Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: bQE3+H/nyF//rY55hgk/AdkafKlnayHUHyi91Ur2sZk=
Subject key identifier: F5:FC:C1:86:6A:CC:D9:54:B9:3A:AA:EA:E3:26:26:D4:02:7E:D6:C6
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 019D26CD24EE3EBBFC779242AFEEFAF6632E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:01:11 +0000
Manifest this update: Wed 25 Mar 2026 21:01:11 +0000
Manifest next update: Thu 26 Mar 2026 21:01:11 +0000
Files and hashes: 1: h8MAjW2nwR1TuDpY3gaR4GIp5Is.roa (hash: YMOvJ9hakU4xTrKD5f+aHfr6VChVy5zYjPbZPORV+p4=)
2: hq6cHZZmfTc8iDuXctwL9j8vYGA.roa (hash: gnwIM65nm0H3pqLfxC4cpwXQNNz6WAkiHxWYF953SRw=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: 1mgdR2p1Vv0CIzPq+uzokTO7MOpfuetQ/vgNW7hJM28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:24:ee:3e:bb:fc:77:92:42:af:ee:fa:f6:63:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Mar 25 21:01:11 2026 GMT
Not After : Mar 26 21:01:11 2026 GMT
Subject: CN=f5fcc1866accd954b93aaaeae32626d4027ed6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:4f:6e:26:55:25:12:5a:9c:ed:bc:d4:b2:
7a:c8:fd:37:76:57:b0:08:93:45:96:c8:57:36:5a:
4c:aa:b5:36:76:77:9f:21:8b:fa:d4:ae:2c:03:55:
2b:6a:e1:fe:34:0b:d2:43:b8:cb:dd:0f:09:94:e7:
0c:d0:f1:ea:db:15:c9:97:c9:7d:19:10:f9:2a:ae:
c7:15:f4:00:f9:4c:7d:4d:ff:54:70:17:96:8d:21:
4e:ce:62:c2:9a:2c:f9:a1:25:30:e5:2e:2a:91:3b:
4f:6f:d2:b8:6c:68:56:a2:66:f6:49:e1:1e:d8:25:
08:3e:fb:6f:93:b4:ed:63:17:91:f1:7e:04:d0:0d:
35:bd:8f:e3:17:72:8f:28:83:11:6b:08:1f:35:00:
51:77:02:04:09:2a:97:f2:09:2b:37:22:ea:5d:fe:
0f:2e:63:c9:df:9b:f8:91:ec:aa:98:69:e3:1a:df:
b3:19:0d:fb:f6:ad:ce:fc:35:e8:c8:aa:0b:c7:2b:
7e:2d:0d:0b:08:a5:bc:20:f6:e5:95:d7:f1:ed:af:
b6:ff:54:a7:df:51:b7:db:65:cc:08:82:35:b9:de:
df:e0:42:d9:71:0d:89:85:3a:6e:24:25:a6:60:d0:
fe:40:a4:2a:a3:0c:d2:4c:ba:ed:a0:02:56:b9:07:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FC:C1:86:6A:CC:D9:54:B9:3A:AA:EA:E3:26:26:D4:02:7E:D6:C6
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b3:52:ee:a4:8c:7a:51:c5:05:19:ef:b9:30:95:c8:51:79:
73:6a:8c:37:35:ca:f5:8a:67:f3:f2:7e:12:54:2e:8d:0b:3b:
3a:6a:a3:66:2e:6e:f1:01:45:d7:80:87:f5:6d:96:a4:5a:1d:
be:e6:04:f1:df:3d:99:8c:ca:da:e7:59:ae:2a:cf:66:14:54:
e3:b0:42:ee:f9:a9:5c:0d:92:bc:94:45:66:12:4a:df:a8:80:
e8:87:06:0d:61:e8:e5:2d:7c:d9:5c:bd:93:52:d7:62:2b:78:
37:b8:84:d7:9a:76:ed:8c:f6:91:30:6b:22:98:71:35:9e:c9:
aa:b9:66:b8:12:06:a1:e5:b7:8c:14:bc:d4:59:e6:e4:55:e8:
b9:a1:1e:ff:2f:bb:95:90:74:d5:e3:19:73:f3:15:db:a3:61:
6e:03:44:49:6a:72:b6:c1:9e:5e:0e:e7:14:19:c7:a5:74:5b:
fa:15:a2:34:3e:8f:5f:5b:d5:89:04:84:59:9f:b5:37:fa:65:
c1:7a:5a:79:07:d8:27:92:b1:e8:8b:e8:fa:64:17:7e:59:ba:
d8:58:4a:f2:9e:56:d5:18:b5:04:16:e8:2e:68:d4:4a:c5:71:
58:72:39:4a:ae:09:17:49:33:6f:1f:96:33:e9:3b:4e:fe:93:
a5:f3:05:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzSTuPrv8d5JCr+769mMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMzllNmJlNDBkODAxMjg4OTZjY2QxMzFmNjVhNTVhZDk4
YTQwYWYwHhcNMjYwMzI1MjEwMTExWhcNMjYwMzI2MjEwMTExWjAzMTEwLwYDVQQD
EyhmNWZjYzE4NjZhY2NkOTU0YjkzYWFhZWFlMzI2MjZkNDAyN2VkNmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04JPbiZVJRJanO281LJ6yP03dlew
CJNFlshXNlpMqrU2dnefIYv61K4sA1UrauH+NAvSQ7jL3Q8JlOcM0PHq2xXJl8l9
GRD5Kq7HFfQA+Ux9Tf9UcBeWjSFOzmLCmiz5oSUw5S4qkTtPb9K4bGhWomb2SeEe
2CUIPvtvk7TtYxeR8X4E0A01vY/jF3KPKIMRawgfNQBRdwIECSqX8gkrNyLqXf4P
LmPJ35v4keyqmGnjGt+zGQ379q3O/DXoyKoLxyt+LQ0LCKW8IPblldfx7a+2/1Sn
31G322XMCII1ud7f4ELZcQ2JhTpuJCWmYND+QKQqowzSTLrtoAJWuQcM7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX8wYZqzNlUuTqq6uMmJtQCftbGMB8GA1UdIwQY
MBaAFMw55r5A2AEoiWzNEx9lpVrZikCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYt
NjA5ZDhmNTY1ZmZjLzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYtNjA5ZDhmNTY1ZmZj
LzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErNS7qSM
elHFBRnvuTCVyFF5c2qMNzXK9Ypn8/J+ElQujQs7OmqjZi5u8QFF14CH9W2WpFod
vuYE8d89mYzK2udZrirPZhRU47BC7vmpXA2SvJRFZhJK36iA6IcGDWHo5S182Vy9
k1LXYit4N7iE15p27Yz2kTBrIphxNZ7JqrlmuBIGoeW3jBS81Fnm5FXouaEe/y+7
lZB01eMZc/MV26NhbgNESWpytsGeXg7nFBnHpXRb+hWiND6PX1vViQSEWZ+1N/pl
wXpaeQfYJ5Kx6Ivo+mQXflm62FhK8p5W1Ri1BBboLmjUSsVxWHI5Sq4JF0kzbx+W
M+k7Tv6TpfMF6g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:04 2026 by rpki-client