Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier: oLvVN8LGV6YeQdpcieuqjIoxLe6g/RPkI2hj1zLfMUg=
Subject key identifier: DA:F5:4E:17:CE:E0:7A:BC:E6:DB:2F:7A:F6:9C:CC:69:0C:57:0E:82
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 019D25F1DAC48BB11F0745CF44B2C543B099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number: 0EB2
Signing time: Wed 25 Mar 2026 17:01:40 +0000
Manifest this update: Wed 25 Mar 2026 17:01:40 +0000
Manifest next update: Thu 26 Mar 2026 17:01:40 +0000
Files and hashes: 1: TTo4BVEjNXzzXJclZ-0-kt2DI5w.roa (hash: hjAmuYuA2bu34wGu3wYkNL+2UTuhOaLaJGD6bAnWUE8=)
2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: uDCeQSkRrDFd23Di+Ou1tBSSMmDMkkWW4is9a6NRZpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:da:c4:8b:b1:1f:07:45:cf:44:b2:c5:43:b0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: Mar 25 17:01:40 2026 GMT
Not After : Mar 26 17:01:40 2026 GMT
Subject: CN=daf54e17cee07abce6db2f7af69ccc690c570e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:9d:b4:81:82:88:8f:ec:2c:14:2e:55:f6:
86:16:38:29:e2:d2:1b:1e:8d:bc:fd:51:78:94:a1:
85:a6:09:3e:1b:3d:f8:b6:44:e2:62:81:4e:42:0f:
9c:bf:ec:9e:45:94:2e:cf:c5:ac:50:4a:a5:01:1c:
b8:4c:94:57:f2:3e:88:7f:f5:69:c3:fe:3c:cd:84:
21:95:72:7f:92:83:cf:f7:a2:3c:ff:d4:17:58:70:
46:37:07:a7:1d:24:16:3c:d4:f9:f9:85:5e:83:07:
d9:cc:8b:91:5d:fb:bb:64:1f:83:09:13:47:0b:c3:
6f:97:e1:28:50:16:e7:d2:37:2a:1e:d8:aa:28:76:
86:ae:4e:c8:da:79:9d:74:c3:f1:b7:ca:10:9a:fa:
b5:63:8a:54:de:ea:ba:9d:89:94:2d:bc:66:46:b1:
d3:ac:12:9d:04:86:12:ba:80:e4:ae:3f:17:a0:4a:
a1:63:5e:2b:34:d6:ad:70:de:31:2c:0c:e5:22:5f:
d1:5b:93:2c:25:5f:9c:11:19:94:24:a7:3e:a0:1c:
37:6d:06:c9:03:11:bb:a1:ca:7f:1f:76:78:fc:29:
0e:36:8a:ef:69:d9:13:65:e4:41:59:7b:74:5d:b1:
7c:2c:68:09:48:07:88:ea:dd:34:78:6e:72:14:86:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F5:4E:17:CE:E0:7A:BC:E6:DB:2F:7A:F6:9C:CC:69:0C:57:0E:82
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:30:28:1c:30:69:6d:2b:15:41:26:51:46:06:92:eb:a7:de:
64:67:07:ea:5f:9d:27:cc:3d:f9:dd:40:b8:d7:8f:08:a5:c2:
0e:af:ef:cd:ca:75:b2:d8:01:88:eb:c5:a1:71:ba:4f:22:16:
9c:43:91:1f:b1:21:84:77:bf:5e:92:d7:89:01:b0:ea:84:2c:
71:0b:f4:1e:1b:ec:aa:c8:65:30:be:3e:c7:23:aa:9a:a1:4f:
9c:5c:12:1f:04:38:2f:33:e2:2c:a0:5e:6d:57:5b:33:2a:5f:
06:1b:79:80:6a:b0:69:02:91:43:98:05:5c:41:14:a8:38:ba:
b2:ee:ee:71:51:95:f4:11:da:04:da:ce:d8:16:e5:c8:43:35:
46:25:4d:5d:0f:40:18:93:cd:1a:10:4e:b1:88:a5:dc:62:09:
8d:9e:7c:86:de:84:7f:c6:da:12:46:2f:40:88:9c:39:44:1e:
41:e0:90:cc:dd:1e:75:e9:ff:8d:4f:55:b6:e7:84:a1:a7:08:
23:44:d4:ed:27:01:09:0b:b8:9e:2d:01:e3:22:cc:b1:a6:3b:
9f:f3:c9:d5:b5:28:1f:8b:4d:55:91:47:d3:85:14:6f:d6:b5:
8c:2c:e7:b6:b5:dd:e9:11:61:b5:0e:56:c8:c1:f5:24:b6:f7:
4e:a4:a4:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8drEi7EfB0XPRLLFQ7CZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTYzZGQwMWVjODBkZTllMTM4YzlkZTQ0YTM2ZDQ4ZjA2
YjkzZmQwHhcNMjYwMzI1MTcwMTQwWhcNMjYwMzI2MTcwMTQwWjAzMTEwLwYDVQQD
EyhkYWY1NGUxN2NlZTA3YWJjZTZkYjJmN2FmNjljY2M2OTBjNTcwZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGOdtIGCiI/sLBQuVfaGFjgp4tIb
Ho28/VF4lKGFpgk+Gz34tkTiYoFOQg+cv+yeRZQuz8WsUEqlARy4TJRX8j6If/Vp
w/48zYQhlXJ/koPP96I8/9QXWHBGNwenHSQWPNT5+YVegwfZzIuRXfu7ZB+DCRNH
C8Nvl+EoUBbn0jcqHtiqKHaGrk7I2nmddMPxt8oQmvq1Y4pU3uq6nYmULbxmRrHT
rBKdBIYSuoDkrj8XoEqhY14rNNatcN4xLAzlIl/RW5MsJV+cERmUJKc+oBw3bQbJ
AxG7ocp/H3Z4/CkONorvadkTZeRBWXt0XbF8LGgJSAeI6t00eG5yFIaDHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr1ThfO4Hq85tsvevaczGkMVw6CMB8GA1UdIwQY
MBaAFM2WPdAeyA3p4TjJ3kSjbUjwa5P9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYt
NmNmMTY1MjM5YmQ5LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYtNmNmMTY1MjM5YmQ5
LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAujAoHDBp
bSsVQSZRRgaS66feZGcH6l+dJ8w9+d1AuNePCKXCDq/vzcp1stgBiOvFoXG6TyIW
nEORH7EhhHe/XpLXiQGw6oQscQv0HhvsqshlML4+xyOqmqFPnFwSHwQ4LzPiLKBe
bVdbMypfBht5gGqwaQKRQ5gFXEEUqDi6su7ucVGV9BHaBNrO2BblyEM1RiVNXQ9A
GJPNGhBOsYil3GIJjZ58ht6Ef8baEkYvQIicOUQeQeCQzN0eden/jU9VtueEoacI
I0TU7ScBCQu4ni0B4yLMsaY7n/PJ1bUoH4tNVZFH04UUb9a1jCzntrXd6RFhtQ5W
yMH1JLb3TqSkwg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:09 2026 by rpki-client