Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: DBbBh7PWA8U8e+XVmJswfkyHpEl3QWJjgFiYiXAbbvk=
Subject key identifier: DA:3C:B8:A3:F2:AF:F9:A5:DD:41:28:9B:60:80:7A:F3:D9:3E:47:C6
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 019E1F118C636021AA521780241B9705C236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 0889
Signing time: Wed 13 May 2026 02:01:44 +0000
Manifest this update: Wed 13 May 2026 02:01:44 +0000
Manifest next update: Thu 14 May 2026 02:01:44 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: U1TIG+mKQJ3SYPfmMxgQ1tF1WTJU4Ho93BX+HYh6v68=)
2: dI0KgXxJI7glvO_mfsDPmIQ5NkA.roa (hash: F9yFe51qdVbE9AuCXASZZ90BbvMiZC4wn/OYeZyyhEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:8c:63:60:21:aa:52:17:80:24:1b:97:05:c2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: May 13 02:01:44 2026 GMT
Not After : May 14 02:01:44 2026 GMT
Subject: CN=da3cb8a3f2aff9a5dd41289b60807af3d93e47c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:47:ee:60:54:cf:5a:f5:0d:73:cc:58:4f:
33:b1:1f:54:55:98:e8:e2:97:c6:7a:6d:8a:a2:e5:
70:d5:e1:23:43:d2:42:93:f0:fd:90:ca:75:c6:dc:
ba:78:65:68:d2:b0:2b:3f:c9:3f:4e:ad:9f:0a:6b:
74:1f:3f:c1:3e:cf:3e:e0:af:03:b0:fd:eb:64:b9:
55:ce:f6:07:96:f6:76:eb:5a:5d:ab:03:8c:2d:8a:
63:81:0c:c7:98:1a:27:a3:e8:f8:a8:10:b7:12:2d:
46:fd:0e:0f:f5:a3:2a:19:89:14:59:3c:fe:6f:f1:
90:b6:87:d1:fb:01:2b:ec:c6:f1:61:88:24:05:91:
ff:2e:e8:b7:4b:c5:a6:61:c1:08:b8:be:e0:c9:74:
9a:2f:03:c8:24:e4:49:9f:59:c1:13:80:68:1c:6d:
72:23:53:86:e4:b9:ab:40:41:90:ea:c9:fb:6c:f3:
17:02:d2:a9:cc:d4:ec:ae:51:30:49:1d:7a:83:c1:
82:db:7d:1b:9f:be:95:a2:e7:fe:7d:0b:03:dd:b2:
a4:fa:44:ed:d9:0e:3d:b9:97:93:8b:b1:b3:ae:ba:
30:7d:9e:1c:0c:2c:0d:ff:4c:28:0c:77:89:83:9b:
ad:dc:8e:51:5a:28:bd:56:15:77:b4:c1:d7:46:67:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3C:B8:A3:F2:AF:F9:A5:DD:41:28:9B:60:80:7A:F3:D9:3E:47:C6
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:61:a8:cf:90:6e:4e:9d:c6:c1:93:bd:22:82:23:77:24:10:
e2:0f:60:70:08:a9:63:86:f0:d6:bf:e5:b1:83:75:41:86:d0:
cf:27:2d:02:20:0d:e7:d2:5f:1f:01:81:95:0c:4b:77:60:0f:
6d:84:8e:04:71:ea:b0:af:f9:85:c1:3f:80:55:85:c5:3a:8c:
34:42:c7:6d:02:7c:53:47:0b:e6:68:bf:99:3f:c6:45:b6:18:
3c:be:70:04:95:e4:e8:be:5d:93:1f:c3:c9:cb:c6:42:d6:66:
6b:4f:2c:fd:15:8d:da:1c:15:70:61:08:13:f8:16:7e:65:94:
3b:29:c1:13:26:f4:df:6a:e7:86:8a:93:ff:a7:f7:fa:85:99:
29:10:4f:7e:cb:62:5b:ff:31:6a:2a:59:78:f7:68:05:4b:03:
de:bc:ce:c2:25:c6:b5:51:9c:b6:93:b6:72:a7:58:ce:ca:ca:
9d:a2:89:dc:73:f2:0f:f2:25:a5:8a:bd:6a:c9:ff:24:df:1f:
d7:fe:63:92:bd:6d:f3:ed:77:35:bd:4d:29:40:ac:de:bc:4e:
81:fa:39:b5:88:c8:12:48:2a:35:bd:fa:05:cb:53:33:ef:30:
52:c6:6e:47:0c:a5:e6:f4:51:99:39:37:c1:ce:fd:8c:d8:3c:
b8:f4:3a:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEYxjYCGqUheAJBuXBcI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTMwYzE3OWNkNDJhODY0MTU4MzIzNDUwMWIxOGVmZjI1
MTU1NDkwHhcNMjYwNTEzMDIwMTQ0WhcNMjYwNTE0MDIwMTQ0WjAzMTEwLwYDVQQD
EyhkYTNjYjhhM2YyYWZmOWE1ZGQ0MTI4OWI2MDgwN2FmM2Q5M2U0N2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTdH7mBUz1r1DXPMWE8zsR9UVZjo
4pfGem2KouVw1eEjQ9JCk/D9kMp1xty6eGVo0rArP8k/Tq2fCmt0Hz/BPs8+4K8D
sP3rZLlVzvYHlvZ261pdqwOMLYpjgQzHmBono+j4qBC3Ei1G/Q4P9aMqGYkUWTz+
b/GQtofR+wEr7MbxYYgkBZH/Lui3S8WmYcEIuL7gyXSaLwPIJORJn1nBE4BoHG1y
I1OG5LmrQEGQ6sn7bPMXAtKpzNTsrlEwSR16g8GC230bn76Vouf+fQsD3bKk+kTt
2Q49uZeTi7GzrrowfZ4cDCwN/0woDHeJg5ut3I5RWii9VhV3tMHXRmcGSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo8uKPyr/ml3UEom2CAevPZPkfGMB8GA1UdIwQY
MBaAFGfjDBec1CqGQVgyNFAbGO/yUVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGIt
YzU2M2Y3MzRhYjc0LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGItYzU2M2Y3MzRhYjc0
LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWGoz5Bu
Tp3GwZO9IoIjdyQQ4g9gcAipY4bw1r/lsYN1QYbQzyctAiAN59JfHwGBlQxLd2AP
bYSOBHHqsK/5hcE/gFWFxTqMNELHbQJ8U0cL5mi/mT/GRbYYPL5wBJXk6L5dkx/D
ycvGQtZma08s/RWN2hwVcGEIE/gWfmWUOynBEyb032rnhoqT/6f3+oWZKRBPfsti
W/8xaipZePdoBUsD3rzOwiXGtVGctpO2cqdYzsrKnaKJ3HPyD/IlpYq9asn/JN8f
1/5jkr1t8+13Nb1NKUCs3rxOgfo5tYjIEkgqNb36BctTM+8wUsZuRwyl5vRRmTk3
wc79jNg8uPQ6aQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:42:17 2026 by rpki-client