Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
File: z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json)
Hash identifier: p20H6t7t+6yzGyLDQBgrFkZmpJQzdDO7ikH9NIwr6l8=
Subject key identifier: 49:80:A8:45:93:8B:F0:09:5B:60:65:B0:7E:B4:01:6C:C9:88:1C:6C
Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Certificate serial: 019D31BE3B9B3D2E681CFAD649174C7777AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
Manifest number: 08AC
Signing time: Sat 28 Mar 2026 00:00:43 +0000
Manifest this update: Sat 28 Mar 2026 00:00:43 +0000
Manifest next update: Sun 29 Mar 2026 00:00:43 +0000
Files and hashes: 1: 9Lw22K23J7w-6XzIDg67QJLRG6o.roa (hash: ztr8UWAWB/buB6JT5GD2YfXKLhYvXE9x4n0VRU8ceQo=)
2: G5FnSUz31AbVLph_XF_b2V-WE4k.roa (hash: OyarEjklBShgcZGA7xw5r7NANY/GN4xIbQ4B1wFv/ow=)
3: RQ8xC9T79eYAnKVx9VhVrpoNTMY.roa (hash: exNJaK8lpq9kvpL01DCgkaVHl771CgqPSPw4MI32Txo=)
4: Uh0-hSK_XWDc2RnwMwkKmaaS-80.roa (hash: BJW5l+5BPbkG+XCltX7aXXNnUzSiJ2XCIUfhxIHiCPk=)
5: fU0ZyKezfFg3A0ASimWS_vDf2Ag.roa (hash: WGVPl1NHnlzzsePSOzjj+Gl8SDY0jb2m343GSbYT0V4=)
6: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: 0jtVsgRE/0nmBXZ7WnjlvW6YjQrW9LKCmP+CtDXdapI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:3b:9b:3d:2e:68:1c:fa:d6:49:17:4c:77:77:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Validity
Not Before: Mar 28 00:00:43 2026 GMT
Not After : Mar 29 00:00:43 2026 GMT
Subject: CN=4980a845938bf0095b6065b07eb4016cc9881c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:9d:1f:38:06:87:fe:1a:f1:c5:f9:40:a9:8d:
d2:fa:da:9b:07:0e:93:05:26:17:38:ac:a5:4c:57:
4f:5b:11:c1:87:d1:e2:2b:dd:64:db:50:57:de:d6:
a4:95:8b:f6:f9:47:18:20:cf:50:09:ae:0c:29:9d:
22:8b:49:55:01:c6:8f:ab:ff:7e:60:e8:71:1c:f9:
99:57:a6:d7:fe:26:e7:1c:94:8d:17:eb:a3:0b:83:
76:d4:81:a4:c2:88:66:f1:a4:69:fe:e8:23:e8:14:
22:a4:70:a9:54:3e:d0:83:ed:9d:d4:6c:91:62:b5:
93:b2:04:bf:a0:dd:ed:7c:56:12:bb:20:c3:87:72:
2d:4f:7c:9e:15:34:d5:ec:b5:87:1a:19:33:bc:49:
b4:55:54:9a:96:56:32:a4:a0:d5:fc:e3:99:2b:5c:
97:02:d0:59:7b:7f:84:2d:3b:48:a9:15:dc:e4:e0:
32:03:f6:14:1f:4b:9b:28:00:66:b0:6b:eb:e1:02:
8e:f7:6d:6b:80:ff:36:71:da:f0:2a:04:70:70:1f:
df:68:22:92:21:68:a1:d3:11:cd:5b:af:d8:ae:16:
6b:6b:f4:8a:bb:d0:5e:a2:fc:72:1e:b1:02:39:f7:
7f:36:76:f2:88:e2:8b:25:06:a2:27:95:a9:39:59:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:80:A8:45:93:8B:F0:09:5B:60:65:B0:7E:B4:01:6C:C9:88:1C:6C
