Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
File: zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json)
Hash identifier: B91g/rVSJOoVZc9D8gXW6KIAqfnMCKtOqSPM1byRb6U=
Subject key identifier: 18:0B:9D:15:1C:BA:21:0E:53:A2:DC:91:A9:8D:B4:7E:D8:1B:2A:EB
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial: 019E1BD924FD46BD89C524EDAE291E376542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
Manifest number: 109E
Signing time: Tue 12 May 2026 11:01:16 +0000
Manifest this update: Tue 12 May 2026 11:01:16 +0000
Manifest next update: Wed 13 May 2026 11:01:16 +0000
Files and hashes: 1: Gaonav40tTJpKCNRA2Pgw8c6CJI.asa (hash: qQGsDuLfuc8HGPjQosjqKzgl1S/2LQUHdjWbkc+kEYQ=)
2: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: YnXVaPLaP7x3g5yqxQwBKHVzmsaBTtQZNLP/0D/KJvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:24:fd:46:bd:89:c5:24:ed:ae:29:1e:37:65:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Validity
Not Before: May 12 11:01:16 2026 GMT
Not After : May 13 11:01:16 2026 GMT
Subject: CN=180b9d151cba210e53a2dc91a98db47ed81b2aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:b6:2d:7c:0a:c6:9d:29:6e:84:b5:27:ef:
f5:e3:77:21:a4:91:08:85:76:ec:13:37:ac:6e:5a:
c7:f0:9a:c2:fc:d2:c5:e8:55:26:cf:60:ed:29:70:
cc:cf:dc:95:d2:9e:e1:11:7e:c2:62:bb:08:9b:53:
6c:2b:b3:6a:54:8b:d3:71:95:24:9b:c1:67:3d:27:
8b:f2:6e:2d:59:5b:5f:5b:42:88:31:f4:e0:ba:07:
b8:ec:10:03:8d:c5:bb:5a:64:bd:19:10:dd:29:52:
6c:33:c9:91:d4:a1:4c:d0:91:79:a5:36:a4:71:3b:
3b:53:1b:e0:89:59:12:b5:75:ff:1d:3d:2c:e8:fd:
18:8a:4d:ff:31:50:2d:d0:c3:c0:f5:84:3c:b1:b8:
c2:81:ae:8d:81:ed:74:17:4b:ac:8f:99:d3:b6:01:
29:41:4b:7b:66:22:19:a8:4f:08:a0:93:65:7a:9c:
ba:7b:32:f5:2f:de:72:07:ee:6f:62:99:78:50:a4:
2e:f3:49:8c:c5:61:96:8a:fa:7e:1f:f5:a0:0b:cb:
81:ea:ff:0a:73:14:67:06:49:44:91:0a:52:07:83:
69:40:40:c1:e0:2f:b2:71:4a:cb:b2:de:56:cb:72:
13:80:e1:71:f9:d3:73:33:f9:d3:15:e4:2b:dc:4c:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0B:9D:15:1C:BA:21:0E:53:A2:DC:91:A9:8D:B4:7E:D8:1B:2A:EB
X509v3 Authority Key Identifier:
keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:05:de:b5:28:2a:a0:a5:53:06:15:05:d2:92:20:6c:8a:c5:
a5:5b:14:76:e6:2b:7f:6f:3e:ed:51:69:09:c0:9c:4b:c3:38:
db:44:71:88:9e:55:ab:c5:79:6b:e4:aa:e6:68:3a:e1:25:06:
97:fa:6a:31:40:2b:12:3e:0b:43:60:f4:38:b5:3f:ce:14:c3:
72:d2:01:f4:b9:e2:04:0d:18:5e:2d:8e:cf:57:9e:98:b1:e8:
1e:91:1f:50:7f:2d:88:57:ca:6e:8d:cc:01:0c:67:8f:21:88:
7a:ac:d4:28:f2:75:06:8e:e2:a7:24:3e:5e:90:d1:6a:c3:be:
f0:bd:f8:38:9c:98:b3:78:15:18:f4:3f:2d:07:cc:b7:b6:a3:
a4:6f:45:f0:60:93:27:74:35:8f:72:d7:53:26:31:8f:3a:0b:
b5:9e:b6:a4:d3:82:c3:21:5e:91:72:40:0f:a1:2c:13:7a:f6:
47:49:1e:05:cc:3a:36:73:6c:59:e2:90:cf:34:7d:ed:00:d2:
48:87:61:57:b8:b4:cf:24:16:ac:05:f2:ae:fd:5c:ea:a9:83:
f5:4a:33:30:2e:81:bd:0b:8c:ce:0c:d4:e2:d0:66:17:f0:0c:
7f:6c:c9:f5:46:4d:6b:3f:ad:f6:4d:2b:da:57:80:ea:31:27:
bd:5f:3d:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2ST9Rr2JxSTtrikeN2VCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzI4MjQ5Y2MzNWVjMjdjYzEwZTE4Yjg4MmM2YzEzODk3
Yzg0OTcwHhcNMjYwNTEyMTEwMTE2WhcNMjYwNTEzMTEwMTE2WjAzMTEwLwYDVQQD
EygxODBiOWQxNTFjYmEyMTBlNTNhMmRjOTFhOThkYjQ3ZWQ4MWIyYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpe2LXwKxp0pboS1J+/143chpJEI
hXbsEzesblrH8JrC/NLF6FUmz2DtKXDMz9yV0p7hEX7CYrsIm1NsK7NqVIvTcZUk
m8FnPSeL8m4tWVtfW0KIMfTguge47BADjcW7WmS9GRDdKVJsM8mR1KFM0JF5pTak
cTs7UxvgiVkStXX/HT0s6P0Yik3/MVAt0MPA9YQ8sbjCga6Nge10F0usj5nTtgEp
QUt7ZiIZqE8IoJNlepy6ezL1L95yB+5vYpl4UKQu80mMxWGWivp+H/WgC8uB6v8K
cxRnBklEkQpSB4NpQEDB4C+ycUrLst5Wy3ITgOFx+dNzM/nTFeQr3EwRQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgLnRUcuiEOU6LckamNtH7YGyrrMB8GA1UdIwQY
MBaAFM8ygknMNewnzBDhi4gsbBOJfISXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yN2Q0MDktNzY1OS00NTNlLWIzNmYt
Mjk3ZDUyZjBjMjgzLzEvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yN2Q0MDktNzY1OS00NTNlLWIzNmYtMjk3ZDUyZjBjMjgz
LzEvenpLQ1NjdzE3Q2ZNRU9HTGlDeHNFNGw4aEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwXetSgq
oKVTBhUF0pIgbIrFpVsUduYrf28+7VFpCcCcS8M420RxiJ5Vq8V5a+Sq5mg64SUG
l/pqMUArEj4LQ2D0OLU/zhTDctIB9LniBA0YXi2Oz1eemLHoHpEfUH8tiFfKbo3M
AQxnjyGIeqzUKPJ1Bo7ipyQ+XpDRasO+8L34OJyYs3gVGPQ/LQfMt7ajpG9F8GCT
J3Q1j3LXUyYxjzoLtZ62pNOCwyFekXJAD6EsE3r2R0keBcw6NnNsWeKQzzR97QDS
SIdhV7i0zyQWrAXyrv1c6qmD9UozMC6BvQuMzgzU4tBmF/AMf2zJ9UZNaz+t9k0r
2leA6jEnvV89dw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:26:25 2026 by rpki-client