Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: v1j+GSY8qeAgfFmSPpCBRjrHZHyz38VooRsGlVOGQu0=
Subject key identifier: 04:C6:8A:B1:52:6B:92:68:3D:3F:92:EE:8A:13:59:39:68:B0:19:C3
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019D2771D1CDA0BAAF71204E18D26060607B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 1183
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: gvoNw609bD_6W2IwVPcUpI-Guaw.roa (hash: ye+ihzO9nCFXOpOHQxxGEqHh0UKlaKr0ZU9zZSsc480=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: YUXdLBapZE3jyt92jzxgbcm0fHdLCr/RCg918uezcyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d1:cd:a0:ba:af:71:20:4e:18:d2:60:60:60:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=04c68ab1526b92683d3f92ee8a13593968b019c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:f3:f1:39:16:46:37:1e:e7:10:d9:38:14:
f5:a3:3c:61:36:cb:0e:f5:e6:04:2f:e1:fb:ee:a7:
4f:7c:7e:98:1a:df:14:09:4e:0d:1a:49:87:0a:4a:
7d:20:bf:59:dd:4d:5b:f6:4c:f9:22:33:b7:23:36:
8a:88:e9:e8:6e:fa:ff:87:78:aa:2f:5c:42:30:57:
94:29:40:5f:99:6a:52:3e:66:10:28:b7:c9:fa:da:
8c:f4:ec:26:c4:4c:6c:d7:c5:d8:81:47:82:a1:a9:
3f:0d:a7:ab:1d:3d:f1:a5:6e:50:d3:8e:82:88:22:
69:e6:58:b3:30:0c:18:df:75:ed:d3:9f:b5:c0:6a:
d3:0a:48:93:f8:d9:06:3b:d6:e7:7f:3f:93:f7:54:
e6:4f:2a:5a:fb:a8:b4:03:e2:91:85:ff:76:c0:6d:
46:31:b6:d1:f5:7b:e4:48:06:e0:b5:07:a5:c7:f7:
25:ca:4e:5a:a4:c8:6d:ff:00:6e:ff:43:c7:95:c0:
57:8d:d0:29:60:d9:1e:5c:76:7f:fe:b3:0e:91:cf:
63:cb:a8:1a:7c:31:57:7c:79:1c:e8:5f:47:d5:e0:
8e:24:b6:bc:90:58:94:43:c8:da:5b:18:df:91:99:
20:ce:e1:59:d8:a8:80:54:50:97:14:85:6f:6f:e1:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C6:8A:B1:52:6B:92:68:3D:3F:92:EE:8A:13:59:39:68:B0:19:C3
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:db:ce:3e:19:b0:18:7d:69:de:9c:e3:fd:3a:76:10:eb:65:
f0:d8:f6:4b:12:71:19:db:4d:3a:df:a5:12:5b:e8:b4:04:19:
11:65:fa:99:15:40:fb:1a:6e:74:53:d9:47:9b:ae:44:fd:7f:
51:6f:9a:99:c4:5e:a0:91:ec:92:ed:77:40:5c:c4:8a:2d:60:
50:b5:e5:a8:45:d0:62:e0:2a:a4:5b:a7:b3:d9:35:6c:d4:ce:
63:4b:2d:37:47:83:91:46:1f:e8:a9:0f:86:39:db:89:a0:88:
58:1a:eb:f3:bb:9a:d2:35:f1:8c:17:0a:19:c1:cc:b4:f2:3f:
50:c8:3c:10:d2:e5:8c:98:72:81:cd:3d:77:1f:fb:05:1e:d1:
3d:c8:8b:5f:35:c4:02:db:3e:b4:c9:8b:92:1c:92:61:4d:32:
9c:1f:52:e7:c3:69:89:a0:e3:02:c8:b9:4f:08:05:44:28:5e:
d5:c2:1c:54:4e:05:39:bf:20:e9:1d:80:ad:b1:87:f7:3c:80:
8e:35:ce:17:2d:63:98:f5:64:01:05:a0:32:d6:57:a4:33:ba:
a2:7e:bd:bb:0a:b5:52:b8:0b:d2:05:a5:4f:23:0d:7b:72:31:
35:45:78:95:17:7b:be:a3:1b:43:31:13:3e:f3:29:fc:20:29:
2b:e4:78:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncdHNoLqvcSBOGNJgYGB7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNmUxYTIyMDhmYTNmMWI5ZjNkMzhmZmYxZjhlMmMzNGQ5
MTFmMzYwHhcNMjYwMzI2MDAwMTAzWhcNMjYwMzI3MDAwMTAzWjAzMTEwLwYDVQQD
EygwNGM2OGFiMTUyNmI5MjY4M2QzZjkyZWU4YTEzNTkzOTY4YjAxOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra/z8TkWRjce5xDZOBT1ozxhNssO
9eYEL+H77qdPfH6YGt8UCU4NGkmHCkp9IL9Z3U1b9kz5IjO3IzaKiOnobvr/h3iq
L1xCMFeUKUBfmWpSPmYQKLfJ+tqM9OwmxExs18XYgUeCoak/DaerHT3xpW5Q046C
iCJp5lizMAwY33Xt05+1wGrTCkiT+NkGO9bnfz+T91TmTypa+6i0A+KRhf92wG1G
MbbR9XvkSAbgtQelx/clyk5apMht/wBu/0PHlcBXjdApYNkeXHZ//rMOkc9jy6ga
fDFXfHkc6F9H1eCOJLa8kFiUQ8jaWxjfkZkgzuFZ2KiAVFCXFIVvb+F8AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATGirFSa5JoPT+S7ooTWTlosBnDMB8GA1UdIwQY
MBaAFM5uGiII+j8bnz04//H44sNNkR82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2Mt
OWZlZjAxMTRhMmU1LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2MtOWZlZjAxMTRhMmU1
LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdvOPhmw
GH1p3pzj/Tp2EOtl8Nj2SxJxGdtNOt+lElvotAQZEWX6mRVA+xpudFPZR5uuRP1/
UW+amcReoJHsku13QFzEii1gULXlqEXQYuAqpFuns9k1bNTOY0stN0eDkUYf6KkP
hjnbiaCIWBrr87ua0jXxjBcKGcHMtPI/UMg8ENLljJhygc09dx/7BR7RPciLXzXE
Ats+tMmLkhySYU0ynB9S58NpiaDjAsi5TwgFRChe1cIcVE4FOb8g6R2ArbGH9zyA
jjXOFy1jmPVkAQWgMtZXpDO6on69uwq1UrgL0gWlTyMNe3IxNUV4lRd7vqMbQzET
PvMp/CApK+R4QA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:48 2026 by rpki-client