Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: kdVVM2N1iZ5SAFGyIXTarylNiIAXDuUqCMiZSVfD8v0=
Subject key identifier: D9:EF:CB:5D:F6:22:27:9F:2F:0A:8A:60:B8:E4:38:21:E4:74:A5:9B
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 019E1F7EF5D25BD5224193BFFB26CD06562B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 04:01:14 +0000
Manifest this update: Wed 13 May 2026 04:01:14 +0000
Manifest next update: Thu 14 May 2026 04:01:14 +0000
Files and hashes: 1: 3SjeUFC4YP2hmea4QgynnyCGUKg.roa (hash: eN1xEmiUCaEx82o/WrnNDgoT+UPc2qHAHANZVD640yc=)
2: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: x9UFqYXEfswOA8RShOVd6TjiyRvcIyJOA3ZQ2+c5Ffs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:f5:d2:5b:d5:22:41:93:bf:fb:26:cd:06:56:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: May 13 04:01:14 2026 GMT
Not After : May 14 04:01:14 2026 GMT
Subject: CN=d9efcb5df622279f2f0a8a60b8e43821e474a59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:6f:21:e9:f0:c3:fb:ff:f0:7b:af:68:d4:
06:d1:cf:ba:d4:62:12:e9:fb:53:8d:4c:90:3d:1b:
54:3b:24:64:a3:db:55:e9:ae:00:f5:00:f6:b1:4e:
2d:1d:3e:f2:e3:8b:09:0d:c0:27:9f:5e:89:63:50:
04:ab:25:20:7c:71:d5:38:a3:3a:6c:4e:f0:e4:9c:
44:9a:18:68:ee:18:c6:98:5f:7e:99:ec:d3:50:c7:
47:f6:c8:97:03:17:cd:d0:6f:d3:5e:aa:9e:a2:c9:
25:43:4f:07:86:73:64:4f:bc:0a:20:24:ce:cb:20:
51:a2:b1:ab:b7:85:1c:25:5b:3a:0e:44:93:ae:c1:
d1:05:70:67:4d:b5:58:e7:3f:ac:d4:f4:a4:a8:cf:
3f:33:1a:b9:a6:d8:d5:67:3b:6e:a5:0d:42:e3:4a:
89:94:28:10:30:57:0b:3f:db:60:ac:04:73:64:af:
a8:33:9a:3c:88:ff:9e:f3:e5:8f:98:82:ab:bf:05:
d3:d1:39:88:2b:98:07:4d:45:7f:1f:3e:3a:99:74:
fd:1a:bc:a6:18:f4:7a:8d:a3:6c:c9:7f:8b:f6:30:
63:e2:91:06:a2:d1:fe:d2:0a:83:88:b3:8d:96:1e:
9a:5f:6e:80:1a:7d:82:ff:06:a7:87:09:ed:64:1e:
5d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EF:CB:5D:F6:22:27:9F:2F:0A:8A:60:B8:E4:38:21:E4:74:A5:9B
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d6:47:2c:21:ea:0e:b2:91:ce:7e:21:9c:ab:20:6a:39:95:
3a:c0:5f:fd:e1:ec:c8:57:ee:94:42:30:c3:cf:3d:ab:cb:e1:
46:92:8c:f0:e3:82:19:bf:d0:29:29:66:3f:d7:73:86:97:d2:
47:bc:57:44:35:3c:f0:cc:6e:95:0b:e3:56:07:dd:81:4f:f8:
cc:e9:eb:08:e3:7e:32:5a:62:da:ef:a7:f3:2e:fb:1f:4f:c0:
0b:ee:ad:56:61:cf:72:8d:2f:4c:c5:33:e5:ac:5b:7c:40:e3:
bf:70:46:df:52:e8:9b:16:cb:3f:3f:4a:5b:2c:ad:aa:cf:77:
28:62:45:38:4a:10:86:04:21:f8:dc:70:84:89:a2:38:75:64:
8e:c0:4d:60:b4:5a:47:2f:17:5d:c6:e1:f4:7a:09:6d:21:11:
dc:31:4f:a1:d4:21:b2:76:75:3d:da:5e:8f:cc:1c:ec:cb:d2:
32:1a:3e:bb:8f:de:c4:51:27:6b:86:43:37:a4:80:60:dc:40:
dc:a4:a5:7b:6e:b8:c0:6e:1a:a5:70:a2:08:b6:34:fc:a9:d9:
b1:50:70:db:c9:b6:0f:a6:36:e3:85:88:56:59:e2:6b:12:ad:
c0:5f:04:a7:87:7b:37:1d:f6:8e:2f:66:0a:42:d2:8a:25:c0:
6a:10:2c:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffvXSW9UiQZO/+ybNBlYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTBjMjZmM2E0ZmFjNzAwYWM3YjBlMzQ5MGI4ZmExNzVm
MDhhZDgwHhcNMjYwNTEzMDQwMTE0WhcNMjYwNTE0MDQwMTE0WjAzMTEwLwYDVQQD
EyhkOWVmY2I1ZGY2MjIyNzlmMmYwYThhNjBiOGU0MzgyMWU0NzRhNTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqhvIenww/v/8HuvaNQG0c+61GIS
6ftTjUyQPRtUOyRko9tV6a4A9QD2sU4tHT7y44sJDcAnn16JY1AEqyUgfHHVOKM6
bE7w5JxEmhho7hjGmF9+mezTUMdH9siXAxfN0G/TXqqeosklQ08HhnNkT7wKICTO
yyBRorGrt4UcJVs6DkSTrsHRBXBnTbVY5z+s1PSkqM8/Mxq5ptjVZztupQ1C40qJ
lCgQMFcLP9tgrARzZK+oM5o8iP+e8+WPmIKrvwXT0TmIK5gHTUV/Hz46mXT9Grym
GPR6jaNsyX+L9jBj4pEGotH+0gqDiLONlh6aX26AGn2C/wanhwntZB5dxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnvy132IiefLwqKYLjkOCHkdKWbMB8GA1UdIwQY
MBaAFGUQwm86T6xwCsew40kLj6F18IrYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAt
MmJhOWQ1MTZmOTQ0LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAtMmJhOWQ1MTZmOTQ0
LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNZHLCHq
DrKRzn4hnKsgajmVOsBf/eHsyFfulEIww889q8vhRpKM8OOCGb/QKSlmP9dzhpfS
R7xXRDU88MxulQvjVgfdgU/4zOnrCON+Mlpi2u+n8y77H0/AC+6tVmHPco0vTMUz
5axbfEDjv3BG31LomxbLPz9KWyytqs93KGJFOEoQhgQh+NxwhImiOHVkjsBNYLRa
Ry8XXcbh9HoJbSER3DFPodQhsnZ1Pdpej8wc7MvSMho+u4/exFEna4ZDN6SAYNxA
3KSle264wG4apXCiCLY0/KnZsVBw28m2D6Y244WIVlniaxKtwF8Ep4d7Nx32ji9m
CkLSiiXAahAsrA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:00:29 2026 by rpki-client