Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier: 9ZMRUZzMxS5R/LlYCbs0CFTHd+mSXuKMYEdEA5gSaKQ=
Subject key identifier: 14:D5:00:13:20:5A:35:0F:5C:2A:59:11:D2:16:6B:0C:5A:D5:98:56
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 019D26CD76E99804D9245742DD4BDFCCCDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 21:01:32 +0000
Manifest this update: Wed 25 Mar 2026 21:01:32 +0000
Manifest next update: Thu 26 Mar 2026 21:01:32 +0000
Files and hashes: 1: Cd7NuYktL6tZ53bzDJJ8daCIovs.roa (hash: tHrRvHoM3qNNxOtrBUBjddDedIMEOHYDC52UbXy47M4=)
2: i2keX2tmfJC9gpuyYPgLLi5zYak.roa (hash: iSciV2gaKioHzNvZ/l6NgMx2jf4AZrXPTduBLLjh9iE=)
3: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: yegaRGevx95uHYX46TVCAcMFh/xcR03Nco90qVrOzPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:76:e9:98:04:d9:24:57:42:dd:4b:df:cc:cd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Mar 25 21:01:32 2026 GMT
Not After : Mar 26 21:01:32 2026 GMT
Subject: CN=14d50013205a350f5c2a5911d2166b0c5ad59856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:a3:02:85:97:98:76:7e:71:48:09:b6:96:
4d:a1:23:36:39:58:69:50:c1:13:0d:ff:7b:8a:4a:
52:e8:95:16:d5:55:b4:2f:bd:2a:5c:72:87:4f:f9:
a2:26:4c:40:92:99:4e:1a:30:d7:86:94:e1:5d:78:
bc:7d:df:14:28:4c:ec:7c:42:af:0c:8d:e3:ee:86:
03:92:52:f1:86:0b:73:a0:56:ca:6d:92:7c:1c:57:
42:5e:ba:34:3e:fc:47:27:62:55:bc:2e:6b:7f:9c:
04:c1:67:a9:c1:c1:d3:9a:71:55:52:b2:d5:f3:ff:
d6:12:b8:24:95:97:f5:36:76:ce:1b:d7:a5:d0:92:
c2:19:6c:de:b8:c8:16:e4:51:26:bb:34:0b:b5:82:
11:61:d8:0d:6e:b7:f6:fa:91:17:42:69:67:72:b5:
99:c2:d1:ae:10:48:e8:88:20:5a:63:a1:56:02:1d:
38:c1:ba:b3:40:35:ee:40:72:8b:f4:14:8f:77:9a:
37:e1:53:4e:4a:3c:ce:e9:88:a4:c7:89:62:ea:34:
e1:5c:02:a2:f3:1d:42:50:3d:e8:d2:7b:3b:9a:02:
fc:af:5b:9a:cc:4b:08:2b:f2:98:4b:a6:bf:6b:3a:
8b:fb:3c:96:cb:e6:d7:82:78:b5:86:21:a7:b7:ad:
95:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D5:00:13:20:5A:35:0F:5C:2A:59:11:D2:16:6B:0C:5A:D5:98:56
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:9b:e0:6b:e4:e5:4a:3c:b5:6f:d8:fe:00:6b:05:11:8f:3b:
a0:fb:2f:b0:a6:81:af:99:96:da:8c:99:8f:1c:bb:07:f1:e1:
3f:ab:10:a5:54:c6:44:29:ed:01:3a:0c:91:d3:cd:eb:c1:2d:
6e:a7:2c:ef:b1:7a:c9:62:6e:f6:50:f3:e3:94:09:01:66:81:
69:11:9b:67:9f:5a:b5:61:d6:38:0a:d4:4c:1e:5c:68:0b:ce:
23:7a:89:de:ff:6d:a7:0e:b3:b2:90:f4:e1:2b:0e:9b:2e:44:
11:09:de:d7:ba:8f:eb:7b:23:f2:40:1a:a5:38:c7:c1:9f:d4:
34:6d:40:a6:24:19:68:42:29:98:9c:c2:3a:96:30:0c:3f:e7:
8a:80:39:d3:c8:65:16:1f:6a:a7:e5:b1:77:7e:cb:25:8b:4f:
1a:18:0f:6d:f8:4a:4e:8e:09:af:2a:5a:a4:e5:92:5e:8e:ae:
82:50:5b:10:a0:87:57:63:3d:ba:33:22:62:aa:ce:69:fe:cb:
2b:9a:16:26:df:20:83:05:73:48:40:dd:86:a3:d8:c1:94:3a:
56:27:c2:30:10:99:b6:5f:36:1a:1b:82:8a:df:05:1c:fb:1f:
54:cc:ee:3e:0e:76:fc:de:d0:65:ce:7a:84:75:c9:58:0a:e0:
2f:04:61:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzXbpmATZJFdC3UvfzM3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2E3NjNmM2RiMjk2NWExZTRlYjBiZjc2YzFjYjg2OGJh
YWU0NmQwHhcNMjYwMzI1MjEwMTMyWhcNMjYwMzI2MjEwMTMyWjAzMTEwLwYDVQQD
EygxNGQ1MDAxMzIwNWEzNTBmNWMyYTU5MTFkMjE2NmIwYzVhZDU5ODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeCjAoWXmHZ+cUgJtpZNoSM2OVhp
UMETDf97ikpS6JUW1VW0L70qXHKHT/miJkxAkplOGjDXhpThXXi8fd8UKEzsfEKv
DI3j7oYDklLxhgtzoFbKbZJ8HFdCXro0PvxHJ2JVvC5rf5wEwWepwcHTmnFVUrLV
8//WErgklZf1NnbOG9el0JLCGWzeuMgW5FEmuzQLtYIRYdgNbrf2+pEXQmlncrWZ
wtGuEEjoiCBaY6FWAh04wbqzQDXuQHKL9BSPd5o34VNOSjzO6Yikx4li6jThXAKi
8x1CUD3o0ns7mgL8r1uazEsIK/KYS6a/azqL+zyWy+bXgni1hiGnt62VWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTVABMgWjUPXCpZEdIWawxa1ZhWMB8GA1UdIwQY
MBaAFMzKdj89spZaHk6wv3bBy4aLquRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2Zjct
ZmFjNjNjMDNjMjVhLzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2ZjctZmFjNjNjMDNjMjVh
LzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZvga+Tl
Sjy1b9j+AGsFEY87oPsvsKaBr5mW2oyZjxy7B/HhP6sQpVTGRCntAToMkdPN68Et
bqcs77F6yWJu9lDz45QJAWaBaRGbZ59atWHWOArUTB5caAvOI3qJ3v9tpw6zspD0
4SsOmy5EEQne17qP63sj8kAapTjHwZ/UNG1ApiQZaEIpmJzCOpYwDD/nioA508hl
Fh9qp+Wxd37LJYtPGhgPbfhKTo4JrypapOWSXo6uglBbEKCHV2M9ujMiYqrOaf7L
K5oWJt8ggwVzSEDdhqPYwZQ6VifCMBCZtl82GhuCit8FHPsfVMzuPg52/N7QZc56
hHXJWArgLwRh5Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:16 2026 by rpki-client