8e:8b:a6:5e:d5:04:0a:82:d6:e6:
6b:2f:98:f3:7d:a2:d9:75:45:e6:bf:c7:92:10:68:e2:c8:f8:
65:0f:60:d6:52:52:3c:30:83:80:87:fe:be:ee:98:97:8f:6e:
e1:53:9e:5b:75:6b:00:78:93:e0:f5:24:ca:df:24:7f:9e:62:
bb:c8:c5:7a:95:bf:60:bd:14:82:bf:a3:6e:5c:50:fa:1e:90:
2d:eb:db:7f:c2:33:79:02:e6:9e:73:70:14:c2:49:c3:33:01:
cf:46:fe:9b:8f:3b:af:d7:08:e0:de:85:9c:89:bb:ea:d4:fc:
ab:ef:75:06:bc:9f:c0:ac:2e:61:cd:3d:31:75:0a:10:80:bd:
26:6c:43:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEVgBrpRu5Iq9viv8ahz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MmYyNDFjY2NhMjc4MmI1ZmM0MDdlMWJiYWY3YTk3YTk4
NDc0NjAwHhcNMjYwNTEzMDIwMTMwWhcNMjYwNTE0MDIwMTMwWjAzMTEwLwYDVQQD
Eyg5NjMzODQ2MmQxZGNmM2RmOWViMDkzN2NmOGZjMzZkYTQyOTM5Yzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPvmHjEfww0mCPEH1YH+a7EjiLzB
6Y05V3axLZTiUtTSlhHs/VmwPz65WsnR/qfS9dfRnK5tS91G9Agj9HAw/fUPN0Bb
fgBiyWSW43A7co/21e6jTtuuarnhLPKQ3MvpTQO9bqFvajYGehzxEDAYha4369X1
9hOaJ/Vc4WlZzW4flLJoQe7GwkYxRxjtjLAvIvUOM2Lcd2Io3Ye8qdjIDQtn0zUC
iXEirpRMewT2IQYbx5vSJIy/3bB4d/m5swJ6xzsJ+RysR3sKo33X6rtA6ZxdKAl1
AzyPNCu28QcD6vbEYsDeCH+udgeepAU+rpxEYBeOV0pUaL+k5gfnFb9yJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYzhGLR3PPfnrCTfPj8NtpCk5x1MB8GA1UdIwQY
MBaAFGQvJBzMongrX8QH4buvepephHRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGIt
MTQ1ZTk1ZThhN2JlLzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGItMTQ1ZTk1ZThhN2Jl
LzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApnOk9LaL
u3KpFpqQUQFgUg3+K7jeuhIHo9QPQyL4jlCo5eHCUo+wIbHuag3rK+zr/ZBenKQ9
4dvRwStKIlsV3lCfebYcAxkrhVTF+4YdxL0CZZgVilBWvnTJaUABtR7qY1TNRWNM
XSXfQjMeLEieq+RJNpOOi6Ze1QQKgtbmay+Y832i2XVF5r/HkhBo4sj4ZQ9g1lJS
PDCDgIf+vu6Yl49u4VOeW3VrAHiT4PUkyt8kf55iu8jFepW/YL0Ugr+jblxQ+h6Q
Levbf8IzeQLmnnNwFMJJwzMBz0b+m487r9cI4N6FnIm76tT8q+91BryfwKwuYc09
MXUKEIC9JmxDNA==
-----END CERTIFICATE-----
Generated at Wed May 13 08:15:56 2026 by rpki-client