Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: xqap/2J03d5faSjIzMXggjQp43xLEP8dV0rPLb+G7aQ=
Subject key identifier: 47:87:19:29:E4:C2:D5:F0:D2:EA:C9:8C:34:B8:D6:E9:45:A4:CE:16
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 019DA52FEADB5495146FF32721B2C4A8A183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 120A
Signing time: Sun 19 Apr 2026 10:01:14 +0000
Manifest this update: Sun 19 Apr 2026 10:01:14 +0000
Manifest next update: Mon 20 Apr 2026 10:01:14 +0000
Files and hashes: 1: 0m2Q39AVzMvmJbXvZVeAp5BUqHM.roa (hash: 4ENNyihBFdH7BC6Hukkp0FP8JTMdCiKInQ5i0yx7kBg=)
2: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (hash: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: WgsqT4M6H4Pc+txi9ekydtJwrtyEQIHR+UV7G+hX6VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:ea:db:54:95:14:6f:f3:27:21:b2:c4:a8:a1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Apr 19 10:01:14 2026 GMT
Not After : Apr 20 10:01:14 2026 GMT
Subject: CN=47871929e4c2d5f0d2eac98c34b8d6e945a4ce16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:63:b3:f9:83:91:61:82:27:f9:83:42:63:
12:e6:ae:cf:15:e7:3f:36:c0:87:6d:7d:07:fa:f7:
e6:5d:d2:eb:f6:98:00:41:15:01:99:a5:e9:71:ef:
5e:8b:eb:60:8b:7f:3e:61:6f:9f:a6:5a:b9:94:62:
87:a7:51:ea:74:b0:e3:22:69:40:2e:2a:d1:7d:7d:
81:ba:34:c2:be:57:50:3f:72:76:5d:09:b5:bb:85:
ac:d3:86:a4:52:e1:af:47:62:95:e3:85:ae:76:3e:
6d:52:29:76:33:4f:60:83:43:f2:9e:e5:70:2d:eb:
35:9f:8a:56:9d:05:22:ac:79:4d:47:46:86:d8:2d:
84:07:32:69:c0:da:62:43:dc:77:67:63:d8:b0:6a:
a1:7c:03:d6:1c:06:97:f9:47:6f:98:9a:fe:59:c1:
14:e9:20:fd:b7:a8:c3:57:6e:97:4a:da:17:e4:ad:
db:17:f6:02:2f:45:da:2c:eb:e7:fe:78:ef:5b:4b:
aa:04:dd:3f:0d:47:6d:1a:4d:c7:9e:06:91:d9:27:
fb:80:2d:d5:ae:25:a3:82:3a:5b:be:01:23:8b:f0:
8c:0f:1a:24:87:4f:3a:a0:d6:aa:60:19:6c:20:b8:
7e:51:63:cb:a4:d9:fe:7f:e7:f5:e6:a2:92:1c:4c:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:87:19:29:E4:C2:D5:F0:D2:EA:C9:8C:34:B8:D6:E9:45:A4:CE:16
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:5b:4c:77:ed:de:40:5e:8d:94:e0:9a:cf:ba:d2:c0:fb:26:
78:cc:72:f3:19:21:4e:9a:35:65:93:c3:8a:8b:27:45:23:32:
71:25:27:01:5a:51:e7:cb:6f:57:ce:74:75:44:0d:e0:24:7f:
6a:6a:8f:f3:62:3c:75:cd:89:c7:4f:0d:fe:3d:2b:f7:8b:ee:
af:d8:8e:d8:c7:7c:43:e3:9d:9d:3d:6c:50:13:b0:bf:8d:ec:
7b:54:4a:6b:74:a3:cd:0f:89:1c:83:6c:a4:78:3b:e1:1a:79:
38:52:c6:38:f0:7b:89:b8:93:1b:0e:fa:7e:f2:ba:74:08:49:
6f:3e:38:60:3a:03:21:bd:7c:bb:44:2b:8b:11:17:ae:75:dc:
5a:84:d7:73:af:61:92:f3:12:9b:cf:ce:7f:f2:f1:ea:d5:dc:
2a:75:e4:ad:98:e1:8e:24:88:10:9a:a3:c6:54:43:90:73:1d:
e9:7a:04:c6:71:ea:0b:22:c5:e7:ae:05:6b:ae:a2:1f:04:82:
3c:66:fd:f0:b1:98:ab:14:6a:cf:ca:57:e1:e0:ec:f8:af:99:
2e:ab:50:10:62:c1:bd:e8:7b:04:d8:5d:f0:50:5f:77:d8:4d:
2c:43:b0:57:40:61:e4:5d:bc:ed:f3:1b:eb:f1:bc:e4:c8:1e:
02:4c:3d:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL+rbVJUUb/MnIbLEqKGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjM3NDY1N2Y1NzA3OGYzY2EyYzcxMTA5ZDM1OTI3YzIy
NDg2ODEwHhcNMjYwNDE5MTAwMTE0WhcNMjYwNDIwMTAwMTE0WjAzMTEwLwYDVQQD
Eyg0Nzg3MTkyOWU0YzJkNWYwZDJlYWM5OGMzNGI4ZDZlOTQ1YTRjZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlZjs/mDkWGCJ/mDQmMS5q7PFec/
NsCHbX0H+vfmXdLr9pgAQRUBmaXpce9ei+tgi38+YW+fplq5lGKHp1HqdLDjImlA
LirRfX2BujTCvldQP3J2XQm1u4Ws04akUuGvR2KV44Wudj5tUil2M09gg0PynuVw
Les1n4pWnQUirHlNR0aG2C2EBzJpwNpiQ9x3Z2PYsGqhfAPWHAaX+UdvmJr+WcEU
6SD9t6jDV26XStoX5K3bF/YCL0XaLOvn/njvW0uqBN0/DUdtGk3HngaR2Sf7gC3V
riWjgjpbvgEji/CMDxokh086oNaqYBlsILh+UWPLpNn+f+f15qKSHEwmhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeHGSnkwtXw0urJjDS41ulFpM4WMB8GA1UdIwQY
MBaAFM/zdGV/VwePPKLHEQnTWSfCJIaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEt
M2VhMmViZmU4NzA3LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEtM2VhMmViZmU4NzA3
LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVtMd+3e
QF6NlOCaz7rSwPsmeMxy8xkhTpo1ZZPDiosnRSMycSUnAVpR58tvV850dUQN4CR/
amqP82I8dc2Jx08N/j0r94vur9iO2Md8Q+OdnT1sUBOwv43se1RKa3SjzQ+JHINs
pHg74Rp5OFLGOPB7ibiTGw76fvK6dAhJbz44YDoDIb18u0QrixEXrnXcWoTXc69h
kvMSm8/Of/Lx6tXcKnXkrZjhjiSIEJqjxlRDkHMd6XoExnHqCyLF564Fa66iHwSC
PGb98LGYqxRqz8pX4eDs+K+ZLqtQEGLBveh7BNhd8FBfd9hNLEOwV0Bh5F287fMb
6/G85MgeAkw9EA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:29:34 2026 by rpki-client