Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: v6URndMw+4l/73MLh4dwyPd8UmPffxe9s53OveSYkvs=
Subject key identifier: D9:67:F4:E4:F2:CB:E8:EE:F7:04:71:0B:BB:A1:FB:55:02:82:BD:2B
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 019D270438F1F16DF463532BEB6F1BA1F249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 1818
Signing time: Wed 25 Mar 2026 22:01:21 +0000
Manifest this update: Wed 25 Mar 2026 22:01:21 +0000
Manifest next update: Thu 26 Mar 2026 22:01:21 +0000
Files and hashes: 1: TnpKsIrCpfum69mVWYffLpmGkW4.roa (hash: GTcF25unpZajDdgtvW9ktN1du2kJWKPqouAAWsJtWlU=)
2: iUEHX1o0_l8jTQlhzAvjptzhPL0.roa (hash: DpWo5iq7cHsCZy0a6PUHW0Vs0n1oWSh3Ty0O4gm3/dU=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: KmOJ7QPRb8j5MmjQzu32d2/xtl9iXM0dCf7JKF6xTOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:38:f1:f1:6d:f4:63:53:2b:eb:6f:1b:a1:f2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Mar 25 22:01:21 2026 GMT
Not After : Mar 26 22:01:21 2026 GMT
Subject: CN=d967f4e4f2cbe8eef704710bbba1fb550282bd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ee:2b:7c:6e:48:51:39:4a:e2:28:f1:9c:3d:
f1:13:41:7e:a1:1a:d0:ce:5c:03:4b:3d:77:0a:1b:
df:87:4d:86:73:07:e6:21:ae:64:3d:29:2e:bf:48:
0f:50:a5:b9:0e:b4:89:0a:85:65:61:b3:dd:7f:5d:
4e:83:d5:82:20:33:c4:85:b4:b3:45:57:99:29:74:
3d:bb:3f:37:b5:b3:e3:fc:c6:a7:10:b3:08:4f:da:
fb:48:3a:d7:7e:a5:99:10:01:23:8c:9a:d7:cb:d7:
3e:0c:87:59:05:ef:1f:bf:0e:3d:0d:32:60:6d:c5:
97:33:03:e1:7d:f1:61:61:83:53:76:e1:29:17:fd:
ac:a5:9d:1f:33:1b:55:64:09:2c:ed:fe:4c:c7:58:
2b:c6:5a:7c:66:35:30:01:86:d4:60:65:fa:e5:4e:
b6:f7:2d:53:79:ac:0b:2c:4d:2e:31:11:65:eb:71:
43:22:a6:40:97:ae:5d:94:61:84:bd:7c:01:9c:ae:
a9:c5:50:e4:ec:2a:cb:52:fe:34:cf:53:f7:8c:98:
c2:62:37:28:aa:53:7b:ca:f3:10:81:93:83:91:ae:
7a:86:79:c8:e0:40:f5:87:3e:55:f0:8a:a1:0c:9f:
19:7b:6c:66:6b:bf:c8:31:af:9d:30:72:c8:aa:fa:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:67:F4:E4:F2:CB:E8:EE:F7:04:71:0B:BB:A1:FB:55:02:82:BD:2B
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7a:11:d7:e4:b2:14:4b:5c:43:bb:5c:2f:54:8d:d3:d2:7f:
bb:16:d8:02:d6:2f:29:c4:77:7b:98:a5:c4:06:14:8c:3c:e2:
4f:76:e7:d2:e2:b0:78:32:b4:3d:b6:3a:17:0f:1f:35:ea:4e:
55:4a:da:9d:5f:ca:33:c5:9c:5c:96:ea:6a:12:0c:02:1d:5d:
19:06:ff:20:4d:43:fa:e9:7b:6d:3e:35:4e:ec:63:da:c6:b0:
02:a0:25:e2:08:7b:84:1b:f8:7f:a2:60:00:e7:d2:79:fa:b2:
93:b2:30:6b:95:d8:ab:fa:84:60:12:bb:7e:a6:37:f3:e3:46:
1b:82:c3:af:0e:23:f7:a9:a0:3c:1c:9f:b8:77:c3:18:7e:8c:
9c:5d:72:37:b6:96:d1:ab:9c:8e:3a:42:68:a5:e8:6d:a4:a6:
ed:09:82:7a:e8:65:33:56:dd:da:1b:3a:66:14:31:33:13:48:
cf:51:3d:42:8f:ea:b9:59:83:47:5d:7d:6b:fa:2e:fb:26:6e:
cb:99:c6:35:6c:a4:95:ef:47:50:71:f8:2f:7a:58:aa:b1:bf:
e6:79:28:d0:8e:b9:e4:f5:3a:4c:38:7f:52:da:5b:51:ba:24:
f5:8b:2b:5c:a6:da:5e:c1:4a:55:ff:77:c6:95:26:c8:7f:94:
98:a6:d6:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBDjx8W30Y1Mr628bofJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZmE4OGMyMmIxZTdjNTJkZTcxYTM3NjQzZGVhM2MzZmNk
ZDQ5NTQwHhcNMjYwMzI1MjIwMTIxWhcNMjYwMzI2MjIwMTIxWjAzMTEwLwYDVQQD
EyhkOTY3ZjRlNGYyY2JlOGVlZjcwNDcxMGJiYmExZmI1NTAyODJiZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+4rfG5IUTlK4ijxnD3xE0F+oRrQ
zlwDSz13Chvfh02GcwfmIa5kPSkuv0gPUKW5DrSJCoVlYbPdf11Og9WCIDPEhbSz
RVeZKXQ9uz83tbPj/ManELMIT9r7SDrXfqWZEAEjjJrXy9c+DIdZBe8fvw49DTJg
bcWXMwPhffFhYYNTduEpF/2spZ0fMxtVZAks7f5Mx1grxlp8ZjUwAYbUYGX65U62
9y1TeawLLE0uMRFl63FDIqZAl65dlGGEvXwBnK6pxVDk7CrLUv40z1P3jJjCYjco
qlN7yvMQgZODka56hnnI4ED1hz5V8IqhDJ8Ze2xma7/IMa+dMHLIqvpL7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNln9OTyy+ju9wRxC7uh+1UCgr0rMB8GA1UdIwQY
MBaAFMz6iMIrHnxS3nGjdkPeo8P83UlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2Yjkt
ODI3YjY0M2FmM2Q3LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2YjktODI3YjY0M2FmM2Q3
LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3oR1+Sy
FEtcQ7tcL1SN09J/uxbYAtYvKcR3e5ilxAYUjDziT3bn0uKweDK0PbY6Fw8fNepO
VUranV/KM8WcXJbqahIMAh1dGQb/IE1D+ul7bT41Tuxj2sawAqAl4gh7hBv4f6Jg
AOfSefqyk7Iwa5XYq/qEYBK7fqY38+NGG4LDrw4j96mgPByfuHfDGH6MnF1yN7aW
0aucjjpCaKXobaSm7QmCeuhlM1bd2hs6ZhQxMxNIz1E9Qo/quVmDR119a/ou+yZu
y5nGNWykle9HUHH4L3pYqrG/5nko0I655PU6TDh/UtpbUbok9YsrXKbaXsFKVf93
xpUmyH+UmKbW5Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:38 2026 by rpki-client