Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier: zExNpiwrHotLeFNZS7f4uhj8KhxcKr2E/Rd4jiygn78=
Subject key identifier: 9D:E9:BA:CD:4B:15:BD:2E:7F:2B:7B:45:31:BA:FA:0C:2F:52:D7:BF
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 019D9B8766CB8E495D13D5EE16FFD3F5A6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number: 15D0
Signing time: Fri 17 Apr 2026 13:00:35 +0000
Manifest this update: Fri 17 Apr 2026 13:00:35 +0000
Manifest next update: Sat 18 Apr 2026 13:00:35 +0000
Files and hashes: 1: bWCw9QvZ0n-9vSDkgSO_NuyUw34.roa (hash: Nv8e19B6F0Z+GsL3XuEotkyjFs4rEednWhdiNCJb51g=)
2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: DP04ksqJqQEd8HCkM3GuOLDbUy5wH9AWh/nFo1SleOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:66:cb:8e:49:5d:13:d5:ee:16:ff:d3:f5:a6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: Apr 17 13:00:35 2026 GMT
Not After : Apr 18 13:00:35 2026 GMT
Subject: CN=9de9bacd4b15bd2e7f2b7b4531bafa0c2f52d7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:3e:10:2e:45:38:43:46:f0:ac:45:ff:75:
ce:1f:1a:6d:62:5e:c9:13:c9:19:1e:1e:30:c5:22:
fd:83:88:41:37:18:1f:2c:07:fc:c0:91:4a:ae:09:
11:69:d0:86:3b:0c:a7:eb:4b:c8:50:57:0d:38:ee:
23:0f:f8:22:90:ef:9c:e9:bd:f8:2f:38:6b:e2:db:
e9:05:b2:ce:75:b9:65:d7:2c:8e:d9:ec:f9:de:77:
c6:24:e9:de:1d:f9:b7:8f:79:0c:7c:31:89:08:47:
0e:a4:82:53:b2:ed:6b:fb:75:d1:16:ff:41:62:a0:
fa:95:7c:01:cf:db:46:29:ad:0b:a2:53:67:e6:c7:
b8:66:d5:c8:c6:92:65:f2:29:29:c7:1e:a4:b6:59:
17:1c:87:ea:05:6b:e6:a7:f5:62:d7:be:84:3c:df:
8c:74:c9:7e:58:e2:54:00:73:49:3d:63:8c:11:8b:
c4:d6:62:b1:01:39:8f:c3:90:18:ec:46:cc:72:73:
13:98:0f:b0:32:fc:5e:46:f9:92:09:14:fc:f6:cb:
87:4d:34:5f:bb:c8:b3:79:e8:32:d6:0a:1e:f1:2f:
9d:f9:49:85:91:a6:08:d1:25:e4:8e:b0:84:95:91:
0a:87:ce:97:a7:8a:b6:79:ac:a3:23:b3:5b:91:8f:
09:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E9:BA:CD:4B:15:BD:2E:7F:2B:7B:45:31:BA:FA:0C:2F:52:D7:BF
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:36:6b:88:4c:66:4e:36:1a:70:39:66:27:0b:d0:ce:18:ae:
19:4b:2e:53:1a:fe:ff:ed:a8:7f:4c:86:2d:ca:b9:b4:6e:c4:
24:e5:42:22:f7:73:db:31:ba:fc:9f:02:2b:5a:ba:45:87:2d:
94:dd:f9:db:8e:fb:b0:4e:44:fe:f2:d3:bb:7f:ff:94:dc:17:
77:c7:23:68:7d:94:81:8d:f5:4f:2f:08:79:db:5c:7f:b8:07:
a4:ff:fa:3d:77:da:79:e8:db:39:9d:06:a8:e5:26:ce:71:d9:
8d:e6:93:65:35:f9:cc:7a:c7:36:b6:0c:cb:e0:7e:f8:33:1c:
6c:3c:9b:8d:82:37:64:6a:17:9e:e3:ff:1a:17:30:73:8d:c2:
d9:9e:3a:f8:7b:49:ae:99:43:82:08:5f:fd:9c:bd:19:d7:3d:
00:4e:a5:59:f2:88:17:1e:70:7b:9d:60:4d:15:c6:a0:95:c7:
6a:44:eb:2a:f4:44:c0:25:ac:12:d6:91:88:91:e3:77:9b:99:
c6:08:54:95:77:5f:11:cc:ed:b5:e5:c9:d5:b4:04:a9:ed:70:
03:43:3b:8f:4a:c5:77:97:27:fa:e7:7c:85:99:59:57:02:7b:
4c:47:f7:7c:23:e9:72:d0:b6:36:d3:26:bc:d2:2d:f8:9c:c9:
d6:05:4d:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh2bLjkldE9XuFv/T9abNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZmZlNjRmNDJhOWYwNGI5ZmQ2Y2Q3NTgzNzJhMWRiNWNk
OGIxOTEwHhcNMjYwNDE3MTMwMDM1WhcNMjYwNDE4MTMwMDM1WjAzMTEwLwYDVQQD
Eyg5ZGU5YmFjZDRiMTViZDJlN2YyYjdiNDUzMWJhZmEwYzJmNTJkN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW4+EC5FOENG8KxF/3XOHxptYl7J
E8kZHh4wxSL9g4hBNxgfLAf8wJFKrgkRadCGOwyn60vIUFcNOO4jD/gikO+c6b34
Lzhr4tvpBbLOdbll1yyO2ez53nfGJOneHfm3j3kMfDGJCEcOpIJTsu1r+3XRFv9B
YqD6lXwBz9tGKa0LolNn5se4ZtXIxpJl8ikpxx6ktlkXHIfqBWvmp/Vi176EPN+M
dMl+WOJUAHNJPWOMEYvE1mKxATmPw5AY7EbMcnMTmA+wMvxeRvmSCRT89suHTTRf
u8izeegy1goe8S+d+UmFkaYI0SXkjrCElZEKh86Xp4q2eayjI7NbkY8JyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3pus1LFb0ufyt7RTG6+gwvUte/MB8GA1UdIwQY
MBaAFMz/5k9CqfBLn9bNdYNyodtc2LGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5Mjct
OWQyZTQyZjdmOWFjLzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5MjctOWQyZTQyZjdmOWFj
LzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDZriExm
TjYacDlmJwvQzhiuGUsuUxr+/+2of0yGLcq5tG7EJOVCIvdz2zG6/J8CK1q6RYct
lN352477sE5E/vLTu3//lNwXd8cjaH2UgY31Ty8Iedtcf7gHpP/6PXfaeejbOZ0G
qOUmznHZjeaTZTX5zHrHNrYMy+B++DMcbDybjYI3ZGoXnuP/Ghcwc43C2Z46+HtJ
rplDgghf/Zy9Gdc9AE6lWfKIFx5we51gTRXGoJXHakTrKvREwCWsEtaRiJHjd5uZ
xghUlXdfEcztteXJ1bQEqe1wA0M7j0rFd5cn+ud8hZlZVwJ7TEf3fCPpctC2NtMm
vNIt+JzJ1gVNuA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:58 2026 by rpki-client