X509v3 Authority Key Identifier:
keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ce:8d:fc:12:1a:59:05:24:1a:21:e6:f4:a4:f2:9c:ad:27:
59:84:2b:9a:a2:8b:30:61:fe:ce:82:c3:1a:93:15:e8:d6:f4:
ef:4f:60:da:fe:4e:4e:5a:06:a8:ca:cb:41:87:da:f6:60:fc:
02:8b:9e:14:b6:e7:13:80:69:34:42:4d:e7:c0:cb:1e:ab:28:
74:71:a4:71:0e:d0:61:45:29:a8:cf:45:0c:45:f9:e3:0a:83:
18:87:9d:e6:65:19:1d:ad:46:7e:51:4d:5e:53:9c:8e:9a:df:
3f:39:8a:65:c4:e7:6e:a5:b1:4f:91:a9:28:9b:8a:69:a4:6b:
a9:bc:b5:0d:51:09:3c:be:92:62:48:d6:fa:4a:bc:c9:2c:86:
5a:3e:98:54:48:ec:99:90:a6:e5:09:51:1a:2b:55:0e:e3:e1:
d3:18:47:bd:63:95:60:cd:1a:99:7f:56:a2:28:5c:70:ce:bf:
bd:11:c6:4d:de:e1:a6:9e:4e:e4:82:8f:9a:16:dc:83:6b:1e:
65:64:15:23:20:5e:70:63:95:02:a3:d9:c6:1f:1f:83:b2:17:
0d:d7:6e:1e:af:ec:85:7d:03:4c:95:40:ac:50:b5:4e:c8:22:
b3:34:49:24:d2:de:52:2d:7d:16:20:f9:fe:96:7d:98:a0:38:
9c:5d:dd:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0xvjubPS5oHPrWSRdMd3esMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZTBkZjgyMTIxNDM4MjcxYzkxM2MyNGZmNTBmZDNiNjJk
NDBkYzYwHhcNMjYwMzI4MDAwMDQzWhcNMjYwMzI5MDAwMDQzWjAzMTEwLwYDVQQD
Eyg0OTgwYTg0NTkzOGJmMDA5NWI2MDY1YjA3ZWI0MDE2Y2M5ODgxYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/p0fOAaH/hrxxflAqY3S+tqbBw6T
BSYXOKylTFdPWxHBh9HiK91k21BX3taklYv2+UcYIM9QCa4MKZ0ii0lVAcaPq/9+
YOhxHPmZV6bX/ibnHJSNF+ujC4N21IGkwohm8aRp/ugj6BQipHCpVD7Qg+2d1GyR
YrWTsgS/oN3tfFYSuyDDh3ItT3yeFTTV7LWHGhkzvEm0VVSallYypKDV/OOZK1yX
AtBZe3+ELTtIqRXc5OAyA/YUH0ubKABmsGvr4QKO921rgP82cdrwKgRwcB/faCKS
IWih0xHNW6/YrhZra/SKu9BeovxyHrECOfd/NnbyiOKLJQaiJ5WpOVlpRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmAqEWTi/AJW2BlsH60AWzJiBxsMB8GA1UdIwQY
MBaAFM/g34ISFDgnHJE8JP9Q/Tti1A3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMt
ZjJjNzkyMmZhZjMyLzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMtZjJjNzkyMmZhZjMy
LzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXs6N/BIa
WQUkGiHm9KTynK0nWYQrmqKLMGH+zoLDGpMV6Nb0709g2v5OTloGqMrLQYfa9mD8
AoueFLbnE4BpNEJN58DLHqsodHGkcQ7QYUUpqM9FDEX54wqDGIed5mUZHa1GflFN
XlOcjprfPzmKZcTnbqWxT5GpKJuKaaRrqby1DVEJPL6SYkjW+kq8ySyGWj6YVEjs
mZCm5QlRGitVDuPh0xhHvWOVYM0amX9WoihccM6/vRHGTd7hpp5O5IKPmhbcg2se
ZWQVIyBecGOVAqPZxh8fg7IXDdduHq/shX0DTJVArFC1TsgiszRJJNLeUi19FiD5
/pZ9mKA4nF3duA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:17:55 2026 by rpki-client