Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: 4lvz8asJ+qP7xJLsfrv6vKBSQJ7do3OFZ+hZ96muQMU=
Subject key identifier: 0B:73:59:D0:58:CE:1D:C0:AB:EB:FC:D7:F7:BF:9B:69:F6:46:15:2A
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 019E20C8DF798B839C944058E39344A2BC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 0559
Signing time: Wed 13 May 2026 10:01:35 +0000
Manifest this update: Wed 13 May 2026 10:01:35 +0000
Manifest next update: Thu 14 May 2026 10:01:35 +0000
Files and hashes: 1: XO6sev2FSqLYRr5iJTi7ipxkMsw.roa (hash: elcbj3ZPXUwSlQ0W1VHvrn7ftkq6V4JJB3c4lvRA2B0=)
2: hjWKjeV-jJppeG0fD1H6zmH-Ykw.roa (hash: OeUU/W5Kc0WkJxZpiZAujOCtL2D7yZcVNpe7fsq3VBQ=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: /JTwa5VdTYzF3Yw+10scfOuuDy437ouiv3Psum6cyq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:df:79:8b:83:9c:94:40:58:e3:93:44:a2:bc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: May 13 10:01:35 2026 GMT
Not After : May 14 10:01:35 2026 GMT
Subject: CN=0b7359d058ce1dc0abebfcd7f7bf9b69f646152a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:88:a1:6f:a3:01:e9:08:19:af:7c:e7:da:
48:ab:4c:15:f2:1f:b3:9d:14:c3:6d:79:89:ee:b0:
eb:66:0c:50:24:a3:6b:96:41:dc:54:c3:cc:46:69:
40:4e:e0:01:47:5b:9e:5c:a7:b3:ed:96:5e:7f:48:
6e:6b:32:e7:26:e9:33:20:9b:74:ad:65:33:8a:2f:
b1:1c:98:83:e3:f4:f3:bc:8b:a5:ba:2c:a6:37:71:
70:53:dc:77:ee:e6:3d:84:66:21:2f:bc:5d:de:29:
8c:96:34:b7:c4:e1:46:08:4d:f7:f3:36:52:8e:33:
4d:51:e1:1b:8e:17:58:b7:25:ba:e5:ed:53:49:65:
85:f2:fd:11:26:98:d9:b8:bf:13:77:89:8b:79:ca:
77:b9:b7:75:f1:13:f6:f4:96:a2:a6:00:15:fd:04:
5e:d7:5f:b6:2a:cf:0b:49:5f:ed:ed:2c:60:bb:f9:
1a:ab:9a:af:17:92:54:b7:79:21:96:91:0b:a4:29:
87:bd:cb:d2:c6:db:3a:ce:e7:ba:e8:4b:e9:fd:6a:
e3:66:68:27:ae:74:d6:26:7e:10:03:0b:2e:70:9b:
40:16:19:df:16:ef:6d:31:b3:fb:8c:99:f9:7c:80:
cb:70:49:69:a4:b1:32:d8:7c:e5:45:76:49:71:75:
55:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:73:59:D0:58:CE:1D:C0:AB:EB:FC:D7:F7:BF:9B:69:F6:46:15:2A
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:67:40:26:14:2a:cd:14:cf:e3:64:57:19:49:0b:d8:5e:01:
47:65:b6:b7:0d:2a:6f:8b:a5:da:dd:86:0f:d8:34:12:ef:60:
67:5b:78:fa:1d:fa:1c:c5:8f:c6:3e:d8:c1:87:e5:6a:cb:a3:
74:ef:6f:c4:e0:0c:6f:1c:b7:8a:95:cb:6d:78:42:5a:f8:10:
47:f4:53:79:aa:82:97:f3:59:56:6c:b0:13:8c:73:29:0f:84:
93:65:b2:d2:8b:6f:2a:72:0a:aa:5a:ec:c2:60:79:c9:e1:16:
0a:c2:08:ff:7d:a4:58:52:5c:0c:b9:17:c2:87:c2:bc:3e:80:
f2:9a:74:de:82:7e:86:f8:c7:32:fb:93:3b:28:ed:4f:40:58:
39:b7:2b:2a:5e:de:a6:4c:13:24:cc:de:86:d1:72:08:9b:4a:
c9:0a:29:28:b2:ff:90:40:0b:7c:55:70:c2:b9:e9:08:2a:01:
94:2f:0e:84:d1:84:27:85:54:93:03:d3:d4:da:c1:2d:3a:03:
a5:bb:99:4c:37:38:e1:df:4a:1a:08:a5:8b:b8:ee:c7:a5:b1:
3f:69:b9:c9:b9:0e:9d:9a:9b:85:6a:d9:a4:75:3b:63:90:83:
68:6d:c0:62:b5:4c:82:ab:3d:2e:c5:e1:92:5a:16:65:9d:3b:
a9:82:6a:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyN95i4OclEBY45NEoryPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNWJmNTIwMWYxOGI0MDJiOGU2MjhiYzc3ZjIyNTJmNzY5
ZTcwZjIwHhcNMjYwNTEzMTAwMTM1WhcNMjYwNTE0MTAwMTM1WjAzMTEwLwYDVQQD
EygwYjczNTlkMDU4Y2UxZGMwYWJlYmZjZDdmN2JmOWI2OWY2NDYxNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspiIoW+jAekIGa9859pIq0wV8h+z
nRTDbXmJ7rDrZgxQJKNrlkHcVMPMRmlATuABR1ueXKez7ZZef0huazLnJukzIJt0
rWUzii+xHJiD4/TzvIuluiymN3FwU9x37uY9hGYhL7xd3imMljS3xOFGCE338zZS
jjNNUeEbjhdYtyW65e1TSWWF8v0RJpjZuL8Td4mLecp3ubd18RP29JaipgAV/QRe
11+2Ks8LSV/t7Sxgu/kaq5qvF5JUt3khlpELpCmHvcvSxts6zue66Evp/WrjZmgn
rnTWJn4QAwsucJtAFhnfFu9tMbP7jJn5fIDLcElppLEy2HzlRXZJcXVVtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtzWdBYzh3Aq+v81/e/m2n2RhUqMB8GA1UdIwQY
MBaAFM5b9SAfGLQCuOYovHfyJS92nnDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQt
NzQ3NmY0MmYyZDljLzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQtNzQ3NmY0MmYyZDlj
LzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1WdAJhQq
zRTP42RXGUkL2F4BR2W2tw0qb4ul2t2GD9g0Eu9gZ1t4+h36HMWPxj7YwYflasuj
dO9vxOAMbxy3ipXLbXhCWvgQR/RTeaqCl/NZVmywE4xzKQ+Ek2Wy0otvKnIKqlrs
wmB5yeEWCsII/32kWFJcDLkXwofCvD6A8pp03oJ+hvjHMvuTOyjtT0BYObcrKl7e
pkwTJMzehtFyCJtKyQopKLL/kEALfFVwwrnpCCoBlC8OhNGEJ4VUkwPT1NrBLToD
pbuZTDc44d9KGgili7jux6WxP2m5ybkOnZqbhWrZpHU7Y5CDaG3AYrVMgqs9LsXh
kloWZZ07qYJqUQ==
-----END CERTIFICATE-----
Generated at Wed May 13 16:54:13 2026 by rpki-client