Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json)
Hash identifier: 7UUE5AwavyZcjeSNjaABUoHaIdafOaqUU3DTNMSo834=
Subject key identifier: 84:60:E4:DD:F8:A1:E7:62:A9:3D:8F:19:88:E4:2B:E9:41:33:37:7B
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 019D273AE59C4123DF1F4B25F8A0916EDB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:01:04 +0000
Manifest this update: Wed 25 Mar 2026 23:01:04 +0000
Manifest next update: Thu 26 Mar 2026 23:01:04 +0000
Files and hashes: 1: 4CypVNXRlUvDBje7mxt1CfmoovM.roa (hash: mFvuzRC/7svGOuSJoxhgmd+xnQF90mcigroStvs77GM=)
2: Jac1EeUsCOU9PNKJghMRhALb5vg.roa (hash: VrBYKI+eA8ElszFTROTPF/fpPXRNVBQ9W9hfTJtea1Q=)
3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: 2J93XbP6Sf2IyKD9r5wFoB1rGF9QvbkNnXs8SP3FtHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e5:9c:41:23:df:1f:4b:25:f8:a0:91:6e:db:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Mar 25 23:01:04 2026 GMT
Not After : Mar 26 23:01:04 2026 GMT
Subject: CN=8460e4ddf8a1e762a93d8f1988e42be94133377b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:6d:eb:a9:cc:9a:a0:43:0d:c2:43:06:6b:
7d:52:fd:07:99:59:94:61:9c:85:1e:f7:7e:60:ae:
5c:26:71:8f:b6:9c:23:bf:e3:ca:aa:f0:16:06:a5:
fa:a8:b8:fd:68:2d:fd:c8:8b:c6:64:9d:a1:d2:12:
83:59:9b:b8:66:7b:49:84:9f:ce:27:2c:3e:05:5c:
03:5b:0d:59:17:7e:98:8d:38:03:5e:62:0b:58:5e:
15:b2:26:da:98:e2:97:7e:46:49:ec:1f:a7:71:3e:
09:b2:53:78:e1:52:2c:ce:45:c4:2d:cd:7c:aa:af:
84:83:29:e4:63:2f:59:88:5b:c3:08:6e:02:d2:33:
12:91:fb:1a:2b:b8:fc:cb:80:b9:00:f1:3e:04:cc:
58:74:d8:53:20:a0:98:09:81:d2:d0:8f:da:43:f6:
1b:0d:7e:a5:8a:64:be:b7:15:b8:4a:c4:83:09:2a:
c0:07:63:23:9e:9e:13:e5:f0:47:00:6f:29:8a:c3:
f4:77:70:82:6b:49:d5:39:34:55:3d:2f:41:d0:70:
df:bd:e8:00:9e:ee:42:18:af:e1:6c:98:01:4b:34:
bf:1a:60:43:54:7d:35:cb:d1:4c:56:fa:c0:85:b6:
eb:60:d0:d2:53:fb:eb:8f:15:a4:3b:aa:48:62:78:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:60:E4:DD:F8:A1:E7:62:A9:3D:8F:19:88:E4:2B:E9:41:33:37:7B
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e0:e6:ba:cc:04:dd:0a:74:6f:52:c9:cd:08:27:c6:d2:38:
f4:88:4c:d2:ac:b5:dc:4c:80:76:62:a8:f1:fe:fd:9a:c0:d7:
ae:c7:e1:82:e0:eb:d9:9c:97:f4:32:60:92:60:77:1d:13:69:
2f:83:9a:54:cf:ef:80:74:b3:62:aa:a9:4c:ea:a3:45:07:f6:
75:37:0b:cf:6f:d5:84:6d:4a:ec:7e:cc:e6:03:e3:79:eb:b6:
82:b0:e8:18:9c:17:f0:62:8b:98:e7:42:67:a8:97:bd:ab:b6:
fa:54:63:e7:8c:fe:20:51:d2:df:94:62:0b:12:be:74:41:c4:
dd:3f:2c:ec:c1:d3:20:a9:3f:52:fd:a6:d4:0a:a6:04:0a:bf:
db:26:b1:10:3e:f2:c4:3e:83:b3:71:85:b3:84:f6:d4:95:ae:
33:0c:09:5e:56:d8:5b:0b:c6:71:8e:48:26:3d:e5:68:70:bc:
db:5d:21:40:9e:84:51:7c:7d:b6:3b:ca:d6:d1:3e:14:39:bf:
23:b3:d5:ee:70:34:c0:39:9d:9d:0a:b6:23:69:cd:c2:e4:68:
e6:00:5b:36:f3:89:8b:4d:36:83:f9:6b:57:0a:33:f6:60:a3:
b6:c0:4c:e8:73:e6:05:dc:a2:2b:e5:9e:5c:c7:44:39:52:33:
b1:58:dd:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOuWcQSPfH0sl+KCRbtthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYjBjYTIyOTEyNzZkN2QyYTJmOGE3MDUwZjRiYTgyN2Zl
OTEwYTEwHhcNMjYwMzI1MjMwMTA0WhcNMjYwMzI2MjMwMTA0WjAzMTEwLwYDVQQD
Eyg4NDYwZTRkZGY4YTFlNzYyYTkzZDhmMTk4OGU0MmJlOTQxMzMzNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgBt66nMmqBDDcJDBmt9Uv0HmVmU
YZyFHvd+YK5cJnGPtpwjv+PKqvAWBqX6qLj9aC39yIvGZJ2h0hKDWZu4ZntJhJ/O
Jyw+BVwDWw1ZF36YjTgDXmILWF4VsibamOKXfkZJ7B+ncT4JslN44VIszkXELc18
qq+EgynkYy9ZiFvDCG4C0jMSkfsaK7j8y4C5APE+BMxYdNhTIKCYCYHS0I/aQ/Yb
DX6limS+txW4SsSDCSrAB2Mjnp4T5fBHAG8pisP0d3CCa0nVOTRVPS9B0HDfvegA
nu5CGK/hbJgBSzS/GmBDVH01y9FMVvrAhbbrYNDSU/vrjxWkO6pIYnhjoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRg5N34oediqT2PGYjkK+lBMzd7MB8GA1UdIwQY
MBaAFMywyiKRJ219Ki+KcFD0uoJ/6RChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kMzgzNjAtNGQxZi00MjJlLTkwYWUt
MDhiOWUxMTAxYWE3LzEvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9kMzgzNjAtNGQxZi00MjJlLTkwYWUtMDhiOWUxMTAxYWE3
LzEvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuDmuswE
3Qp0b1LJzQgnxtI49IhM0qy13EyAdmKo8f79msDXrsfhguDr2ZyX9DJgkmB3HRNp
L4OaVM/vgHSzYqqpTOqjRQf2dTcLz2/VhG1K7H7M5gPjeeu2grDoGJwX8GKLmOdC
Z6iXvau2+lRj54z+IFHS35RiCxK+dEHE3T8s7MHTIKk/Uv2m1AqmBAq/2yaxED7y
xD6Ds3GFs4T21JWuMwwJXlbYWwvGcY5IJj3laHC8210hQJ6EUXx9tjvK1tE+FDm/
I7PV7nA0wDmdnQq2I2nNwuRo5gBbNvOJi002g/lrVwoz9mCjtsBM6HPmBdyiK+We
XMdEOVIzsVjd5Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:20 2026 by rpki-client