Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: YOiS5Be90hA+Pih0q3zZu19mXvUUFTVZNhPH4Cg2nRY=
Subject key identifier: 70:9B:EC:68:65:22:90:3D:C5:39:AE:EF:94:BE:E1:AB:32:D5:06:B5
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019D99CFED0626460F3C3A57411B18B0DE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 05E3
Signing time: Fri 17 Apr 2026 05:00:33 +0000
Manifest this update: Fri 17 Apr 2026 05:00:33 +0000
Manifest next update: Sat 18 Apr 2026 05:00:33 +0000
Files and hashes: 1: VBl0vhkZ0p5h13VJMHzt2wrsQ7A.roa (hash: VVaZ8MZsUSIufXGhoXhGO0V1DGyl/LodpDCAxeW4mZ0=)
2: voKmqzxnpt1_Etyi16YW_6f_LiA.roa (hash: FSyRyjfIYpd8tAuhdZ0kMGNXftsQsnkKkGGZLUK2+XE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: H4qg5na2sfP67vmMtud72CgxSZkfMYq4IdobfGnsfUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:ed:06:26:46:0f:3c:3a:57:41:1b:18:b0:de:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Apr 17 05:00:33 2026 GMT
Not After : Apr 18 05:00:33 2026 GMT
Subject: CN=709bec686522903dc539aeef94bee1ab32d506b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:47:61:e2:70:17:70:32:ea:3f:af:af:f3:
0b:7e:02:fd:b5:58:84:ff:95:5a:30:95:c0:45:88:
fc:69:fc:ca:bf:de:81:4c:87:2b:5f:b1:eb:ef:40:
e2:87:d5:06:c7:83:7c:d4:99:85:5f:f4:2e:3b:86:
c4:b8:ac:96:50:e5:f7:5e:5d:18:08:fc:2b:a0:11:
e5:bf:ea:b3:ff:e9:a8:a4:f3:a2:cb:37:40:35:cf:
ce:8d:fd:4c:21:9c:55:55:4c:58:96:d0:9b:85:12:
d6:94:44:66:c3:bf:0a:6d:13:1a:2e:f0:ee:47:f5:
7b:d8:76:9d:6d:4a:c6:12:20:46:d7:c1:c0:94:60:
01:83:03:8d:ca:b0:af:95:e3:da:ce:84:d9:28:cf:
0d:a3:97:24:3a:e1:21:4a:13:54:2d:46:d4:8a:96:
74:ed:28:c1:54:b8:31:6a:75:19:b1:05:9f:96:62:
15:bf:c9:a7:fb:c6:45:dc:95:78:82:ca:73:c5:1c:
7b:eb:dd:b4:70:95:55:d3:ec:5f:0f:e4:df:94:fc:
85:fc:4b:d9:fc:f0:cc:2a:4f:7c:83:36:c6:55:02:
4f:39:31:cb:aa:0d:2a:e8:05:05:5b:7c:97:f5:0c:
0a:33:13:3f:83:0c:02:f2:59:40:21:69:5d:a8:81:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:EC:68:65:22:90:3D:C5:39:AE:EF:94:BE:E1:AB:32:D5:06:B5
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:30:d7:41:e1:e8:9b:7a:e3:a6:45:2c:02:21:dd:5a:5b:64:
21:2a:b9:1e:fc:88:80:d1:af:93:b0:1c:24:89:99:97:65:47:
20:08:93:50:6c:66:91:dc:9e:c1:c3:fc:ba:29:25:70:52:96:
cb:57:84:f3:b0:1f:91:7d:63:28:d0:1c:58:e0:7f:ca:9e:c6:
0a:94:9d:77:85:32:f4:5d:92:02:b5:b4:eb:ef:03:2b:f5:6c:
ac:7d:5b:b9:07:05:e4:50:bd:c0:1e:bb:c9:89:5e:57:68:f7:
52:1c:48:51:e2:42:d1:1a:31:b0:64:2e:2b:f9:d2:12:b1:a4:
83:78:f5:7e:73:28:72:90:7c:7c:35:be:43:7a:d7:fd:36:1a:
8f:08:a9:d3:d6:fb:43:b9:08:64:29:fb:34:40:a2:80:92:60:
bd:86:5d:31:ec:12:43:f8:24:72:cf:2e:d3:3e:5b:92:a1:a1:
5c:20:e6:21:e4:37:f2:16:c2:dc:68:85:03:20:b8:81:40:db:
78:43:52:8d:96:b9:34:b6:3e:b2:6b:6e:5a:de:53:a3:f0:eb:
1a:83:be:61:34:bc:c9:d8:bf:8a:4a:c8:e1:80:fa:b0:4e:1e:
01:24:01:46:d9:30:61:12:3b:3d:24:2e:7a:aa:81:88:2c:27:
34:9a:54:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Zz+0GJkYPPDpXQRsYsN5aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNWJmMGYxOWE5OTRjN2Y2ODZkNTVhYmZjMTY4NzVkMzll
NWQ0ZTIwHhcNMjYwNDE3MDUwMDMzWhcNMjYwNDE4MDUwMDMzWjAzMTEwLwYDVQQD
Eyg3MDliZWM2ODY1MjI5MDNkYzUzOWFlZWY5NGJlZTFhYjMyZDUwNmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzZHYeJwF3Ay6j+vr/MLfgL9tViE
/5VaMJXARYj8afzKv96BTIcrX7Hr70Dih9UGx4N81JmFX/QuO4bEuKyWUOX3Xl0Y
CPwroBHlv+qz/+mopPOiyzdANc/Ojf1MIZxVVUxYltCbhRLWlERmw78KbRMaLvDu
R/V72HadbUrGEiBG18HAlGABgwONyrCvlePazoTZKM8No5ckOuEhShNULUbUipZ0
7SjBVLgxanUZsQWflmIVv8mn+8ZF3JV4gspzxRx76920cJVV0+xfD+TflPyF/EvZ
/PDMKk98gzbGVQJPOTHLqg0q6AUFW3yX9QwKMxM/gwwC8llAIWldqIGFMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCb7GhlIpA9xTmu75S+4asy1Qa1MB8GA1UdIwQY
MBaAFM9b8PGamUx/aG1Vq/wWh1055dTiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMt
MzQwZmFjM2Y2YmFmLzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMtMzQwZmFjM2Y2YmFm
LzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljDXQeHo
m3rjpkUsAiHdWltkISq5HvyIgNGvk7AcJImZl2VHIAiTUGxmkdyewcP8uiklcFKW
y1eE87AfkX1jKNAcWOB/yp7GCpSdd4Uy9F2SArW06+8DK/VsrH1buQcF5FC9wB67
yYleV2j3UhxIUeJC0RoxsGQuK/nSErGkg3j1fnMocpB8fDW+Q3rX/TYajwip09b7
Q7kIZCn7NECigJJgvYZdMewSQ/gkcs8u0z5bkqGhXCDmIeQ38hbC3GiFAyC4gUDb
eENSjZa5NLY+smtuWt5To/DrGoO+YTS8ydi/ikrI4YD6sE4eASQBRtkwYRI7PSQu
eqqBiCwnNJpUwg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:20 2026 by rpki-client