Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier: KUa1d/qj1KpBcy20I3EiSB65CsMVjozCs9Vb9KdErlU=
Subject key identifier: 95:9B:1A:9E:7D:72:5B:42:A5:21:04:FA:E4:02:7B:D7:59:65:39:98
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 019D284E3804A8C050120BC09C77CEE1E92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number: 15CE
Signing time: Thu 26 Mar 2026 04:01:47 +0000
Manifest this update: Thu 26 Mar 2026 04:01:47 +0000
Manifest next update: Fri 27 Mar 2026 04:01:47 +0000
Files and hashes: 1: 4Vb2Z58skB5iaPHsQ2kB44NxzFQ.roa (hash: 5A5FJnxgAX+cotWcxBj+MU91tiU2mlONPgMHabpzNSY=)
2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: q3204m9Y7AAvFh/4pzXucmscUpcDAJpTMQc8eZy1KAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:38:04:a8:c0:50:12:0b:c0:9c:77:ce:e1:e9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Mar 26 04:01:47 2026 GMT
Not After : Mar 27 04:01:47 2026 GMT
Subject: CN=959b1a9e7d725b42a52104fae4027bd759653998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ff:fb:7d:cc:5a:ce:79:a1:c0:34:23:b6:6a:
01:91:0c:d9:c1:2a:59:a9:fc:cf:91:d1:23:f7:ab:
34:e3:66:c1:d0:0f:5c:61:03:53:e9:6b:d8:2e:65:
95:f8:ef:47:64:d6:b4:52:86:96:f2:55:9a:6a:61:
9f:9b:d7:00:47:f7:59:42:fe:df:0d:74:12:bb:2d:
47:48:19:18:bf:0c:23:7f:21:08:a3:f0:8c:a7:86:
7f:1d:7f:dd:00:6e:21:97:0b:8b:5a:6f:78:28:9d:
18:de:6b:5f:31:6f:f7:06:d9:5f:aa:14:d5:56:e5:
df:1b:a3:aa:d1:4c:e8:21:9b:26:1f:8c:e6:c1:84:
83:e5:10:f5:43:34:d5:73:bc:b3:bb:85:56:76:b5:
51:30:84:3a:ce:dd:58:54:88:fe:f2:04:6c:ef:fe:
d2:5b:77:be:f3:53:31:04:64:d0:82:a8:35:eb:f0:
a5:19:15:f7:6b:b5:bb:52:28:29:c0:15:11:c3:0f:
c0:13:1d:93:b2:68:cb:3c:c2:33:31:67:86:15:26:
a2:95:df:ad:97:aa:a5:74:1a:05:61:39:22:05:78:
25:be:8c:a1:aa:93:57:b6:0f:8e:99:f4:67:0e:00:
05:52:44:09:09:1c:79:2f:9c:1c:fa:43:3f:93:ce:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9B:1A:9E:7D:72:5B:42:A5:21:04:FA:E4:02:7B:D7:59:65:39:98
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:db:b5:3f:19:9f:42:66:5e:0a:e6:ed:33:4c:3c:07:66:c2:
a1:b7:5a:7b:a9:5f:1c:a7:9f:cc:b1:24:3a:da:60:ce:c3:6c:
af:a4:7b:7b:28:df:9b:cd:79:f7:25:41:2b:68:e1:36:43:91:
af:2e:b8:7c:c4:af:f7:aa:3b:58:9e:5c:4f:30:cd:de:38:75:
f5:47:58:51:c8:ed:17:84:7e:bb:e1:9f:8c:e5:f3:7a:35:26:
7b:f6:c4:26:09:68:17:61:fd:8f:bf:1b:a5:0a:2b:f7:c3:9f:
70:08:e8:76:0b:7c:f0:5c:d8:66:aa:82:0a:97:28:d9:ff:1b:
ad:3a:51:e2:3b:6c:38:de:47:52:9e:4c:85:b1:37:b3:2e:90:
f0:b7:c6:e7:62:9c:00:cd:02:6e:d1:55:e1:d5:11:97:5c:f3:
2e:2b:e7:18:6b:2f:5a:8d:b0:10:d5:d0:b4:e3:8f:36:09:df:
b5:4e:b1:ba:53:0a:de:3d:8f:c1:bb:fd:6a:e7:70:a0:12:6c:
e6:dd:64:82:d9:3b:c1:cd:3d:33:4e:6d:af:85:af:22:ab:0c:
d1:58:07:a3:9d:be:85:88:2f:21:8b:98:10:f2:c0:70:03:b0:
dc:ae:a9:42:bf:cc:1c:50:86:8a:2f:4d:f9:43:2c:d1:7e:3e:
1e:ae:4d:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTjgEqMBQEgvAnHfO4ekuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmY1NWQzNzcxMjdmMjhjZTI2Yjc4ZmQ4M2JlY2Y0MWJl
Y2FkNGIwHhcNMjYwMzI2MDQwMTQ3WhcNMjYwMzI3MDQwMTQ3WjAzMTEwLwYDVQQD
Eyg5NTliMWE5ZTdkNzI1YjQyYTUyMTA0ZmFlNDAyN2JkNzU5NjUzOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv/7fcxaznmhwDQjtmoBkQzZwSpZ
qfzPkdEj96s042bB0A9cYQNT6WvYLmWV+O9HZNa0UoaW8lWaamGfm9cAR/dZQv7f
DXQSuy1HSBkYvwwjfyEIo/CMp4Z/HX/dAG4hlwuLWm94KJ0Y3mtfMW/3BtlfqhTV
VuXfG6Oq0UzoIZsmH4zmwYSD5RD1QzTVc7yzu4VWdrVRMIQ6zt1YVIj+8gRs7/7S
W3e+81MxBGTQgqg16/ClGRX3a7W7UigpwBURww/AEx2TsmjLPMIzMWeGFSaild+t
l6qldBoFYTkiBXglvoyhqpNXtg+OmfRnDgAFUkQJCRx5L5wc+kM/k84wkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWbGp59cltCpSEE+uQCe9dZZTmYMB8GA1UdIwQY
MBaAFGYvVdN3En8ozia3j9g77PQb7K1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zODhjNzAtZTRjNy00MjBkLTgxODgt
OGJlMTQ2MjUzMzU2LzEvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zODhjNzAtZTRjNy00MjBkLTgxODgtOGJlMTQ2MjUzMzU2
LzEvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9u1Pxmf
QmZeCubtM0w8B2bCobdae6lfHKefzLEkOtpgzsNsr6R7eyjfm8159yVBK2jhNkOR
ry64fMSv96o7WJ5cTzDN3jh19UdYUcjtF4R+u+GfjOXzejUme/bEJgloF2H9j78b
pQor98OfcAjodgt88FzYZqqCCpco2f8brTpR4jtsON5HUp5MhbE3sy6Q8LfG52Kc
AM0CbtFV4dURl1zzLivnGGsvWo2wENXQtOOPNgnftU6xulMK3j2Pwbv9audwoBJs
5t1kgtk7wc09M05tr4WvIqsM0VgHo52+hYgvIYuYEPLAcAOw3K6pQr/MHFCGii9N
+UMs0X4+Hq5NDg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:38 2026 by rpki-client